Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: v+0XIdnX4QLZBanl9En2/u4f28r0aOeNmEEdUBJoiTo=
Subject key identifier: BD:5D:61:27:E1:13:0B:6D:8A:03:21:9A:5E:65:E1:38:88:9F:57:F1
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 019A5299D31753EB10E1E979313B7D9F5DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 171E
Signing time: Wed 05 Nov 2025 06:00:03 +0000
Manifest this update: Wed 05 Nov 2025 06:00:03 +0000
Manifest next update: Thu 06 Nov 2025 06:00:03 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: 23FtzC731WxCO8JU2NrxWx6evvphP+4XTGmGeNrO3Oc=)
2: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:d3:17:53:eb:10:e1:e9:79:31:3b:7d:9f:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Nov 5 06:00:03 2025 GMT
Not After : Nov 6 06:00:03 2025 GMT
Subject: CN=bd5d6127e1130b6d8a03219a5e65e138889f57f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:cd:f3:f8:42:4b:97:ac:d7:4e:92:c8:f5:
b0:0a:bb:bb:60:33:00:f3:70:8a:03:95:a9:56:fa:
f6:03:99:7b:c6:3e:26:6f:f9:80:ef:0d:a9:72:cd:
4b:a7:62:9a:0f:15:41:54:8e:bb:05:67:a5:bd:0a:
28:16:78:a4:71:62:e6:83:a8:80:d0:5c:f7:27:64:
ef:df:cf:d4:98:98:39:d6:0c:1d:d7:5f:a6:ae:72:
97:2b:a5:e3:69:44:4c:94:c4:ac:9c:5d:0d:46:39:
ff:22:03:87:5d:d1:5a:a9:7e:04:2e:69:f3:c8:0e:
8c:27:d0:20:c5:24:ac:2f:4e:fc:60:e1:43:d1:5d:
fb:2d:62:e6:eb:c5:7d:7b:ec:c4:7e:aa:7e:06:68:
b2:9e:94:0b:8a:45:cc:9c:68:3a:ef:89:f0:c9:c7:
bc:49:2d:8a:04:30:6e:93:2f:73:fa:db:48:96:cb:
17:53:59:62:ce:f1:81:d9:d7:0f:d3:14:f0:32:56:
ca:e7:89:d9:59:ea:44:d4:d7:4e:14:8b:04:3d:47:
52:f9:94:5a:b0:a7:74:f1:bd:23:84:67:b3:31:25:
4c:68:de:86:49:1c:e9:7e:ab:1c:a5:68:dc:36:75:
76:6f:5b:11:cd:dc:8a:c4:97:12:cb:df:22:2e:43:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5D:61:27:E1:13:0B:6D:8A:03:21:9A:5E:65:E1:38:88:9F:57:F1
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:97:e0:8b:af:d1:56:26:9d:56:f8:82:35:2a:ce:e4:fa:a0:
f7:98:40:43:0d:e7:bb:4e:88:da:46:af:8d:18:9a:ea:5a:40:
8b:28:bc:16:62:89:d8:e5:03:92:98:c8:2c:85:ea:b9:de:3a:
b3:55:6f:c4:3a:06:e9:da:8f:e3:da:1b:3c:55:c5:e0:5c:d3:
a4:36:50:a3:1c:9c:ee:d5:80:00:5a:0e:c9:4c:2a:fc:a8:d4:
fe:1c:41:d3:80:3c:97:53:3d:02:9d:10:db:01:5d:b9:3b:93:
3b:81:9d:33:50:7d:a1:95:c5:64:2a:54:d8:96:60:ca:ed:fd:
93:5a:58:e9:5c:af:49:c3:51:8d:ff:e5:e4:d8:5c:9a:48:50:
ef:5f:2e:49:27:90:52:64:50:22:91:90:df:fa:79:d1:6d:74:
bd:42:2b:8f:fa:b7:8c:f6:15:97:8b:35:b9:d9:e3:7b:a1:c8:
c7:b6:07:57:cd:01:cb:c3:d1:e7:17:1d:e5:28:be:47:e7:7e:
62:e8:b4:4e:c6:07:6d:a0:49:ac:eb:d8:5e:b1:dc:3d:0a:db:
d0:d3:53:b4:fc:2c:92:85:a5:35:47:6a:77:74:2c:a2:61:f5:
6e:23:23:65:d2:aa:5a:ae:9e:81:af:03:6b:03:0a:d9:89:cd:
9f:9f:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:32 2025 by rpki-client