
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: d8S6PpO7KdsR9rmJHnJzP9cqFZZu5qtEAnXe3TFi5Gc=
Subject key identifier: 37:91:22:01:69:A2:07:8E:D0:5B:A4:D9:E0:7A:40:7F:5C:EA:9E:91
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 0199FB7CA7611BF7A343DD270C0059BCE149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 014C
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: FN5Ke6qZ9WFTebO_qSnsGPrtdwA.roa (hash: znT88sYfk6NGdvoBku5OfzDNqhRT8YmCdSbEF1DvoG4=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: 1yb3LeM5XJswIvzvccCSIOi8K6vUhE8SS0BdUq46rMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a7:61:1b:f7:a3:43:dd:27:0c:00:59:bc:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=3791220169a2078ed05ba4d9e07a407f5cea9e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:ca:ab:fd:5e:e0:7b:2d:03:93:0a:d1:af:
a7:55:7e:1b:be:c9:97:80:ff:6c:12:c5:d1:00:89:
fa:ff:90:5a:57:d4:f5:17:76:cf:b5:32:74:73:75:
b2:24:d1:b1:bf:10:ec:f7:ce:31:c3:7f:63:65:ea:
7a:b8:7b:78:18:19:2a:fa:c1:c5:97:11:fc:93:9a:
b3:a0:f4:66:84:71:fb:70:3e:09:22:4f:6d:6f:2d:
16:54:55:01:41:d0:1a:35:9a:54:22:19:92:33:30:
94:39:9f:4e:b8:b3:2f:7e:15:64:a6:c0:12:e0:69:
b6:c0:5f:f6:95:ba:3f:e6:e1:f0:f2:1f:f5:01:61:
51:af:5b:3d:96:c7:b5:0f:a1:4f:b7:56:6d:9a:73:
8f:5c:2c:e1:e2:10:39:4b:4e:b1:71:dd:3e:e1:9a:
35:90:ec:c2:5a:88:a2:75:8c:8c:68:c0:f1:74:66:
34:de:28:4b:28:82:d1:b4:ae:a5:ce:4f:9e:83:5f:
92:ad:bb:d8:e4:34:48:6d:16:c8:f2:13:fb:48:2f:
eb:da:f7:17:6a:32:42:8c:ae:a8:3f:0a:78:5b:82:
3e:71:3c:a7:0e:c6:2e:f4:dc:34:88:b5:13:a6:77:
68:5d:94:6a:ec:38:39:08:b4:ca:c2:29:9f:23:95:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:91:22:01:69:A2:07:8E:D0:5B:A4:D9:E0:7A:40:7F:5C:EA:9E:91
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9b:d4:25:66:8b:9e:b0:67:39:c4:aa:6f:49:fc:df:13:48:
18:ea:43:3e:53:cb:c8:5f:3d:af:2a:56:ff:e8:af:01:07:1a:
24:a9:fe:f2:7f:ce:cf:00:19:98:28:a1:1f:d1:5e:60:e6:8f:
5c:0c:61:9f:74:51:78:0b:a3:a5:9d:4a:b4:80:40:50:4f:24:
b5:ed:2e:0f:96:ad:ac:23:c5:b6:b0:b4:bb:40:bd:8d:c6:98:
9d:d0:21:8f:f1:ba:b6:92:39:a6:f2:62:35:25:d8:c2:c5:04:
38:0c:55:d0:c4:bb:49:70:b4:eb:ac:7b:5a:5b:6b:8a:44:58:
9c:cf:f5:b8:d1:f9:c8:ef:ca:1b:ed:38:6e:ed:b8:51:dd:03:
e6:e2:7a:01:9b:cb:6a:5b:97:74:39:1e:d9:af:e6:27:43:60:
f9:5f:6d:71:19:cb:9e:35:41:f1:85:39:55:f4:4f:04:03:ec:
5c:75:83:65:33:ba:3e:f7:bc:14:94:c4:4b:26:1b:92:c2:7b:
df:f6:e3:0c:3b:b4:a1:3f:ac:15:8c:47:41:ce:2b:8e:16:39:
00:6c:1b:ae:a8:d2:28:ae:4f:9f:fd:0b:b0:c6:13:85:1b:83:
9a:eb:fd:b6:83:8e:f2:36:83:5a:b5:b1:0f:02:3c:9b:00:62:
3a:e1:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:51 2025 by rpki-client