Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File: h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier: DznTrtGga7ekywSoGF7nqqS75BfjfEjUdBu6G1L8juQ=
Subject key identifier: 7E:24:EA:F3:34:67:19:DF:A5:0F:42:3F:2C:9E:A2:7F:06:26:AE:73
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial: 0199FC583F46712262B7A1653620E6268976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number: 0902
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: AO9S5FPNyFUFF8sl00iZG2uj63o.roa (hash: dj/tZS47oYr7HP4aHIaoRYk9wXqksDBdwIFty9clVxk=)
2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: wnBO51tHiOX8yGAUkzDwBmyN86xNeSX24DnUQkHJoJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3f:46:71:22:62:b7:a1:65:36:20:e6:26:89:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=7e24eaf3346719dfa50f423f2c9ea27f0626ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:be:a6:c6:3f:fc:6c:be:5a:ef:3d:3a:00:
fc:eb:35:d9:1b:33:91:71:0f:8a:e8:f6:60:76:93:
34:dd:e3:b0:7c:09:56:ea:35:6b:43:29:86:9b:76:
e6:df:17:69:bd:b5:86:89:b9:d3:d6:56:bc:05:9d:
52:fb:5a:bb:8c:bf:90:63:75:89:1f:e7:21:61:58:
18:64:d6:c4:4a:9a:39:27:87:39:f6:5d:79:f8:ea:
09:5d:49:42:ac:14:62:b1:17:4e:f9:a4:8c:69:f1:
2c:ce:3c:42:01:33:9b:55:8b:c5:3e:8a:f9:23:44:
20:fe:62:28:59:d2:3b:74:67:0b:28:fc:79:d6:2d:
ed:1a:fb:37:7d:50:15:f0:18:bb:17:84:4f:78:16:
2d:22:6a:40:79:2d:fe:be:c3:c7:2e:b5:f1:cd:ff:
5e:1f:9c:2d:ca:ba:4d:d8:01:54:b1:50:a7:ea:55:
19:52:28:2a:19:af:b8:4e:72:16:f1:cb:02:16:50:
74:4d:be:68:3d:fc:d0:68:dc:48:10:87:13:30:70:
b4:ee:a3:33:17:3b:69:29:16:e2:5c:c9:43:76:95:
2a:32:c8:3a:33:0b:d0:47:56:c9:d6:e2:41:90:eb:
37:17:a6:de:bd:b9:3b:e4:26:86:80:54:93:11:82:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:EA:F3:34:67:19:DF:A5:0F:42:3F:2C:9E:A2:7F:06:26:AE:73
X509v3 Authority Key Identifier:
keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9d:e5:57:81:4e:60:ce:f5:7a:87:5d:79:6a:02:40:c9:b4:
2c:16:4b:44:35:e8:5a:c5:40:98:2d:e5:0c:83:70:73:7d:af:
c5:45:70:6d:51:f4:7b:20:cd:94:89:a7:19:6b:2a:f0:da:d6:
6e:cf:d4:54:5a:f1:34:14:a7:47:07:86:9c:22:d1:d0:ce:74:
57:7a:c1:a1:78:5a:60:89:e2:1a:b8:ce:2c:10:05:24:57:41:
38:4f:3c:17:a6:e8:20:6b:8f:b3:d8:14:59:ff:48:ef:09:9c:
84:1e:bf:90:93:29:5b:b4:83:84:3f:c4:02:ee:6d:3f:bc:e3:
d1:14:bc:db:f5:15:38:07:fc:65:e0:aa:13:9d:d3:d2:2b:31:
69:08:0f:c1:78:9e:a1:19:c9:2d:50:4c:c1:49:05:0d:40:cb:
04:90:df:c8:e7:80:2a:62:1c:f0:34:9a:60:9a:3b:28:5d:26:
3b:5f:b6:ab:79:e7:61:80:32:5a:7b:24:7c:f7:24:46:4f:cc:
09:a2:df:4f:c5:8f:37:ba:cd:5a:ce:c7:76:09:74:5c:d9:93:
94:f5:7e:99:06:91:8c:c9:80:39:a1:06:a0:8a:a0:07:87:4d:
2d:e0:18:e5:73:84:55:c8:ed:d6:a3:d4:72:ae:06:7e:d8:2f:
7f:23:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:16 2025 by rpki-client