Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File: 94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier: O/xkG6TUVOaANJrVWWCVt+qy2yfqKCKAq+Rz5JWiF9o=
Subject key identifier: B9:39:0D:88:61:0B:07:EA:2D:50:94:66:F8:20:12:9C:BF:F1:6A:A1
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 0199FB7CD33289E72A85CBBD095052670B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number: 0FC8
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: 1Va9-VCRLq6nfmhgDYPY9z50vR4.roa (hash: ESx+goLfyktPxcscMRpU8+hvhVOyXeN96tMCeWI/nlM=)
2: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: jxMpqMhO33WbnNKg+LU8Tf+yEza3OhdsDpfS+Um+xpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d3:32:89:e7:2a:85:cb:bd:09:50:52:67:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=b9390d88610b07ea2d509466f820129cbff16aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:eb:e6:34:44:4f:cc:7a:04:fe:5c:2a:4e:
7e:d2:fd:9f:2c:12:46:0f:41:a3:ae:c4:7f:fc:64:
80:38:27:69:0a:65:19:10:a0:f4:cf:f1:aa:72:1c:
f4:24:4e:7e:d5:8f:a7:c0:87:a3:13:7e:f2:9d:ad:
b8:d2:a7:97:93:8c:ed:0c:62:4e:1f:5f:d2:63:08:
1b:09:06:14:ec:94:9f:71:a1:2c:8c:97:a6:12:2c:
4c:92:85:dc:00:ed:41:6c:7c:46:b9:0f:d0:7d:d4:
50:3c:87:a3:86:ee:a8:31:ab:80:78:2e:1a:a7:42:
f8:6f:d1:bd:67:b3:7b:3c:42:85:f3:5e:21:ff:2b:
dd:ce:ab:69:51:4d:99:10:2a:b3:ed:df:28:53:af:
b2:80:c4:e8:17:ce:2f:8a:38:bc:5c:ea:a7:da:01:
35:5e:6d:d9:40:44:75:04:d4:d5:32:f5:d3:c5:46:
be:89:41:d2:0a:49:4a:63:1e:05:7a:97:67:cc:3f:
e7:7d:87:22:f6:15:cc:26:85:f1:3d:fd:a7:1c:9f:
1a:69:1c:25:a9:f7:3f:9b:2e:91:c1:15:10:24:cd:
0c:89:af:93:9a:b9:5e:ce:5f:b9:d3:2c:69:46:7f:
d8:5d:f0:58:77:18:e6:bc:59:90:4f:b0:8e:b0:41:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:39:0D:88:61:0B:07:EA:2D:50:94:66:F8:20:12:9C:BF:F1:6A:A1
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:94:77:39:dc:bc:76:b2:8d:ab:90:55:b1:d3:47:a4:97:50:
9f:d3:d1:6a:6c:96:5e:d7:37:d4:7b:a0:0b:d6:16:19:84:06:
01:51:89:73:11:96:cf:53:6e:f5:bb:5b:94:1d:d8:ed:00:9c:
46:cb:8d:7a:20:35:69:c3:a2:21:64:6d:9e:88:9e:c3:2e:2d:
65:81:8d:0e:97:55:c1:0e:74:8e:c4:40:8c:bc:3e:aa:d4:2a:
64:3f:3e:8c:55:a7:c1:9e:91:53:84:94:35:5d:62:bf:21:83:
b7:bd:31:45:14:a7:f6:fc:22:7e:69:82:76:b9:23:a0:df:b8:
99:0f:c2:60:9e:3b:a8:56:f7:2d:f3:71:cc:cf:63:1a:d7:94:
46:11:9b:db:09:c3:4e:3c:eb:44:19:b3:62:f9:b0:02:4b:2a:
bc:0e:b2:66:34:e4:ea:20:65:eb:44:5b:f4:4f:f2:72:e8:d7:
5d:92:30:27:ec:82:4c:c0:ac:82:52:a2:75:f7:06:3f:5e:7a:
89:03:44:75:6e:d3:21:ea:17:30:69:7a:cf:d5:f6:97:0f:4a:
1c:71:43:78:26:0e:58:3c:4a:ab:ac:04:59:70:44:78:57:c9:
4f:87:89:ac:5f:1f:f9:f8:25:bc:33:f5:c5:d0:0a:0c:4a:10:
94:67:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:29 2025 by rpki-client