Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: msIt0eLcA9t/OXYtWTXowP7vj6glEAkEjJC1kPyd9/Q=
Subject key identifier: 96:FB:5F:E8:13:A9:78:A1:7D:31:82:38:41:9E:28:93:D9:F6:E2:86
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 0199FC8FAC1E36D35F66B7BE40938A5EF036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 033D
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: 5TJg2Iv73VFNhdExw4W7yWYaSDc.roa (hash: itYnIaMtVgddsFyZfv3i+VtQbQhHkGAFRlMGBpEoryI=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: lzLh2DkvTwhF/gU0e3AwopIRrgqpYRK+jZm/0z6wsBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ac:1e:36:d3:5f:66:b7:be:40:93:8a:5e:f0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=96fb5fe813a978a17d318238419e2893d9f6e286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:b4:86:36:09:f5:b5:3a:3b:c2:a3:69:36:
4d:37:d5:1f:f7:2e:96:0c:08:7b:c8:fb:e8:d2:2c:
76:3c:b8:95:78:1b:11:3c:5d:c0:1b:88:1e:04:50:
b3:88:70:79:32:aa:a1:75:87:8c:7d:62:31:ee:e0:
f1:5f:3f:64:fb:e1:01:f8:ef:44:f2:6b:5f:9b:3a:
40:2c:11:2e:31:40:91:4b:f3:43:8f:15:f4:31:12:
76:fd:9c:3a:c2:c9:66:c5:00:d7:4d:4c:53:f9:3b:
6f:d9:17:34:d7:1b:77:f2:0a:9d:6b:43:43:7b:0b:
da:00:f1:f5:21:31:69:ee:48:7f:17:ce:0d:82:de:
6c:04:27:86:2f:c5:27:61:55:63:b9:cd:83:21:c2:
bb:5c:6d:5f:34:a0:4a:0b:60:5e:41:f9:cb:78:e3:
a2:6c:c7:36:90:d3:35:be:04:54:71:fd:b6:e0:e9:
47:be:fd:50:1e:bf:1d:12:65:3d:49:c4:5d:de:83:
c6:6a:77:3f:dd:78:b2:ed:7b:7a:c8:f1:91:47:5c:
f7:78:6d:b6:67:1f:8a:56:e7:5b:7c:23:fd:b5:bb:
41:72:23:7f:fc:c4:92:fe:51:e8:32:5f:92:8f:bd:
14:c6:0f:49:ad:b9:c0:e8:bc:0d:d1:c6:49:e6:93:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:5F:E8:13:A9:78:A1:7D:31:82:38:41:9E:28:93:D9:F6:E2:86
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a4:2e:ee:95:48:53:49:4f:de:99:cf:a2:44:09:ce:38:39:
b5:89:6d:f5:43:3e:a4:2d:68:8c:0d:97:ef:ea:82:28:ed:46:
f6:95:1d:4a:01:a1:8b:a2:4e:a7:89:cd:43:7b:ec:c8:60:a7:
e0:4a:cb:16:a9:0d:82:8c:ff:d1:8e:ea:85:ec:d4:c4:13:40:
27:88:0c:2f:aa:7e:57:e8:6e:4c:7d:73:dd:71:10:dd:a5:af:
44:02:67:6d:ca:0e:95:4c:62:a2:b2:11:a8:86:a9:7c:07:49:
43:1f:d9:68:12:fa:5c:b2:da:7b:b9:ab:37:d2:da:44:8a:1b:
4d:65:e6:31:f4:53:49:01:72:d0:26:9a:7f:27:4c:a8:97:8d:
84:94:2e:26:b3:55:32:59:59:01:e2:d4:06:1b:05:44:4f:6f:
9d:3d:ae:fb:88:77:8d:ac:0d:03:48:4c:d8:91:91:f4:56:a6:
13:b7:c6:e4:33:15:05:fb:4b:ba:db:38:d2:81:db:d9:1e:e6:
b6:e5:ff:88:99:8c:8a:7e:fc:49:c5:40:40:81:c1:79:d6:10:
a4:58:a8:e4:e6:61:d5:d1:2b:85:c1:2c:b8:87:bf:a3:22:a1:
7f:99:20:d1:2b:f4:74:9a:c6:97:4d:64:66:f0:59:fe:df:d3:
a6:5d:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:41 2025 by rpki-client