Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: RBCIQAXGApDCh560KXn2ZL6HbecPrjYUXutGz4kWf6I=
Subject key identifier: 09:56:C9:42:01:12:8F:A4:89:14:54:F6:88:90:C4:7D:5A:3C:67:6C
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019A4EF54A1DC8AC7E1D2B8C78CE568DACED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 12F6
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: xdpXvoKXXaIDHcdV9iOSP5dd/MD8wCltbVHirZZ4YFo=)
2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
3: 7cGpErFojxZQKCSeJeJ8U-ucjfw.roa (hash: u8HNSCh1+MNiLey93QoDDaHwFmVThoOReQEndhAwPeo=)
4: CStL8iSjdEFU3iEnaPTRCZ1zjeM.roa (hash: 00JgC0sSu/qPgUkD2huvLVVq++ZTOBn8u911fCHk+AU=)
5: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
6: lJFoGwOfjYG7bpWJkltu5e79TPY.roa (hash: a/JvmbooIi2RUBJmFiHrsUi1IesqwE85tvSq7Xkrm58=)
7: nAU_2VpM5SccaGQsl0YkIDwDC1w.roa (hash: LkSzGNi0v1t7wdhC/pLyKhtEY4pQXgh7tGdjsi4l0Ig=)
8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4a:1d:c8:ac:7e:1d:2b:8c:78:ce:56:8d:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=0956c94201128fa4891454f68890c47d5a3c676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:15:71:1c:af:46:58:22:1c:d8:5d:bf:c4:
9d:6d:1d:29:6f:45:99:ee:cd:40:e0:c6:07:f4:47:
ed:08:20:db:75:00:a4:f4:6a:3a:fb:ca:8e:07:fe:
8a:ae:b9:f6:bc:73:2d:33:e3:fd:1c:b8:8e:fe:d9:
46:8c:c1:75:f9:c8:a3:0b:3f:00:8b:58:e1:fb:88:
2d:ee:aa:63:a9:82:41:21:a2:eb:9d:ff:4c:c1:5c:
40:03:25:cf:2f:ca:38:bd:84:ec:7d:49:25:e8:21:
5c:9f:21:33:d9:ad:24:fa:90:6e:99:cd:96:a0:c5:
1c:6f:ea:1e:fb:79:08:bd:60:31:40:b7:b2:e4:55:
81:82:96:6a:2d:98:ce:96:f8:e5:aa:18:27:eb:ce:
65:11:df:ce:79:c3:e0:e1:e8:0d:ac:8b:20:85:26:
dd:92:51:c5:93:2e:2e:89:ce:07:b9:ac:59:e0:8f:
04:61:a2:65:11:4c:e0:0d:1e:eb:c2:b2:8d:38:6e:
6f:40:99:58:f3:1d:61:9e:65:ef:f2:13:e9:f3:11:
e1:cd:8c:e9:7d:dd:49:b0:b9:2c:03:55:a9:5d:56:
4b:6a:e9:b6:71:1d:19:72:35:d9:82:fe:ab:f1:b7:
a6:71:d6:99:04:ed:10:24:12:6d:0f:5b:b1:3c:d4:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:C9:42:01:12:8F:A4:89:14:54:F6:88:90:C4:7D:5A:3C:67:6C
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:fe:16:2e:74:c3:4e:32:87:46:ee:71:c5:f1:df:fd:d5:
c1:11:2b:6c:95:17:5d:49:4c:b8:63:ff:6f:0f:66:d8:86:c7:
27:3f:3e:08:03:12:56:52:2d:4e:54:6a:10:4b:2f:a7:9f:ea:
94:8f:48:f9:14:58:2d:ec:c0:8b:19:07:7d:5e:71:6e:e0:d1:
e7:b3:1a:2b:7f:94:d1:57:77:a6:95:57:65:45:79:87:05:69:
d4:34:d1:2e:98:b7:9f:25:04:c2:4e:1d:1f:43:38:53:6d:ca:
a9:03:93:bb:90:0c:fe:e6:1b:1b:87:b6:56:05:9c:16:33:66:
f9:8d:a3:44:c4:a5:93:2e:44:a6:34:77:e7:5f:4e:74:f3:c4:
26:a7:b3:31:49:7d:c8:f2:b4:9a:ef:61:f1:35:00:38:9e:34:
ec:f7:c3:a6:25:79:aa:df:e8:98:25:ab:0c:f8:92:d9:25:7f:
14:af:cd:96:f5:12:33:83:30:55:f4:a9:77:fc:54:ea:ee:a2:
09:ea:a8:2b:6b:ed:e1:5c:e1:2b:4c:d5:aa:20:c6:fe:e2:b7:
5f:72:a8:43:1d:2e:d3:f2:8e:6b:86:87:b0:c8:d1:b9:04:ad:
af:33:37:57:28:b2:62:90:ed:61:b4:b5:c3:ae:bf:b3:c9:cb:
8f:2d:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:32 2025 by rpki-client