Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File: Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier: xeVxt8k++g5yL53gunSsPML27TjoggZ3+JcvlIfvWIw=
Subject key identifier: 8F:0A:A4:42:B8:98:0B:DA:94:C7:D3:05:82:2D:17:72:80:E0:C0:4D
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial: 019A02FE9EF9FCC39C874D09D8C7B1C09928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number: 157A
Signing time: Mon 20 Oct 2025 19:00:32 +0000
Manifest this update: Mon 20 Oct 2025 19:00:32 +0000
Manifest next update: Tue 21 Oct 2025 19:00:32 +0000
Files and hashes: 1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=)
2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: gggToCduBNmQqj4/kF/pcgZ3c0z2+As/nmprjjBfVgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:9e:f9:fc:c3:9c:87:4d:09:d8:c7:b1:c0:99:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Validity
Not Before: Oct 20 19:00:32 2025 GMT
Not After : Oct 21 19:00:32 2025 GMT
Subject: CN=8f0aa442b8980bda94c7d305822d177280e0c04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:4e:fc:9e:dd:ff:89:fd:48:31:c1:d4:f6:
a2:a5:6f:df:6d:6f:7b:cc:2d:be:1a:bb:6b:2b:d3:
3f:bb:89:da:00:0a:59:f6:65:89:4a:cc:62:ee:2f:
42:c3:26:b9:9b:f7:d6:f6:41:47:d7:32:7d:09:f1:
72:6e:29:be:18:e1:69:20:83:6a:55:77:b3:98:09:
08:33:97:9b:8d:9b:65:6d:d1:c4:f6:62:d9:11:0c:
d1:02:93:f6:7a:5e:a0:31:b6:f7:6f:18:24:2c:98:
ba:4a:db:2b:ea:95:4c:41:10:e9:89:8c:64:fa:94:
3d:d6:80:23:12:ee:7e:61:61:a5:78:fa:52:41:62:
7e:a8:bf:de:62:44:f3:4d:41:45:ac:e6:f5:e3:33:
63:17:6b:00:22:b7:25:e0:50:55:32:15:4d:89:d1:
d1:2e:9c:6b:23:5e:b1:7f:73:5d:d8:5e:32:ea:e0:
86:b4:80:2e:e2:36:13:b0:4c:07:d6:29:57:0d:5b:
23:1f:3d:a9:e5:df:73:d5:cd:9e:9c:a0:69:99:35:
6e:5b:3e:5a:d6:23:5a:0f:73:91:af:11:35:b3:b1:
98:0b:ee:a6:f6:76:69:06:65:a8:8c:b3:2d:4b:77:
8c:fb:6f:b2:e1:b4:c8:12:8c:36:4d:d9:24:94:1b:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0A:A4:42:B8:98:0B:DA:94:C7:D3:05:82:2D:17:72:80:E0:C0:4D
X509v3 Authority Key Identifier:
keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:84:81:b2:b8:8f:54:d2:bc:e2:43:ad:08:92:d0:d7:e8:10:
75:81:8b:c9:35:6f:e5:24:5d:6e:51:13:84:37:ca:d9:49:97:
83:9c:c2:ef:17:5a:5e:63:ab:8a:42:1d:65:ee:f1:4d:30:18:
92:ba:bc:a9:4b:ec:59:1d:d7:10:fe:b9:da:84:d4:94:b9:2d:
6f:fd:c4:da:e3:12:92:28:e0:a9:64:2f:42:4b:c5:74:fa:ee:
2b:5e:10:b5:12:7b:75:8f:90:5e:4c:59:df:33:1b:6c:03:42:
9d:b4:d1:41:ae:f9:4c:56:b6:86:30:cc:de:35:4d:c7:04:14:
ef:75:4c:12:40:0f:bc:c8:c4:49:08:cb:85:da:a1:45:1b:e3:
cb:8d:a2:2c:d9:5b:a5:2e:ba:e6:70:2c:29:d1:cd:1e:a2:33:
76:32:fd:64:5f:d0:20:1b:97:2b:d2:62:5f:b4:2a:0e:d2:0f:
20:ac:94:21:34:3c:b0:e1:a5:aa:08:65:3b:bf:80:d2:3a:80:
fc:b2:95:6f:13:a4:b8:d0:2b:12:61:53:4c:6e:40:65:e6:0e:
bb:68:2c:85:df:43:eb:2c:4d:ce:18:69:3e:30:c3:c0:27:fe:
6d:18:76:1d:21:ef:41:1a:e5:43:87:3a:82:ef:5b:16:8a:ff:
4c:1a:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:55:12 2025 by rpki-client