Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: o32SzQIVFwODwrEe0mxzwwMSIYtAz7zKe48ODISblNU=
Subject key identifier: CA:9F:4E:E7:02:2D:40:94:33:A5:20:4C:FA:04:9A:16:8A:51:C6:C8
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 0199FDD8F8EAA164B301021D319F4D527BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 1236
Signing time: Sun 19 Oct 2025 19:01:19 +0000
Manifest this update: Sun 19 Oct 2025 19:01:19 +0000
Manifest next update: Mon 20 Oct 2025 19:01:19 +0000
Files and hashes: 1: RaM_OWQwVXsafD9lAhumGxuaVJ0.roa (hash: 9wqEU77JRh8FONfv1sMAYtuNvig1s1ZaVt3dre8RnDg=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: mEw+MIQkpLlvAF8EbmHTsd+Tli+aszy6PKY03MSvu/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f8:ea:a1:64:b3:01:02:1d:31:9f:4d:52:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: Oct 19 19:01:19 2025 GMT
Not After : Oct 20 19:01:19 2025 GMT
Subject: CN=ca9f4ee7022d409433a5204cfa049a168a51c6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:8b:ef:9e:72:e6:89:ed:71:d1:08:af:c7:
0a:fe:72:fb:ee:ab:cb:ec:f4:82:df:ca:9c:f1:92:
53:59:08:bb:ac:85:e0:7f:05:24:99:03:37:31:4a:
43:fa:f1:81:84:ce:e1:be:17:ff:ed:63:6f:17:d2:
38:7b:2e:6d:1b:8a:52:4a:9c:10:5d:c5:a7:f2:c8:
99:11:0c:05:41:84:4f:54:c8:35:d0:26:b4:64:0c:
fa:c6:bb:23:4f:e7:33:2a:eb:33:b1:b0:58:2f:63:
27:08:0a:94:63:f5:3b:e3:f4:cc:54:0f:21:c5:b8:
c4:e9:86:b2:be:af:05:29:e1:59:2e:c8:36:e9:d6:
dc:c6:aa:99:13:9b:50:05:01:ae:77:8c:10:b6:76:
3b:3e:23:aa:5b:b4:bc:37:dc:7b:af:ee:28:45:42:
cd:2d:90:fb:df:34:99:85:fd:64:2b:08:6e:93:f0:
4a:65:b3:be:a6:5b:16:ff:f6:32:5f:8c:da:82:f4:
15:40:4b:87:05:c6:10:97:1a:5c:91:7d:7c:42:ab:
d6:ae:b2:e4:17:55:1e:7a:d7:50:59:5c:73:1b:78:
49:22:8d:91:67:3f:37:5d:7b:e6:f7:10:5d:3a:04:
48:41:1b:f1:2e:ec:de:9e:31:db:6a:68:94:7d:e6:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9F:4E:E7:02:2D:40:94:33:A5:20:4C:FA:04:9A:16:8A:51:C6:C8
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d2:7f:e5:e4:ae:67:ee:2f:4d:b1:b5:ec:52:14:a0:8e:38:
db:05:b6:27:30:a1:4f:b4:4d:4e:f6:07:6c:09:e4:66:40:95:
20:0c:f1:ee:0b:9c:f5:0b:8e:ec:3b:05:7f:54:fd:23:5e:fb:
ca:97:4f:82:56:fd:c6:76:ba:0d:75:44:83:f7:cc:b9:f3:6e:
84:f3:44:ba:26:62:5d:65:0b:14:ff:94:5d:0f:0a:fe:14:6f:
7c:a1:e2:8f:4b:fc:d2:d7:2d:15:c3:7b:99:c0:9a:14:e6:b3:
2b:58:e7:14:f5:cf:7a:2c:4c:e0:84:03:9e:8b:6c:a5:ec:67:
90:ba:d5:03:82:dc:a8:1b:a1:4e:a2:b1:d4:05:e3:5b:91:12:
06:4c:95:d3:c6:99:0c:7d:e6:47:d8:97:02:a8:77:9c:33:ee:
40:01:d7:31:9b:88:6c:56:4e:66:b1:c5:0d:fb:c5:04:80:67:
0c:34:4a:0e:75:fa:ac:c0:98:e7:d7:21:0b:52:1e:52:56:44:
f2:3e:9a:e5:f1:79:ff:13:da:f6:0b:c4:ee:9e:0a:98:ad:06:
95:9a:3e:b2:97:77:d7:d1:cf:f0:df:5e:b5:14:1b:12:3a:5b:
84:6b:b1:02:07:6b:dd:5f:a3:3f:7d:7a:65:44:be:e5:64:32:
61:03:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:08 2025 by rpki-client