Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
File: El8g0e9f8vAdgiSGvZ7or01la38.mft (raw, json)
Hash identifier: S4Cxl8TWX+li9K6/266yv/scH+7Oc6t9fE3+GAKgn7o=
Subject key identifier: B6:AB:F3:05:2B:98:74:D7:A8:26:E5:BE:E3:CA:89:BA:D0:26:C2:4B
Authority key identifier: 12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F
Certificate issuer: /CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f
Certificate serial: 0199FBEB88374E3349DD24A391BBDC88A44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
Manifest number: 45
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: El8g0e9f8vAdgiSGvZ7or01la38.crl (hash: ryYitticvpNUakH+8UO+BW0mMcz3pewAHUL1Kb/gq7M=)
2: KoGn876I9exRZ9k5gXTBjcpENcg.roa (hash: hGdRcXXS4XbCvbFUJUyfTiVZHtH7iEjv5tVhxZaLIq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:88:37:4e:33:49:dd:24:a3:91:bb:dc:88:a4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=b6abf3052b9874d7a826e5bee3ca89bad026c24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c9:5a:b7:ab:15:9a:3c:bc:95:6a:51:e5:82:
3b:d8:00:9b:06:f6:fd:fb:38:13:49:47:23:0f:25:
18:d5:2e:15:17:e6:a3:1c:57:4f:63:3c:b3:b5:02:
ba:7c:5f:4c:da:c8:f4:a9:37:e4:e3:eb:54:e2:2c:
34:f3:1e:18:8a:3e:e7:53:fd:73:46:15:46:16:97:
b0:ed:cf:f8:0a:20:6f:48:bd:d7:45:cb:b5:1d:4f:
7e:15:1a:70:60:21:2d:8e:75:b3:12:51:bf:3f:5d:
83:4f:c0:52:45:fc:2c:9d:09:3d:cb:44:34:89:c2:
53:f4:cb:4b:bc:ca:2c:6a:f3:dc:9f:d7:f2:66:62:
49:e9:6e:40:b5:1b:6f:f4:cb:b1:c6:c6:7e:2a:e6:
37:8f:a7:24:aa:65:6a:4f:52:a0:eb:45:67:c6:be:
10:1a:b2:d6:aa:12:b4:c2:ce:48:36:38:28:50:3e:
1b:b1:69:36:66:32:9a:59:1f:f9:aa:f3:8e:87:fa:
7f:a1:93:5a:f9:a1:07:36:5c:b2:c0:84:53:9c:27:
a9:b1:9e:6d:b4:a2:9a:35:85:93:4d:6c:75:27:f5:
1a:05:37:14:5d:e4:38:65:99:ef:e9:25:8e:6c:5d:
cb:30:86:30:70:35:c4:76:74:23:68:79:07:06:b9:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:F3:05:2B:98:74:D7:A8:26:E5:BE:E3:CA:89:BA:D0:26:C2:4B
X509v3 Authority Key Identifier:
keyid:12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:af:d5:38:12:64:1c:e1:07:f9:4a:1d:27:aa:b7:78:e3:9a:
2a:cd:c1:48:f0:4a:16:84:11:b2:8f:f8:e7:78:90:d0:5b:ec:
ae:4d:31:8d:68:0b:d8:ad:4c:fa:b8:46:ee:44:90:47:ae:f8:
d0:2b:88:6e:7a:e3:cc:1b:bb:d8:2f:03:2b:78:dc:a9:67:a8:
b7:62:7e:85:18:02:e7:f3:f5:75:0c:16:2a:83:5e:ee:48:84:
ae:90:48:86:13:39:de:45:51:6c:49:73:38:c7:4a:6e:a8:81:
cf:8b:7f:cf:8a:d5:19:d1:17:8a:a9:4f:88:8c:1c:b7:3a:e1:
a1:1c:6a:3f:c8:dc:67:fc:80:87:7a:bb:dc:25:00:c1:6a:b0:
2e:98:e3:50:28:ec:16:7c:a9:9b:cd:e2:7f:67:9a:ee:67:80:
0b:6a:5a:8c:b3:cd:77:15:8e:b6:9e:98:49:d3:a9:6a:28:7e:
cf:6e:2c:13:aa:f9:b3:be:94:57:96:53:f8:83:5d:7a:5f:7a:
c2:31:67:08:34:e4:8d:35:58:34:54:5c:ef:2c:86:c0:68:ec:
ee:ac:39:36:e3:da:3c:04:1e:89:33:07:de:5f:8a:ac:cc:92:
28:8f:10:21:76:14:1b:e5:be:a7:a7:50:99:88:f6:03:8b:dc:
19:29:a7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:07 2025 by rpki-client