Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: 3pF/fQG9dDM8pmI6l3fBHqan9pA0YpDl6HSDeRETk88=
Subject key identifier: D0:6D:04:83:05:7C:27:DF:4C:5C:50:4A:E5:84:47:AC:BC:C3:C3:8B
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 0199FCC66478FDE308D3DD540CA45CABB9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 12CA
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: gxAM4yAaC7rTC8DBiwmPEGqHe7/vqdjUB4nJ1zdJouk=)
2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
3: 7cGpErFojxZQKCSeJeJ8U-ucjfw.roa (hash: u8HNSCh1+MNiLey93QoDDaHwFmVThoOReQEndhAwPeo=)
4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
5: YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa (hash: J+sfrqDRaIaNCnrB/qidc2XHG3Pcd1LgS59q0souwmY=)
6: lJFoGwOfjYG7bpWJkltu5e79TPY.roa (hash: a/JvmbooIi2RUBJmFiHrsUi1IesqwE85tvSq7Xkrm58=)
7: nAU_2VpM5SccaGQsl0YkIDwDC1w.roa (hash: LkSzGNi0v1t7wdhC/pLyKhtEY4pQXgh7tGdjsi4l0Ig=)
8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:64:78:fd:e3:08:d3:dd:54:0c:a4:5c:ab:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=d06d0483057c27df4c5c504ae58447acbcc3c38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:94:2e:99:60:c3:7f:95:3a:c6:7b:4c:56:
e8:b6:0c:99:57:d2:f7:7f:d5:ec:4b:d2:35:d7:92:
54:b4:8b:d9:d1:9e:ae:6f:31:00:06:d3:64:6d:30:
30:23:11:7a:47:a3:ce:3c:8a:8d:e6:df:8c:e5:5e:
81:ae:e2:c3:3f:69:48:d9:be:1a:08:e4:5a:07:83:
30:57:99:9b:9c:50:55:25:b7:23:4c:24:e8:74:d3:
66:8f:9d:1b:7e:a5:91:47:0d:f6:6c:c6:4a:d0:ac:
31:16:7c:d4:30:00:53:0c:00:e0:f3:48:36:a2:83:
99:98:f1:de:52:3f:27:29:eb:5c:e2:f7:66:48:d6:
1e:48:05:a2:37:bd:73:23:cd:cf:49:1a:6f:21:0e:
7b:4e:11:70:13:1a:c5:09:48:5f:47:bc:b2:6d:ed:
8a:24:2e:19:4d:2d:de:c0:e7:1f:fc:92:36:15:9f:
18:e3:2c:8c:24:8c:e0:46:27:6c:82:7b:26:e6:79:
bf:94:0e:4f:e4:e1:8b:09:de:55:22:8e:40:3d:28:
a4:fa:02:0b:f1:d1:d4:c1:e1:e0:99:01:59:2c:82:
e3:47:69:80:b5:81:10:e7:88:1b:73:9e:dd:2f:c9:
f1:e3:c4:ab:c5:b6:99:70:73:38:9b:42:3c:43:3a:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:04:83:05:7C:27:DF:4C:5C:50:4A:E5:84:47:AC:BC:C3:C3:8B
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b4:d0:94:39:ba:15:a7:49:e5:fa:fd:f2:62:fd:e9:2c:eb:
86:03:1f:ef:97:24:9f:9b:cf:95:4a:a4:43:a1:ba:6f:f2:e1:
63:95:c3:b1:8c:e9:75:04:cd:10:63:cb:fb:a5:43:32:9b:dc:
27:01:dc:9b:79:f7:41:6a:b5:a4:46:3a:a8:99:30:41:e4:c0:
e9:bf:c3:66:09:81:d0:93:26:74:1f:07:7f:f0:ce:82:12:fd:
f0:70:f0:a4:8e:be:f7:a2:1e:b8:63:0e:5e:e3:97:2b:e5:2a:
f5:7b:d6:f9:9c:da:35:fe:45:98:40:6b:ea:da:8a:5b:c9:de:
21:a4:0e:98:1b:fb:36:e2:1f:a6:15:cf:b0:a7:6b:12:de:23:
97:6f:71:8e:e0:52:65:3b:d8:18:de:d7:24:b8:b8:29:fd:90:
d8:5b:11:5c:ce:b0:37:72:51:86:64:52:87:45:94:e2:c9:2d:
ae:59:75:d4:68:fe:a3:78:41:5b:be:58:e0:a7:04:17:a1:77:
d2:47:4d:eb:0e:2f:86:f2:ae:59:c6:5f:5c:1f:e8:4e:73:a6:
50:85:56:77:d0:7f:6d:ca:19:89:61:16:5f:cc:2f:e5:8b:0e:
e5:9d:6e:4b:6b:b4:07:9c:33:76:03:67:e0:64:2d:36:2b:e5:
69:2d:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:11 2025 by rpki-client