Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier: /WBdL0uczyBcovg+TievjAQpwkxPTvVxw5dU9HCemCI=
Subject key identifier: F2:A6:C6:DE:06:80:09:C3:8A:27:61:1A:ED:6D:34:A2:4C:27:4D:DA
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 019A5308290BC108EEC1BE1387E78D0EA187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number: 0E93
Signing time: Wed 05 Nov 2025 08:00:34 +0000
Manifest this update: Wed 05 Nov 2025 08:00:34 +0000
Manifest next update: Thu 06 Nov 2025 08:00:34 +0000
Files and hashes: 1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: cqjc2HX/or+IXRUfyV449Jmij7BzqdIpJOSgm3rJ8u0=)
2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:29:0b:c1:08:ee:c1:be:13:87:e7:8d:0e:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Nov 5 08:00:34 2025 GMT
Not After : Nov 6 08:00:34 2025 GMT
Subject: CN=f2a6c6de068009c38a27611aed6d34a24c274dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:9a:b8:3b:22:e3:33:d4:c3:2c:9e:6e:3b:
09:55:73:4c:58:16:23:6d:49:74:c4:34:eb:48:72:
e6:ba:74:5d:42:a4:4f:f2:e5:3e:59:5b:4f:d7:53:
be:87:53:54:58:7e:71:e6:f5:31:ce:c9:3f:5f:8d:
e8:54:0a:75:d5:5a:00:fe:a3:cd:6f:41:07:7d:80:
b0:94:03:68:67:8b:ec:21:3d:16:7b:c8:5b:91:af:
50:59:e9:c2:96:63:92:01:c8:b0:e7:94:e7:b6:a4:
25:7e:84:9d:40:cd:d2:9e:53:b8:2e:04:c7:b8:81:
58:9d:06:a0:85:50:fd:97:6f:01:a1:f8:0e:49:bb:
99:50:30:16:d3:9a:98:a1:76:40:bd:c0:7f:2e:3b:
a5:8a:08:2c:51:b1:25:9c:48:bf:b4:25:e4:9f:fc:
ba:7a:46:d7:75:75:b5:f1:09:ba:b9:05:39:2a:71:
3e:88:5e:f4:1e:32:81:9b:e2:ce:f9:88:f2:c5:42:
45:80:9a:14:9a:ef:a9:9f:67:1b:e9:fb:cd:51:af:
8f:c7:c9:4e:ae:84:51:92:37:0d:74:12:11:ad:a0:
31:19:40:1e:33:5e:8f:cb:84:aa:7d:68:6a:84:e1:
ae:1e:a9:dc:23:0e:21:9a:8e:e8:b7:93:d6:af:87:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A6:C6:DE:06:80:09:C3:8A:27:61:1A:ED:6D:34:A2:4C:27:4D:DA
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3e:bc:cb:13:39:40:d5:c2:48:fb:4b:72:2c:90:2d:0c:00:
4b:87:26:47:f6:eb:b2:22:09:13:29:6f:62:7b:fc:a9:47:20:
a8:e8:3a:91:a0:af:f5:6d:bb:7d:5e:e7:a1:7e:2c:41:33:f7:
98:bf:19:48:0d:9d:bf:ac:65:8f:e8:9a:a0:31:84:12:be:dd:
9e:96:a0:3d:b0:6e:63:82:b5:20:bf:2e:cf:fc:76:33:d2:eb:
a1:77:38:9e:c6:28:ab:58:03:ca:9d:d2:52:c8:fd:0b:53:cf:
74:63:8d:47:2f:f5:50:76:2f:31:45:67:b9:a2:ed:a9:b1:c2:
2b:ce:d6:0d:e2:5d:d6:f9:fa:8a:05:fe:bd:68:ad:33:bb:57:
31:c4:a6:be:35:ab:85:1a:fc:9d:87:e2:68:f1:6d:a5:f8:b3:
54:d5:df:8e:dd:3b:70:50:bf:b2:37:77:35:33:db:ba:d0:9b:
89:09:31:81:ed:40:5a:1c:63:6a:e7:e2:bc:d1:73:bd:27:61:
79:a3:ed:2c:4d:3c:c3:c3:76:0a:1a:5a:4a:c0:3d:92:a1:b8:
1b:40:3d:4d:a3:fd:7b:83:0d:d8:cd:f0:77:c9:cf:22:23:52:
06:a7:6a:75:f8:77:45:b2:a1:0c:58:f3:3f:e0:bf:b7:12:32:
42:29:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:22 2025 by rpki-client