Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: DbRreeAOZ+yflr+LVNHrCH4h/THB2/NHYdMOj3lt1Fw=
Subject key identifier: 34:60:B2:E7:49:BA:CA:82:34:D9:C0:04:31:25:A3:51:E9:85:56:D3
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 019A5307B39EC1A2B7E8ED1B9C34BB649DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 16B8
Signing time: Wed 05 Nov 2025 08:00:04 +0000
Manifest this update: Wed 05 Nov 2025 08:00:04 +0000
Manifest next update: Thu 06 Nov 2025 08:00:04 +0000
Files and hashes: 1: 2_G9MV3MarApcSIaC14zzAbTXto.roa (hash: Xsc0Q6TWSpbouB+us1TXP5dMLNVqwF4nhlITaZf4sco=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: 93b9YxRoEOIPywLICugIwy3GMALnvVFtgwLdOLjbB5k=)
3: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:b3:9e:c1:a2:b7:e8:ed:1b:9c:34:bb:64:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Nov 5 08:00:04 2025 GMT
Not After : Nov 6 08:00:04 2025 GMT
Subject: CN=3460b2e749baca8234d9c0043125a351e98556d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:bb:80:79:13:06:01:c4:89:18:07:a0:01:
17:db:7d:7b:dd:8a:f2:d9:63:0e:63:e0:4f:04:fb:
c9:b4:03:f7:c0:19:84:24:5b:54:77:2b:f1:5e:8d:
c0:0e:76:fa:19:f0:e1:79:65:e7:b5:5b:e0:c9:cf:
d3:a7:b4:35:dd:ee:04:e1:b1:3d:91:7c:a7:a8:24:
2f:6d:82:83:a3:e7:c5:a3:36:7b:dd:93:29:5e:c9:
e8:2d:a8:95:da:4f:4e:11:68:d4:6a:72:27:81:69:
48:06:fb:e4:2a:80:7c:f7:cb:2f:5c:d3:2c:43:8a:
d3:31:c2:f1:7d:d5:5c:97:80:09:e7:5d:bc:68:ce:
ef:6c:44:05:e2:e2:3a:b6:35:7f:8d:68:5d:3f:97:
b9:a9:d0:34:e1:46:ea:73:94:28:f3:8d:24:3b:7d:
da:2e:25:5f:50:5e:3d:3c:cc:4d:fa:35:89:3e:9f:
b4:36:84:34:e3:e5:09:58:af:00:16:4b:37:1a:92:
6a:10:94:42:6c:66:dc:c7:93:16:58:77:ab:8b:0f:
05:5e:10:f0:93:0c:4d:aa:4a:84:60:bf:2d:9d:75:
fb:cf:e0:df:27:15:bb:43:af:de:6b:d4:85:41:a3:
e0:c3:79:49:6d:f4:c7:f4:dd:01:6f:94:a8:3d:9e:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:B2:E7:49:BA:CA:82:34:D9:C0:04:31:25:A3:51:E9:85:56:D3
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d6:fe:6d:02:c4:f5:3b:10:9e:39:e8:93:30:fd:bb:2d:a3:
7b:1d:65:fa:62:9a:0b:a6:da:a6:15:29:77:f0:8f:35:95:13:
7f:b1:ba:f7:f3:1a:3e:81:27:be:d0:6d:04:d1:f8:b5:4b:7d:
38:13:a1:38:d3:b5:f3:d1:0a:b8:bb:2f:74:c8:6e:17:4b:a5:
2a:fd:ca:37:ed:56:c8:18:52:de:ca:e2:5d:d3:58:7f:20:09:
d0:ed:13:eb:4c:6b:47:3e:43:75:c4:fc:ef:d2:4e:ab:02:22:
91:ea:b2:90:4b:c4:6a:da:cf:09:66:e9:6d:b4:a4:73:d2:f9:
59:bf:23:80:31:b3:57:ea:72:8d:b7:27:bb:09:28:50:d4:38:
02:58:b2:51:75:cc:b4:a1:66:bd:b7:55:eb:ff:a5:3c:9f:56:
51:72:8a:5a:9e:bb:bf:ad:65:ba:ba:03:ed:79:b9:53:dd:05:
a1:7d:23:b2:da:96:7a:7d:39:83:fd:80:c8:37:56:62:2b:ba:
09:00:d2:b0:b6:ed:25:f0:92:fa:ec:5f:ea:29:6c:a4:3f:61:
a8:c4:54:c0:d6:12:22:9e:7d:b8:6b:85:82:0c:c8:8e:a8:20:
68:15:18:41:6f:64:90:03:8b:22:1f:b6:a1:3b:c0:a0:0b:2e:
33:1f:bc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:42:38 2025 by rpki-client