Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: RHG7cLddcW4SQbNePafu+M66Yvj1oR/FPVyyCQFbe+8=
Subject key identifier: CC:7F:48:44:06:FC:DB:B1:E0:18:9B:F5:AF:FA:84:D0:5C:E3:BE:FC
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 019A4FCFCC7A9434D0B707045B5A553398D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 1334
Signing time: Tue 04 Nov 2025 17:00:09 +0000
Manifest this update: Tue 04 Nov 2025 17:00:09 +0000
Manifest next update: Wed 05 Nov 2025 17:00:09 +0000
Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: xuU0HExKmI9M18F4e9JIoEuwGpYs4Znuyf8Q7BLTliw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:cc:7a:94:34:d0:b7:07:04:5b:5a:55:33:98:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Nov 4 17:00:09 2025 GMT
Not After : Nov 5 17:00:09 2025 GMT
Subject: CN=cc7f484406fcdbb1e0189bf5affa84d05ce3befc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:58:84:e4:2b:2f:22:b5:47:33:23:81:b7:
5f:19:41:7f:b7:36:4a:74:fd:16:f3:5d:cb:1c:94:
31:02:a9:ad:97:00:b6:c7:28:c0:bb:96:2d:d4:3e:
a8:df:f9:55:a5:b2:8c:e1:6f:a7:22:65:dc:2b:2f:
11:bb:be:32:48:d0:8f:52:87:e2:4c:d0:a0:12:a8:
e5:32:e4:5c:85:f0:a9:bd:83:f1:57:d9:78:18:5d:
3b:0f:cc:53:1a:7c:35:93:af:63:2a:0d:68:16:a2:
75:52:8a:82:1b:44:88:68:45:23:28:13:28:47:57:
77:22:d6:b9:fb:39:13:48:c4:0a:07:12:cc:65:4e:
73:94:80:24:d2:af:1a:5f:1d:cd:19:54:0b:52:16:
f6:4d:d1:cb:84:88:1b:19:45:fb:40:04:a1:84:fc:
94:b2:16:c6:57:11:7b:22:bf:cb:fd:ae:4b:bc:39:
b4:cb:03:6d:42:97:75:a8:b1:3c:0e:b9:36:77:60:
52:28:29:2c:c8:6d:e8:1e:b6:0a:1c:f3:45:8b:a0:
dc:cd:f8:b2:d8:02:b8:c8:d0:23:da:ef:f6:99:b4:
bd:fb:89:70:a9:53:b9:d3:bb:6e:49:99:ad:ec:79:
cf:97:f4:f6:e1:79:86:e9:2f:c5:2a:21:3d:c6:f2:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:48:44:06:FC:DB:B1:E0:18:9B:F5:AF:FA:84:D0:5C:E3:BE:FC
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:c9:14:00:82:7e:2b:c2:b0:42:a3:08:d3:5e:6e:a4:28:
1a:3b:c2:8e:fa:36:27:c3:f5:a2:65:2b:17:b1:2d:fb:e3:37:
a0:ec:0a:e9:ab:e1:61:53:bd:cc:e1:b2:ea:17:72:a7:85:bc:
5f:cc:29:86:84:6d:fc:1a:eb:23:5c:7a:8c:5e:d8:d1:42:6f:
f6:7a:be:a2:25:f5:eb:14:f1:b1:70:46:16:c0:5d:1a:16:64:
06:cd:1b:21:00:93:fe:7e:68:63:15:5d:b2:dd:b5:c8:a3:40:
6f:b6:e4:2a:33:78:fa:9f:f1:fd:58:fe:40:c7:35:b2:23:c8:
01:67:4c:ab:12:70:06:eb:11:3c:6f:14:c0:77:c6:af:78:c8:
d4:22:e0:69:a7:86:35:37:89:13:11:5a:76:71:1f:20:43:e1:
21:99:94:25:30:e7:d0:04:e4:e0:9c:8d:1c:a1:ec:4f:02:bd:
e4:f9:e1:df:c8:9b:56:ad:18:87:b5:ed:e7:8f:e5:4b:ce:d0:
24:47:d6:5f:11:f4:70:bb:c2:fd:f8:74:54:8a:99:23:4c:dd:
19:00:2c:38:bf:1f:f8:69:f4:ff:f2:cc:4b:0a:28:70:8a:10:
f7:19:e2:66:eb:98:ee:97:26:20:b4:13:a2:64:b8:f4:96:23:
50:e9:64:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:57:26 2025 by rpki-client