Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File: d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier: oD2n90ACo8bBzXDCdqWQ3b5I0L6TiV9OLCUlETxtrM4=
Subject key identifier: 7A:8B:A6:7C:2D:80:84:9A:96:11:9D:95:1D:D5:8E:F6:46:15:49:5F
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer: /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial: 019A006C5F6C0B85015CFA3468F2439BB0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number: 0B0E
Signing time: Mon 20 Oct 2025 07:01:33 +0000
Manifest this update: Mon 20 Oct 2025 07:01:33 +0000
Manifest next update: Tue 21 Oct 2025 07:01:33 +0000
Files and hashes: 1: 9zwR0ItkTBE3NBrhNXLgD19Ygh0.roa (hash: 668uqZpsKXpsQP4NHjfvBq7qiMq3YrFIWJSOqGsUVvE=)
2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: VGfiyOU/c+Ve9qoUoozCV8jslPpPLMc/FBN/Dpd/FP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:5f:6c:0b:85:01:5c:fa:34:68:f2:43:9b:b0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Validity
Not Before: Oct 20 07:01:33 2025 GMT
Not After : Oct 21 07:01:33 2025 GMT
Subject: CN=7a8ba67c2d80849a96119d951dd58ef64615495f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:fd:75:e5:c0:e3:f6:41:d4:61:4d:8d:db:
f5:18:62:11:2a:b1:14:55:7c:3b:1b:3e:4b:1b:60:
41:d9:1f:0f:75:a3:42:ef:37:84:a4:99:51:0d:99:
92:9f:43:87:7c:35:a2:7d:03:a5:14:f3:eb:02:a4:
b1:50:30:8e:c0:42:18:64:6d:c2:52:d1:04:c9:b8:
50:e9:7c:eb:b3:ee:5c:b1:7f:e6:f9:73:85:8d:13:
69:bd:29:06:53:9b:7a:ae:08:f5:19:50:80:cf:a4:
26:1b:a6:af:47:a0:85:09:65:e8:70:31:e1:3c:66:
8c:7a:40:a3:61:dd:c5:c6:1a:8d:45:58:f5:4a:17:
38:37:b2:ff:e6:56:da:c3:b7:a3:bf:d4:0b:58:26:
ea:7f:94:6d:2c:9d:71:22:59:74:e2:4e:77:37:4e:
ae:73:66:5a:ce:35:18:0b:f9:ea:ec:a8:20:ce:ba:
9b:37:46:25:f8:0f:59:56:fc:00:e1:b6:f6:b4:c1:
44:b1:7a:be:26:ef:40:90:f2:03:b9:e4:96:c3:cb:
c8:f3:25:a5:7c:b9:30:a1:03:69:dc:d9:12:73:6a:
39:d0:a5:64:fe:4b:9e:c1:81:67:df:01:53:32:06:
d1:bf:16:a0:36:e1:d7:3c:83:a0:99:37:b1:cb:71:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:A6:7C:2D:80:84:9A:96:11:9D:95:1D:D5:8E:F6:46:15:49:5F
X509v3 Authority Key Identifier:
keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2e:76:ad:e1:a1:42:d8:bd:a0:df:8a:b7:65:68:a0:7a:0a:
d5:87:26:bd:24:14:1c:60:f3:53:1d:02:2e:36:40:2c:ae:7e:
11:b0:f8:e5:92:2b:a7:88:f8:58:36:40:1f:7f:29:51:0f:39:
fe:13:8a:ae:63:27:c1:5c:92:3d:5a:5b:98:fc:ec:37:97:3a:
bc:20:05:a4:b3:fe:03:34:2d:bc:30:5e:8c:7e:88:79:a5:3d:
45:b7:e9:a6:7b:aa:f6:3a:57:b5:db:95:82:b8:e7:8b:f9:d9:
dd:8f:57:c1:7d:46:2d:2e:8b:53:f2:a7:6d:b0:de:bb:08:d2:
17:4d:97:e0:03:6a:a1:19:dd:be:66:76:87:5c:c0:67:67:da:
13:66:40:f6:75:48:d0:d8:2f:cb:0d:47:0b:0c:95:cf:20:44:
de:6c:95:c1:ce:9b:10:e9:13:75:fd:d4:22:80:c2:b3:75:87:
8d:2a:cf:3b:b6:3e:8a:04:8b:5f:81:b8:49:36:60:d3:ce:c9:
b7:d1:ef:87:d5:2b:e7:59:fb:26:d4:40:e1:c4:05:23:92:ed:
3f:2b:8b:11:85:6a:8b:63:40:9e:5b:81:f7:89:c2:27:fd:f1:
9d:20:47:61:6b:dd:c4:1b:25:78:6f:2b:f3:27:8a:cf:31:6b:
df:89:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:37 2025 by rpki-client