Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File: t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier: CqQjh9s0O39pXZM4hW6QVaXbpubyrgTiRtebOnTEl8Q=
Subject key identifier: 43:E3:4C:C3:03:02:38:8C:9A:64:16:A6:86:7A:0A:1B:06:97:3D:27
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial: 019A4E1904B35D7D49A395CF3543F1B386DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: INh9G5iQoMvQ_1itqGn6rIFWztw.roa (hash: DlHpU6WxKqPj/r93yoW9dLdgNHjiaW8IJyXbLuzYYAg=)
2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: LwSEwpQY1P+fGU87Q0bccPlkrBsnYjTli6xVEvkZ+GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:04:b3:5d:7d:49:a3:95:cf:35:43:f1:b3:86:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=43e34cc30302388c9a6416a6867a0a1b06973d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:1b:36:3e:1f:98:0d:2b:ab:7b:fe:cd:9f:
ed:2a:3b:d2:a8:90:13:9f:8b:7b:9c:2f:d2:69:b7:
16:97:06:c1:4c:7a:bd:1c:2b:8f:fe:fe:48:81:c9:
60:6a:1b:76:ae:be:c0:73:3a:19:46:55:05:1c:57:
c7:0e:9e:42:a3:aa:76:ce:9b:c7:ef:f8:0f:69:71:
a5:63:43:b5:2c:87:b3:e7:2e:26:2c:0f:ac:d8:f7:
8e:aa:b5:3d:76:19:82:44:54:fd:ed:a5:25:be:87:
cb:50:4a:21:aa:89:6f:12:6c:1e:a5:86:d1:4f:84:
33:52:8f:50:09:54:3f:f3:d2:8a:41:c7:48:3d:4e:
d3:be:6e:60:63:0f:7c:be:ed:79:47:84:c7:b0:b4:
0d:ba:3e:28:a2:a1:78:b2:07:c9:ca:33:5d:d9:48:
8f:ce:5d:79:18:ec:91:d8:7a:09:af:d9:a1:98:40:
52:eb:f8:44:60:12:86:55:32:32:f0:f5:47:a2:39:
ca:e3:ca:66:c6:87:34:25:f2:3d:a0:7a:a7:0e:6c:
07:39:de:fe:4e:fe:83:30:5d:d9:82:ac:4f:e7:e2:
3a:d8:bc:f1:6b:13:66:bf:b4:79:73:2b:07:0a:88:
28:a3:0a:3e:40:c3:84:3d:49:07:1a:ac:3f:0e:8c:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:4C:C3:03:02:38:8C:9A:64:16:A6:86:7A:0A:1B:06:97:3D:27
X509v3 Authority Key Identifier:
keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2f:32:86:c9:be:fc:06:81:99:d6:dd:d0:de:77:e2:2e:c2:
c9:54:53:59:1c:21:f6:88:4d:da:81:81:ca:05:1c:97:66:ca:
05:fb:eb:30:92:9a:eb:8a:fd:88:6b:68:a1:39:86:b9:32:e1:
5e:5c:9a:8f:73:2e:af:71:a6:da:4d:91:69:4c:c4:87:3c:be:
43:84:b1:32:e1:57:89:92:26:98:28:c6:30:2f:d1:38:b3:7b:
d0:a4:93:b5:79:76:81:56:af:c0:7c:65:3a:b8:50:4a:c7:45:
b2:6f:a4:a7:ee:69:ef:3e:cd:b2:51:8f:20:fd:be:d9:7e:c7:
21:23:39:18:2e:83:96:b7:5f:64:e2:b9:cc:a1:83:29:b3:ed:
84:f9:da:bf:24:4b:d1:7a:ee:58:d2:9b:6d:8f:76:87:32:06:
94:c4:10:94:94:a0:f5:af:57:3c:82:02:1f:f4:e4:5d:c3:f7:
24:25:d8:e7:16:13:ff:25:c7:1a:64:02:c4:de:18:e8:d4:b1:
27:a0:a0:78:48:d4:84:1d:74:65:63:e1:68:60:56:d9:79:be:
da:cd:fe:ca:ab:b3:85:2b:65:51:86:c8:76:7e:28:d3:dd:55:
8d:4d:1e:f0:05:c5:50:d4:70:7d:01:62:30:aa:0c:bc:cf:bf:
c8:30:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:30 2025 by rpki-client