Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: VYhEj0Us61Ek/rxuy8lNm6cv0EDmZUEb+84dSHxMces=
Subject key identifier: 52:20:B8:1C:04:94:DB:A2:39:2B:CB:79:8D:CD:6F:05:0F:41:89:93
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 019A54885A60F9639CECBE94B3FF3F622B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: E1
Signing time: Wed 05 Nov 2025 15:00:13 +0000
Manifest this update: Wed 05 Nov 2025 15:00:13 +0000
Manifest next update: Thu 06 Nov 2025 15:00:13 +0000
Files and hashes: 1: p4n6DMVXRfxSNvujgZMUtP18wqQ.roa (hash: E3oRG9G+UtQqAk8G6rS3MWGj3sQbFqJ/BYIdf5UtbNU=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: Y2s58hvgsYhBpzbgHus0GhHCVZAu/yW8muvfCnPS5Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:5a:60:f9:63:9c:ec:be:94:b3:ff:3f:62:2b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Nov 5 15:00:13 2025 GMT
Not After : Nov 6 15:00:13 2025 GMT
Subject: CN=5220b81c0494dba2392bcb798dcd6f050f418993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:0a:42:c0:f6:28:b6:51:8a:df:f2:aa:fd:
96:07:6a:23:8c:04:3f:d1:28:9d:6e:99:76:60:c7:
46:4c:b3:f4:44:f2:5b:85:73:8f:34:ea:4e:7f:4b:
2b:38:27:6c:d7:e6:bc:65:4e:4b:6a:99:9b:ff:24:
e4:2c:46:4f:c4:57:56:24:d5:16:9c:cf:4b:3d:72:
61:2a:f4:38:1d:fd:d6:4b:3d:8c:ca:5b:51:ec:b1:
22:1a:73:d9:e2:d5:4e:76:c8:d7:17:a7:d4:7c:96:
9b:b9:ad:3d:7d:25:11:ac:9d:0d:c9:fc:2d:3e:ab:
08:c5:28:1e:8d:64:e3:35:05:bb:33:60:1d:c2:db:
c4:0e:2a:c1:c8:5e:5e:d7:60:5e:30:92:3c:11:df:
98:c2:12:9c:aa:bb:ca:dc:50:db:e6:24:03:70:1f:
da:b4:e3:21:67:7c:63:d1:b7:89:b2:7f:c9:57:85:
1b:c2:97:77:4b:b5:c4:49:f7:75:2c:0c:7a:12:3e:
40:03:67:1f:43:2a:66:11:2d:9c:b8:eb:be:f8:90:
d0:5d:29:21:0a:35:40:55:cf:32:aa:57:fe:7c:50:
c6:0d:0b:e6:fc:7e:7b:25:d8:57:71:91:a1:fb:c0:
e5:9d:6a:83:57:ba:7c:4b:8d:be:0f:28:30:cd:a3:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:B8:1C:04:94:DB:A2:39:2B:CB:79:8D:CD:6F:05:0F:41:89:93
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c2:0e:db:54:9c:00:77:63:4f:a6:67:43:23:98:98:21:97:
1a:d5:24:54:69:d0:91:f3:0d:30:21:1f:b4:9f:39:f4:59:20:
93:06:66:81:b9:77:fe:a1:6f:44:da:fb:f8:fe:c7:e7:2e:b1:
03:4c:10:26:ab:10:47:3d:42:09:38:61:1f:12:b4:05:20:7e:
82:e4:77:10:48:ae:82:e7:bd:56:4e:74:ce:c7:ad:c7:1f:d6:
7f:a9:72:e7:2a:c1:db:0b:4a:3a:cc:67:f7:e6:3d:17:92:d2:
b8:0d:d4:b1:fb:9d:6c:55:55:84:4a:63:42:05:54:c9:bf:b4:
81:16:d5:e1:f2:3e:8f:b2:bd:c1:51:84:78:f7:f8:a7:ac:61:
ef:03:60:be:ee:2d:8c:ef:e1:02:a1:74:b9:99:7d:63:b4:c2:
60:17:66:4c:d3:4b:91:cf:4e:5b:cd:55:0d:97:55:04:d9:e8:
12:b3:f7:f1:7b:30:87:77:a1:f9:0f:bf:93:b2:d5:25:b5:2b:
e7:48:06:92:c2:b7:ba:44:d6:80:19:d5:ac:91:02:ef:36:7e:
19:ff:85:b8:12:aa:ad:b6:ed:23:31:38:ec:29:90:ac:35:45:
9e:9d:f7:04:7e:a7:e2:ec:ca:cd:51:da:5a:20:2a:86:fe:dc:
af:6a:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:39 2025 by rpki-client