Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: wTUYSnNp8k9uqY2g+KaVvM9PoKvA38zvKyun7zsYJGU=
Subject key identifier: C8:E7:28:80:EE:D3:F4:E2:51:1D:55:E2:A6:31:F6:77:D9:07:F8:9C
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 019A4DE17A9D4004212FFA005FB10C9FC027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0E31
Signing time: Tue 04 Nov 2025 08:00:13 +0000
Manifest this update: Tue 04 Nov 2025 08:00:13 +0000
Manifest next update: Wed 05 Nov 2025 08:00:13 +0000
Files and hashes: 1: AOhn7xhM2kSUfRAFFhvDCxU-O20.roa (hash: 1VAhBGtFhGjWFmWSsORfWNgJJ1LUT2F54ZQ/3ep5zho=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: llHuDR+Jl8zPqDeQKgySwWqs2Bu9mxKSatoskNm7Seo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7a:9d:40:04:21:2f:fa:00:5f:b1:0c:9f:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Nov 4 08:00:13 2025 GMT
Not After : Nov 5 08:00:13 2025 GMT
Subject: CN=c8e72880eed3f4e2511d55e2a631f677d907f89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:9c:94:41:7b:30:49:f2:a2:7c:42:92:4e:
f1:76:46:65:2f:a6:52:f0:9d:75:f3:ba:35:c8:76:
2a:46:83:79:12:6a:2a:24:3c:69:2f:28:bb:9f:2c:
85:5b:0e:a2:32:3d:f8:ce:73:11:b9:8a:71:bc:2e:
57:09:31:a9:12:cd:8e:39:f5:d8:f9:e6:a6:06:f8:
68:fa:2d:39:21:66:b1:3d:98:91:f9:ca:4c:c9:a5:
f5:05:cf:6b:37:9d:49:7e:70:32:9b:9a:e6:c9:83:
b8:78:9d:8f:14:74:bc:ca:ca:30:01:44:af:0b:b3:
2c:e3:5a:85:bb:50:db:6b:eb:4d:28:23:6e:04:6d:
bb:7e:f1:25:9a:64:84:ce:33:8e:9a:e5:51:bd:d5:
5c:86:8a:80:ea:18:00:a2:d7:93:b1:e5:b0:d4:13:
b4:93:1d:e7:37:68:72:d5:3d:1e:10:ad:6d:69:39:
85:07:31:16:25:c6:eb:00:db:1e:8f:b7:78:5d:9f:
92:35:53:6c:7d:39:1d:08:f9:05:b0:36:f9:a5:1c:
ee:55:3e:2f:0b:0a:20:3b:b2:0c:9f:99:ac:ce:82:
a8:1c:13:03:dc:0a:35:52:fb:31:6e:db:1d:a7:c6:
30:ca:bd:e7:7e:89:2b:e8:07:a5:c2:f4:19:90:44:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:28:80:EE:D3:F4:E2:51:1D:55:E2:A6:31:F6:77:D9:07:F8:9C
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:51:03:16:07:43:e4:4c:d7:66:97:00:75:11:39:31:ef:6e:
a4:90:ff:76:c5:16:8b:03:6c:08:34:a8:37:fc:a9:3d:f0:a3:
1d:99:b3:28:7a:e5:b7:de:c1:93:71:65:95:66:99:63:dc:f0:
6e:34:58:14:5e:af:68:b6:fe:c5:cb:fd:41:32:a7:90:4f:d6:
a1:6b:46:b3:b0:79:5b:ec:5f:49:1e:08:38:95:75:2d:c7:31:
03:8d:c3:5f:94:a4:68:b0:e8:08:61:68:eb:66:44:f2:d6:f4:
b2:c9:9b:05:75:34:41:97:f5:01:f3:ca:66:a7:cc:80:f3:a3:
3a:99:27:01:28:e5:65:9e:d7:68:e8:66:92:a9:4b:49:39:86:
77:2e:e0:d5:61:93:1e:ef:50:90:64:59:2a:18:78:ce:dc:85:
f7:38:f2:9b:93:a1:78:3c:87:f1:44:f1:34:e1:46:14:46:76:
4f:a7:24:a6:d9:88:f4:a2:62:f0:41:0b:24:53:29:0c:e0:d1:
04:52:36:0e:03:a5:7d:9f:10:f7:bf:21:42:e5:06:68:39:33:
f8:2d:8d:23:8c:cb:8e:0c:9d:65:ee:61:28:01:5d:1e:61:b2:
7d:e2:97:0f:6d:84:82:21:e6:b7:39:05:e8:5a:06:2f:ed:b8:
21:bc:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:26 2025 by rpki-client