Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: uJlUDu9f0ZBYrhyY/QQkuwi941cWbs2saMHjNNHBjAA=
Subject key identifier: CD:2B:2B:80:7F:8E:27:19:B0:F4:C4:E2:70:AF:9A:FC:7E:52:B3:DB
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019A5150DA58063F8AF09D5AB37C0D4D6922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 13FA
Signing time: Wed 05 Nov 2025 00:00:44 +0000
Manifest this update: Wed 05 Nov 2025 00:00:44 +0000
Manifest next update: Thu 06 Nov 2025 00:00:44 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: aNPjnRY/lmwJdWQqutvfW0OG0Px6oYVFT28Ddnwdv4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:da:58:06:3f:8a:f0:9d:5a:b3:7c:0d:4d:69:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Nov 5 00:00:44 2025 GMT
Not After : Nov 6 00:00:44 2025 GMT
Subject: CN=cd2b2b807f8e2719b0f4c4e270af9afc7e52b3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:93:c6:c0:12:eb:84:5f:14:a0:e7:7f:6a:
89:b0:50:86:61:d1:eb:3f:ba:6d:a7:d9:66:f8:41:
20:1d:01:c7:23:12:00:c7:f4:03:79:0c:c6:12:9d:
be:be:01:1a:1a:c4:61:6d:f1:70:c2:8e:de:62:94:
44:8a:a7:b2:2e:00:62:ab:36:c6:0b:6d:52:de:b5:
fc:f7:39:54:ad:b6:4e:fb:f9:9e:5b:c9:07:2c:82:
51:f4:d1:44:0a:c6:84:09:c4:db:e9:b8:a9:19:a2:
42:e2:c1:bc:59:da:5a:ad:98:c0:cc:39:33:8d:d5:
3a:3d:69:ca:19:33:b0:54:30:7b:b9:29:7a:f2:43:
2a:8e:69:a5:8f:bb:d3:e6:b9:25:c4:a2:c3:72:cf:
47:14:55:25:fb:01:c1:4b:33:26:1c:d2:70:f2:c2:
41:99:14:21:02:c9:88:c4:50:68:29:d4:4d:cc:9a:
5c:ac:00:3c:b3:29:ae:a0:dd:9c:e0:50:d4:c6:b5:
40:92:52:0d:f9:87:a8:24:f5:6c:9f:08:da:cf:37:
55:a4:76:e2:07:e5:69:2a:d4:07:81:d4:af:e2:c9:
bd:31:53:d1:c1:72:f8:82:51:84:7c:ed:dd:a3:84:
d6:23:26:93:c1:b3:4b:7e:11:47:cf:3b:fb:97:fe:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:2B:80:7F:8E:27:19:B0:F4:C4:E2:70:AF:9A:FC:7E:52:B3:DB
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:22:ee:78:de:d0:a4:4c:40:70:cd:10:32:eb:4e:1f:73:11:
7f:a2:bf:b0:db:94:d0:e1:40:ea:b2:1c:e6:68:62:b7:d7:fd:
4f:48:7c:3e:58:70:64:8b:0c:0b:f7:24:19:d1:9a:e2:7a:58:
16:4e:64:5d:63:e5:23:ba:2b:25:94:f4:07:95:da:3e:f7:a4:
6e:a8:9f:0d:09:71:36:72:f1:e3:ee:b9:67:b8:fb:bc:9f:c4:
a4:9f:42:a3:6c:ac:e2:33:5c:ce:7d:35:d5:9f:8e:94:7c:e6:
bf:19:9f:43:56:75:24:90:9d:55:7b:cb:fb:78:00:c1:09:90:
46:af:9c:d6:e5:ce:b1:c9:71:92:05:1a:03:e4:74:f6:be:34:
42:d0:59:3a:b1:f6:cb:d0:26:56:15:8b:b1:a4:25:d8:df:6e:
2d:9e:b8:95:7b:ff:22:59:96:fc:1d:af:4e:76:bd:1b:41:ec:
6b:1f:0d:ee:25:0b:08:0d:f3:dc:90:62:8b:1e:f0:ec:15:f8:
b5:bc:e7:d0:72:5f:7d:0b:60:7b:7f:cc:ba:90:a8:e1:40:3d:
5d:14:c6:b6:60:95:c2:4c:2e:31:3b:56:0e:83:1c:e0:47:81:
c5:68:59:35:b7:71:a3:af:88:70:d7:38:bf:61:60:16:e6:e2:
c5:b6:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:49:43 2025 by rpki-client