Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: Zf5yy6uW11yTvgSayO8TX0NiYluNgBpqpBkMGi1KW+c=
Subject key identifier: 5F:6B:6D:FD:17:0D:D8:59:56:23:FF:A4:CE:3E:BA:69:C3:53:66:4F
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 0199FC215D5707301117C9B981823CDCF23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 12B3
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: luK36LctCVqFRYZeQBGzPCUDUfbfJ5ZneTbqPv3TMbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5d:57:07:30:11:17:c9:b9:81:82:3c:dc:f2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=5f6b6dfd170dd8595623ffa4ce3eba69c353664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:13:50:a0:8e:77:d6:4e:fd:c4:e3:37:3d:
cc:49:a2:6c:20:65:e5:e8:8d:ca:cd:08:9e:89:96:
a9:f2:09:6f:d6:63:f0:08:76:12:ca:ae:79:f1:71:
50:c8:23:b3:60:0f:1f:6f:80:cc:7a:f1:f4:80:35:
dc:8d:93:e8:44:c5:2a:11:b0:a7:5a:44:2b:a1:c8:
3c:1f:0c:0a:05:4b:59:7e:25:9b:45:ff:64:4b:81:
f7:f9:e5:2e:33:a7:19:94:c8:c2:20:90:c7:9f:ad:
76:d4:7c:83:64:47:0e:2b:c5:d1:81:45:11:3c:7e:
9c:5a:45:2d:12:5a:4d:f7:99:6e:6c:d5:f2:a7:d4:
b4:67:90:a9:41:da:2e:77:ff:e3:96:a7:31:ab:3e:
d8:90:51:de:6f:9d:c1:86:62:75:0d:0c:fb:20:e0:
e6:06:d2:49:cb:4c:f2:54:05:76:10:d1:c9:ce:44:
96:0d:0c:e5:0d:df:99:5e:03:02:9f:02:5f:6e:bf:
c8:d1:df:95:f8:03:f8:fd:a2:4b:da:fb:b0:91:d6:
71:7b:49:72:a3:4c:a0:91:e7:17:15:d0:6b:6a:e7:
6a:b0:d7:31:7d:34:0a:2f:f0:77:54:07:9d:3d:b3:
36:c2:68:1e:e4:01:30:08:3f:03:a1:40:71:b9:07:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6B:6D:FD:17:0D:D8:59:56:23:FF:A4:CE:3E:BA:69:C3:53:66:4F
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2a:0d:1e:1b:b7:55:31:e3:d4:29:3d:a5:4a:61:c4:f5:ac:
08:a4:31:34:05:82:d5:4a:84:2a:84:74:cd:ab:2b:25:39:46:
07:06:9a:28:0f:6a:71:13:e1:b9:85:51:3e:83:ae:53:fd:02:
26:f5:33:01:b4:5d:fb:33:3a:09:5d:b8:4e:70:43:38:65:fd:
22:3c:ba:42:3a:07:30:df:be:26:23:2b:23:4f:03:ee:51:fb:
96:f2:81:ee:41:0e:c0:03:8b:47:96:6b:68:1f:b5:2c:23:26:
8a:05:ca:d1:9f:48:bf:6c:ff:f3:91:c7:f4:ef:db:2b:b2:e2:
6f:52:7e:91:6f:fb:51:29:6e:56:8e:aa:35:d7:9d:5b:c6:b3:
ea:d8:f3:48:e5:04:16:8d:f9:7e:3a:ac:a7:24:5f:59:75:2a:
4f:06:18:7c:d5:ea:3e:f9:a4:7f:51:f0:c7:cc:e1:f1:07:c3:
73:fa:57:c6:be:76:2d:f2:66:14:a7:22:46:42:74:24:6a:87:
3f:ca:1c:41:7e:55:80:fc:2b:2a:1b:0a:3a:24:e8:9e:16:fe:
39:b6:1e:76:49:e3:7b:c5:a5:45:e8:00:27:c2:b6:e5:57:36:
d7:33:a0:83:c4:d9:3d:b1:f9:f4:8f:bc:fe:ef:b2:77:c3:a3:
e9:e3:31:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:54 2025 by rpki-client