Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: bQX4R9EFHSBClcIXioxK0lcsSnhzTG6cYP0Kb/iBAww=
Subject key identifier: 3B:D5:C8:65:93:B5:3B:07:C8:A7:3C:31:49:3F:DD:75:9E:57:24:F7
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 0199FC215A3A3C6B467AF347414718A3F71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1308
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: mTHSg1E1k90Yx1Z6GXlW7weMbVLwNRmfhsIzNv1+kBw=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5a:3a:3c:6b:46:7a:f3:47:41:47:18:a3:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=3bd5c86593b53b07c8a73c31493fdd759e5724f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:03:e5:92:ea:b3:d8:23:4c:48:ce:05:f4:
38:04:86:87:4b:98:db:53:0c:8b:be:ab:21:ed:53:
5d:a7:2f:23:52:6d:39:35:c0:21:50:57:5c:c2:ce:
22:1d:75:08:8a:1d:9c:fc:76:96:8a:e2:20:56:91:
4e:3c:ed:28:41:ce:8f:26:98:ea:5e:60:1a:ec:16:
dd:50:f4:b9:d5:4a:2b:5f:17:b7:f7:83:09:c8:72:
32:07:44:4f:16:b8:0e:b7:1e:0e:24:60:c8:62:ad:
3f:3f:0e:30:1e:92:41:d1:87:37:bf:19:dd:e5:5e:
bb:36:c7:3b:2f:24:85:cd:85:6d:ff:24:73:bc:4e:
1b:a4:cf:21:af:23:9b:49:89:bc:8d:db:e4:94:1c:
bc:31:70:c6:cb:81:5c:d4:7f:d7:88:f6:93:d7:58:
d5:1d:65:74:72:ba:d2:77:20:19:0d:fb:5b:b5:e7:
37:fa:ea:6a:36:52:28:fd:43:41:a9:ce:d5:7e:8d:
28:e8:89:88:4d:8d:1b:0b:1f:d6:f2:97:08:18:03:
03:f6:09:20:7f:a2:ca:60:27:dd:92:5a:ff:72:95:
52:32:87:9b:b0:93:79:62:a6:50:f9:80:28:b1:ef:
a5:31:01:ad:bc:89:00:ac:65:20:90:df:91:ca:93:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D5:C8:65:93:B5:3B:07:C8:A7:3C:31:49:3F:DD:75:9E:57:24:F7
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:60:8b:f1:23:e3:f4:e8:b1:92:5f:ba:fd:d6:ac:12:95:c9:
fa:ca:9d:e8:11:55:ce:e0:58:8b:c7:60:9c:04:8c:a1:ea:a6:
db:e2:8d:79:8f:c5:81:87:1a:a6:04:21:2a:92:2e:71:d6:21:
5b:1d:59:f6:78:15:6e:37:8d:0d:f0:9b:1b:f4:de:d6:9f:ff:
86:41:0b:a8:51:4c:47:08:1d:ab:a2:bc:d0:4b:3b:7d:0d:21:
61:8a:ab:ea:e0:ca:9c:75:25:c8:f1:c5:a5:40:6c:71:06:11:
c2:e3:fe:d3:98:fd:91:9d:e8:d9:b8:a9:13:bb:c0:c0:ae:a5:
53:50:85:4b:11:0e:7d:4a:08:74:09:72:ff:16:6e:d4:23:a4:
c0:66:28:c8:a4:6d:67:f9:87:c3:23:95:0b:4f:cf:6e:c7:da:
5b:2b:45:d6:2a:25:ab:f5:7e:df:e0:a6:b7:af:80:f9:d5:cf:
bc:ee:ec:c1:21:b4:c9:e5:12:1e:ad:49:6e:37:5d:06:c9:44:
8d:e4:71:6c:bd:7e:88:9f:42:02:4d:1a:c4:1f:fe:34:47:4f:
ca:6d:61:b3:77:1f:e9:0d:5f:6e:c6:00:24:a9:ad:20:b5:14:
02:ac:09:31:25:76:d9:46:55:e6:c5:e9:a1:20:1c:c1:05:3a:
03:36:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:17 2025 by rpki-client