Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: HkgMtufItUshzv5+qN9dBmMFlkjgFBPXOubL8YPJlfg=
Subject key identifier: FD:75:9A:93:04:27:E3:0D:55:EE:3F:84:39:4C:D9:FD:CC:A2:F3:1A
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019A51F550CCEFCA67E47AFC7B5E710BF2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0DBE
Signing time: Wed 05 Nov 2025 03:00:22 +0000
Manifest this update: Wed 05 Nov 2025 03:00:22 +0000
Manifest next update: Thu 06 Nov 2025 03:00:22 +0000
Files and hashes: 1: 5-tO1DtUPdvn-gHncHuAbgt6OiM.roa (hash: L6Z02H1tfyOJ9fsH+lsAomG7wfqgJlWMWjJh/1Ka9SI=)
2: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: 39h5znzfrJf6lWUe7+0TmZHSZ1UQUgziK4vMTlT2Dc0=)
3: gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa (hash: 5qjlUc3/t7psPBo135Wzs5OYxrc/B+KKSYzn0gcEaGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:50:cc:ef:ca:67:e4:7a:fc:7b:5e:71:0b:f2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Nov 5 03:00:22 2025 GMT
Not After : Nov 6 03:00:22 2025 GMT
Subject: CN=fd759a930427e30d55ee3f84394cd9fdcca2f31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:c7:19:a3:84:60:ad:bf:a8:b4:da:12:81:
2b:9f:d3:c2:21:aa:8e:44:84:97:8b:82:d4:ee:13:
5d:3a:21:f9:d1:2f:45:b4:73:2a:47:95:f6:44:86:
f6:e7:a2:4d:8f:5a:ca:ec:69:56:8a:24:21:2b:d2:
e2:01:f0:59:ed:c5:86:81:8c:dc:52:fb:69:ae:0c:
cd:7f:7b:9f:0f:ff:85:a6:d4:52:06:d8:be:26:8b:
0f:60:04:d2:97:41:17:4c:b8:56:c1:f7:a7:99:94:
22:6d:d8:5a:23:66:c2:8c:b4:2e:14:8f:6f:0b:0d:
a6:26:1b:76:0f:24:6a:fa:92:cf:87:25:05:ce:d0:
44:3d:e3:1f:41:49:67:5c:c6:60:67:60:ba:f9:ba:
34:89:76:ea:52:54:35:85:13:8e:15:55:3c:50:8a:
10:f5:af:ea:ce:9c:f6:8b:15:5c:b5:1e:36:c5:85:
6f:13:f5:9d:32:7d:0f:57:26:41:ac:1b:12:a0:98:
be:12:e6:2d:33:a8:e4:ac:0d:38:1b:9e:7b:00:1b:
26:4b:02:aa:41:97:60:3b:8b:bb:ed:b7:f7:ab:fc:
f3:7c:89:21:d2:d3:9e:f9:62:8a:13:95:0a:b1:19:
04:32:8a:7c:9c:b6:be:7f:e0:07:51:b8:35:ca:51:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:9A:93:04:27:E3:0D:55:EE:3F:84:39:4C:D9:FD:CC:A2:F3:1A
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1d:21:0c:1e:41:7f:05:82:6a:24:cd:84:4b:7b:9d:87:c4:
3e:39:dd:08:6e:1e:ed:01:20:f7:43:f7:42:39:d0:95:2f:ec:
a9:c0:bf:e4:3b:57:dd:a4:9a:e7:47:57:62:e2:df:1b:82:c9:
d6:8d:10:f0:98:37:a6:68:89:a5:fb:b2:97:d2:97:5d:b2:11:
0c:0e:04:5b:c4:44:c2:d1:fe:b2:4a:d5:e5:00:f3:ca:2c:d6:
97:c6:63:79:3c:6a:21:ea:c8:2c:96:a5:9c:cb:68:05:b9:6d:
60:03:46:95:12:88:2b:c1:c5:f1:f2:2c:c3:72:b4:dd:81:44:
50:68:23:7f:cc:61:97:59:46:f5:b9:27:3d:a5:1a:04:67:ac:
f5:e5:d0:16:0d:04:61:25:ee:32:62:1c:bb:7c:94:9e:9d:c5:
0f:9a:91:71:b4:3a:d0:c6:61:72:0f:f6:93:ea:6d:47:03:1c:
9e:66:5c:37:eb:72:e8:a7:ed:be:62:39:5c:40:43:48:1a:ae:
24:59:67:f5:5c:5c:ac:f5:3f:16:74:86:b7:56:47:b3:50:3a:
b0:1e:e4:50:7e:1a:ba:db:9c:0a:95:3c:b0:57:c0:09:b3:01:
20:fe:0f:5e:2a:a7:22:2a:49:4c:24:dc:8d:d8:aa:02:1b:11:
5e:2d:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:09 2025 by rpki-client