Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: BMSuyrhQdWtsGrKHsaLgz70B1iaoNaG0eStNfNjtKCE=
Subject key identifier: 68:21:39:E2:D9:39:CE:D3:CC:64:C0:D8:D4:65:21:F7:B1:16:5A:D0
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019A4D3D3D7C39C0525E6D8DABEAC465A97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 07D3
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=)
2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: oMzAmDFVG1KpzJoupCV3ynaeU10mcWv3wFSUJEQmeBI=)
4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3d:7c:39:c0:52:5e:6d:8d:ab:ea:c4:65:a9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=682139e2d939ced3cc64c0d8d46521f7b1165ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:a5:90:2a:b6:ca:6a:9c:94:b6:d7:03:30:
e0:3f:23:bd:0a:b5:db:8a:60:96:5f:c1:14:12:e9:
9f:22:ec:ab:17:0b:17:c9:fd:61:34:82:b3:ee:f8:
85:cc:d1:16:58:07:dd:48:ce:c4:58:30:1b:6e:24:
b0:bd:1f:2c:f2:44:0e:3a:d4:f5:5b:60:5e:11:bf:
82:51:a4:d6:07:a2:a5:5c:aa:96:3b:5f:fc:22:21:
d6:06:12:be:84:54:80:69:a4:d4:35:fc:2c:63:f8:
48:5f:ba:ae:a6:40:99:5f:bf:89:29:42:bb:67:24:
79:5f:4f:97:bf:94:b6:2c:8d:83:36:71:19:ca:22:
61:48:3d:cd:0d:32:17:bf:84:de:9f:0d:f4:9b:59:
30:fe:bb:49:08:b2:97:e8:67:16:d1:8b:d4:8a:eb:
80:9b:f7:3a:f2:75:6d:8d:ae:86:72:f3:ea:49:a7:
bd:af:6d:55:6e:e6:ea:f9:ad:c1:a2:70:a5:d5:c4:
24:b4:50:70:df:c4:a2:7e:02:f6:3b:37:8a:09:82:
a0:1d:9d:e8:2e:c4:cb:2e:fe:4a:5c:19:95:1e:c4:
d6:51:0c:c1:b9:66:aa:ed:83:4d:fe:74:8b:1b:9e:
01:05:99:b3:5e:c7:64:8d:92:fe:41:07:c8:b4:f2:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:39:E2:D9:39:CE:D3:CC:64:C0:D8:D4:65:21:F7:B1:16:5A:D0
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2a:de:80:5d:4a:c6:fc:39:b7:3d:c6:90:ab:68:ab:54:79:
7e:99:0f:94:c8:80:e2:96:b8:6b:e2:37:3e:03:89:10:60:1d:
03:62:31:70:d7:a8:7d:41:e9:35:49:92:c2:98:26:55:5a:b0:
b8:7c:ef:d5:08:99:f7:eb:07:7d:77:44:8f:5e:98:0f:24:88:
4e:c1:37:c9:f4:c2:50:6d:3f:71:42:25:da:f1:1a:55:03:21:
ff:29:49:76:54:ec:d6:81:ce:35:e6:80:41:31:27:79:5d:c9:
a1:b5:35:dc:ad:83:68:d8:8e:c1:70:e4:b4:be:81:e0:41:99:
b8:b1:fc:17:5c:42:0c:5c:3c:3f:f3:10:d4:de:d8:90:cd:4b:
d1:e2:de:24:4b:e4:5f:9c:ab:f2:99:c4:9d:bd:19:0a:d2:d2:
01:92:43:d2:ea:dc:9b:f2:f4:22:e1:c1:60:19:60:b4:82:a8:
6a:b8:2a:df:2b:ab:04:e4:8a:42:e7:38:23:7e:a0:af:36:20:
2e:36:5b:35:0d:a0:31:14:02:ca:8d:1a:e7:b9:9d:0c:cc:da:
36:58:f7:92:16:4d:02:cc:41:ed:3e:96:e7:7a:61:04:11:94:
14:d7:50:be:dd:52:d6:fc:34:14:dd:5e:e9:e5:51:4d:9b:74:
bd:98:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:18 2025 by rpki-client