Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: O92el8xm0XtiZOkMAIPeTX4+ZtFfeFlTk4p1IwqMsxY=
Subject key identifier: F9:38:0C:3D:54:BA:0E:27:68:0B:09:84:E4:51:6D:A8:AA:22:45:7A
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 0199FC588BDBB98475CFC3252C86082D015D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 09D8
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: q6m7s7rLPbEYh5j6XmHibhU7YLdSY8XGasI9HqtDTG8=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8b:db:b9:84:75:cf:c3:25:2c:86:08:2d:01:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=f9380c3d54ba0e27680b0984e4516da8aa22457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:f2:81:3a:5a:c7:d6:e1:ab:30:44:f9:9e:
24:73:b0:49:c1:ab:86:0f:47:9d:d8:b1:91:71:51:
10:ad:c7:cc:28:12:79:b2:4e:0f:57:fd:63:ea:14:
ea:ba:e1:f5:8c:60:f2:e4:ce:3f:a2:c8:27:79:23:
07:84:2e:ef:5c:8c:db:91:e2:a3:c5:cc:38:10:d7:
f4:4a:64:28:86:2b:8c:73:76:43:2d:95:e4:19:9e:
19:7a:70:4f:f9:dc:39:d4:7a:30:1b:3a:76:d9:7e:
21:9e:c4:9b:96:88:06:b5:41:f9:ee:f6:50:89:b3:
74:27:20:e6:c8:af:f2:4c:65:ea:67:dc:ce:96:9f:
62:e9:17:c6:6d:22:fa:88:f8:4e:25:32:2b:e4:44:
a8:54:6b:3b:09:38:83:9f:11:d4:e7:b8:61:e9:80:
24:60:5d:13:aa:7e:4d:d8:4d:12:54:49:76:13:18:
74:be:38:9d:ba:f7:8a:34:fe:cb:68:3e:46:45:e1:
40:2e:61:67:61:dd:50:3f:a1:bf:3a:ac:e3:d4:75:
06:4f:7b:e5:8d:75:22:aa:32:0f:d9:97:be:5f:8a:
94:f6:db:1e:f1:8f:65:b7:12:e7:6e:c7:a0:3a:88:
14:ae:21:bf:90:18:b9:41:e2:97:a7:84:2e:ed:a5:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:38:0C:3D:54:BA:0E:27:68:0B:09:84:E4:51:6D:A8:AA:22:45:7A
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c0:f1:77:c6:86:83:b8:22:0a:dc:d7:21:f2:40:d6:9f:78:
46:44:73:12:c9:cc:77:16:76:a9:45:51:50:98:5d:ae:d5:11:
da:2d:bb:74:ff:3e:e0:2a:ca:d3:2d:91:18:83:da:77:19:37:
83:83:3b:4b:54:7d:99:0c:04:a3:42:ec:f8:7a:10:c7:2f:33:
77:c2:ff:d9:ad:e7:7b:47:2c:ad:cf:6c:3e:68:d3:0b:6d:ff:
c3:83:1b:e4:ce:f9:32:cc:c5:c4:a6:81:1b:8b:bd:b1:c5:26:
35:b7:5b:fa:c5:7f:12:dc:33:2e:38:00:5d:ce:c7:f5:e0:6d:
74:71:ee:15:d7:5d:81:86:09:10:f4:a4:5e:91:4c:95:91:71:
6e:26:e5:c7:78:6d:ff:36:bf:c1:8c:71:ea:f9:c5:7b:f6:27:
60:af:f3:ef:1a:ce:73:92:a6:3d:79:59:89:71:32:0a:0f:d8:
0e:77:79:a8:62:1b:5a:5d:c4:c7:a8:a6:f1:4d:67:8e:2f:92:
2e:4f:26:1c:fc:e6:41:35:aa:46:f6:e6:76:b8:d8:25:a9:b6:
6d:7a:6e:4e:e5:f5:f5:68:90:2c:63:8d:a5:6a:25:d2:f7:28:
8a:48:98:ca:17:d9:4e:03:b9:c1:d5:5b:d3:29:52:f2:40:ef:
ea:60:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:36 2025 by rpki-client