Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: 86lw+Tliyhk0AlR2IFVFCGI6F7vnYUYBO8N7dP4ej5U=
Subject key identifier: 99:45:4C:85:C6:F1:39:55:65:42:A4:50:D6:A5:57:92:1D:08:B0:A9
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019A55640067519E494236F53662948F1CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 01BE
Signing time: Wed 05 Nov 2025 19:00:08 +0000
Manifest this update: Wed 05 Nov 2025 19:00:08 +0000
Manifest next update: Thu 06 Nov 2025 19:00:08 +0000
Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: Z2wtDjCBOZKmB1QFvkZaReCTLhQeNC2cWNzh4XnLQkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:00:67:51:9e:49:42:36:f5:36:62:94:8f:1c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Nov 5 19:00:08 2025 GMT
Not After : Nov 6 19:00:08 2025 GMT
Subject: CN=99454c85c6f139556542a450d6a557921d08b0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:83:a6:b6:4b:84:5b:85:de:cd:8a:94:80:
c0:53:cd:e3:c6:73:0f:05:24:55:3a:90:6b:0b:6a:
7d:d3:98:72:ab:24:c6:b9:7a:4b:31:13:bd:22:5a:
85:5a:b0:be:28:6d:1f:e4:9a:ad:40:93:a3:e5:a1:
82:cb:90:28:8f:95:5d:91:d3:95:59:e5:1d:a1:63:
45:cb:33:5f:29:6e:df:a2:ed:10:3d:26:86:6c:2a:
6c:d3:b1:5a:da:3f:99:b2:3e:60:7d:03:bc:3a:80:
ba:f2:df:d3:ee:7d:fa:70:cd:f1:c1:60:f3:36:b4:
17:79:0f:22:03:43:e6:1d:3e:11:d2:d9:bc:ed:41:
50:c0:f2:b3:9b:bf:52:88:87:4a:36:a4:94:b7:62:
03:45:71:fe:04:5c:64:4d:44:ca:31:5a:7d:78:01:
12:67:9a:ad:b7:7a:9d:62:c2:fd:3c:e9:32:f3:ac:
ed:86:37:63:b9:fe:82:32:38:9f:6b:39:29:5b:53:
34:f2:72:b1:16:7f:25:ad:7d:b8:3f:e5:00:1e:d3:
6f:34:c0:4b:50:65:18:c3:37:a5:63:11:c3:93:69:
6a:88:22:20:f0:10:7a:3a:9c:71:88:be:6c:75:ae:
7a:1c:72:c1:91:4e:37:71:98:fc:72:68:6e:0c:63:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:45:4C:85:C6:F1:39:55:65:42:A4:50:D6:A5:57:92:1D:08:B0:A9
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bd:a0:f3:62:4d:4c:44:0a:11:1c:fb:42:bd:cb:15:04:76:
1a:7b:28:45:2d:fb:1e:84:d3:17:6e:b8:e2:be:b4:3c:4b:9b:
6e:12:68:8b:f8:2e:2a:1f:94:20:39:d6:37:f1:0a:b1:8a:d4:
9f:ae:9f:53:0d:54:cc:00:a0:c2:3d:15:8e:93:d3:a5:87:96:
c8:7e:69:45:8d:2a:d7:aa:06:5a:84:78:3f:20:2a:93:61:df:
da:27:51:10:3d:5f:0d:89:d0:d7:97:e8:c8:d6:09:a5:a4:09:
1b:2e:04:e8:1c:ae:2d:7a:55:f3:1f:2b:57:83:72:0c:c7:7b:
21:66:a9:ef:ca:d8:00:dd:c5:2b:58:34:3d:e6:04:1f:5f:08:
ad:be:e4:13:d1:88:a4:02:5c:73:8c:21:aa:b3:48:be:f7:2b:
be:8b:76:02:17:f9:d7:a5:b7:d9:fd:1e:51:04:2b:98:f2:af:
0d:c0:4c:f9:9e:ea:0f:c6:f4:46:b2:18:42:f1:a0:df:6a:72:
41:16:da:29:77:ae:42:f5:d1:5a:d6:7d:e6:b8:33:23:f2:0d:
b7:77:cc:55:90:91:37:05:39:64:5b:02:f2:0b:c3:46:9f:7d:
39:ba:4f:d0:9f:26:ef:ed:5f:2b:94:93:11:9b:6e:20:9a:10:
52:0f:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:42:44 2025 by rpki-client