Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: yA4aHarF+eJ/+sNkUXifxUJ0EfpP2AyCJMyB5L9QGeI=
Subject key identifier: FC:CD:F6:79:CA:36:8E:97:C7:03:97:0F:9F:6B:D3:CD:41:47:EB:EF
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 0199FC21AB00F025FEF3F971637428C0832A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0E1C
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: P3dowsdjDnJK6VwpenPVzCIYUyK12PROhLOSUWHbwd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ab:00:f0:25:fe:f3:f9:71:63:74:28:c0:83:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=fccdf679ca368e97c703970f9f6bd3cd4147ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:e0:5e:8e:2b:15:5d:56:f3:76:44:e0:32:
eb:18:8c:2d:1d:73:56:e8:ee:70:19:21:ff:84:8c:
61:86:9f:23:eb:f6:8c:13:8c:60:47:82:f8:89:91:
f1:52:a7:68:61:8f:9d:85:99:67:df:30:77:f0:fe:
b7:47:0e:a7:0a:11:be:e6:00:30:de:a8:d9:d0:f3:
00:20:70:0c:b4:46:dc:0c:0f:b1:8d:1d:8f:ce:2a:
8b:49:a5:f5:9e:29:14:22:db:94:72:27:b6:b8:9b:
e3:60:91:6d:b9:92:8c:51:31:a9:f5:d3:b8:e1:8e:
5d:41:0b:bf:a9:f4:b3:28:4d:6d:82:57:f6:c1:ed:
6e:28:c6:8c:5e:67:b0:ea:28:69:d5:52:fc:1e:2a:
0a:d8:7d:8e:22:13:cf:94:20:6a:bb:3c:81:bc:58:
33:2f:c5:11:1d:8c:98:d0:94:7f:62:b7:de:68:92:
f6:d6:1f:41:e3:14:98:09:4f:14:c2:f0:59:9f:02:
a3:52:54:ed:0c:4b:71:db:72:0e:ff:d1:81:2f:d0:
df:2e:4b:c1:00:58:7e:d3:45:64:9d:bc:36:f4:f5:
e5:93:43:b4:8d:cc:b9:e6:62:db:ab:97:d6:80:35:
d8:61:3e:69:b2:89:05:75:08:4e:e3:c8:fd:f5:b9:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CD:F6:79:CA:36:8E:97:C7:03:97:0F:9F:6B:D3:CD:41:47:EB:EF
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a6:bd:40:a5:73:b1:9f:2e:db:e8:a3:a3:26:f1:58:ec:1d:
ab:b2:d7:96:d9:92:fd:1f:8d:c0:35:7f:fc:49:1e:d3:82:ae:
3e:47:52:c5:ee:5a:94:36:db:d5:60:6f:9d:4c:41:be:3c:13:
a7:5c:bb:c0:46:2c:70:28:37:ee:2f:19:dc:e0:3c:64:3f:dd:
da:b3:06:fd:39:69:be:b5:d5:c0:94:31:16:9f:d4:eb:ba:00:
c5:c0:d0:c0:fd:49:31:05:73:44:dc:cc:3e:c7:82:95:13:e5:
b1:0e:a0:26:34:9a:48:6d:55:97:db:57:88:45:95:87:c5:bf:
91:ee:93:98:6a:39:77:cc:b4:a8:f7:f7:21:bc:a7:fb:28:ec:
00:cc:ff:41:81:8b:d4:ca:2b:04:d1:ed:6e:de:25:cb:e8:76:
35:5e:a5:d5:be:80:45:18:42:f6:9a:bb:c8:9e:09:21:ca:32:
06:72:05:cc:cb:93:fe:f7:13:53:e6:85:8d:61:6c:85:48:65:
ca:4f:c1:0f:f8:16:d7:48:49:62:66:82:0b:c9:5e:68:3e:9a:
d0:d4:2d:eb:ce:0b:1e:42:c2:e6:b4:a3:9a:9f:a3:7f:3f:b4:
e1:fa:4f:e2:28:4c:1f:53:bf:f0:5c:57:6a:78:a8:6a:8d:85:
b0:94:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:31 2025 by rpki-client