Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: KiGfPbsMruNnEkcN0+RJyXynn/PxU6W16wllkgzDDRI=
Subject key identifier: 8B:32:75:F0:10:9F:70:25:97:89:CF:57:DE:F0:2B:94:42:76:A9:A0
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019A5375B7EFE0F7E3850C3C04BE5B9CDD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 01BD
Signing time: Wed 05 Nov 2025 10:00:14 +0000
Manifest this update: Wed 05 Nov 2025 10:00:14 +0000
Manifest next update: Thu 06 Nov 2025 10:00:14 +0000
Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: mvGRFJcGNdl84tdt8J9mIHTayt+B6GXUAaoeoyjUjeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:b7:ef:e0:f7:e3:85:0c:3c:04:be:5b:9c:dd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Nov 5 10:00:14 2025 GMT
Not After : Nov 6 10:00:14 2025 GMT
Subject: CN=8b3275f0109f70259789cf57def02b944276a9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:6c:ee:b7:29:da:86:3d:76:4a:dc:af:6e:
55:05:55:93:09:2a:08:25:36:c0:b3:42:df:0d:c2:
f3:1d:6c:32:98:66:40:89:d8:98:98:20:7e:54:83:
c2:d1:25:03:1f:b7:d7:41:e6:ff:fd:da:7f:4b:54:
f1:0c:1f:e8:f6:2a:f0:6c:1c:68:e6:2e:5e:94:61:
04:af:cb:03:40:69:73:09:45:92:37:cc:d0:3b:92:
9d:f4:fa:3c:a1:e0:75:51:8d:03:3e:5a:58:6c:04:
e5:fa:7c:9b:94:86:0b:b7:58:05:52:55:91:46:91:
39:fe:6b:64:c2:1c:9c:d3:a2:9d:3c:5d:e9:46:60:
44:4c:d0:16:b2:03:ac:d6:4c:81:4e:b4:7d:a2:dd:
82:e0:2b:cd:05:37:45:ac:15:f1:c9:94:e4:5b:02:
93:52:db:89:5a:50:6b:70:be:aa:43:a4:bf:58:57:
26:c0:cd:d1:28:99:e4:60:7d:c9:99:ac:e5:4d:ce:
1f:70:84:69:cc:a1:0e:08:45:82:b5:e4:fd:ab:d4:
ef:09:4b:b1:e5:3e:f0:ae:07:4f:8f:01:f7:4e:ef:
ac:52:0f:5a:8a:d8:ac:52:b5:b4:6c:5a:c7:49:ee:
27:0c:26:3e:38:a8:fd:cf:6b:5c:0f:58:37:aa:03:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:75:F0:10:9F:70:25:97:89:CF:57:DE:F0:2B:94:42:76:A9:A0
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5d:56:0b:5d:6a:d6:7c:52:05:91:b9:5f:d4:b0:62:44:9f:
68:7e:33:dc:7a:d9:c2:24:3a:3d:3f:fc:f0:b0:83:65:3d:44:
19:f3:30:24:ac:84:e6:0f:64:f5:d2:78:56:33:39:75:e1:55:
f1:e4:cd:1b:b7:99:a8:9f:38:8d:81:4d:58:f2:4d:cf:5e:99:
b9:69:31:98:fd:12:4a:31:d6:76:d0:00:4b:c9:e7:51:f1:92:
ca:70:39:f5:f4:fd:e2:02:e9:e2:ce:76:26:45:da:2e:4e:ae:
ea:c9:96:7a:66:a8:06:61:3b:a3:83:78:f5:bc:1c:8b:6d:c5:
9b:40:99:6a:12:9c:f9:92:7d:22:a7:a5:87:87:64:5c:91:41:
02:f4:94:31:0d:b8:4c:7f:bc:ee:8f:00:18:f8:34:e6:f0:10:
47:d7:62:c6:b6:bb:3d:e2:24:7f:9a:8f:3b:7f:a6:e9:10:b8:
90:2a:1f:8e:e6:80:b4:f6:61:8a:04:7f:fb:a7:bd:f7:f5:0c:
aa:ec:23:66:dd:4b:f3:eb:42:07:76:2f:76:51:b1:25:65:84:
b5:ea:73:21:d7:0e:83:43:22:6d:89:9c:79:4b:b0:58:5f:44:
d6:e5:5d:a8:8e:a8:06:fd:d9:46:81:8f:e0:29:4f:7e:7e:1c:
bc:ce:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:21:34 2025 by rpki-client