
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: Aux0pNONmfPztJed56T2Qna9pfib27gcg6CXA78kqvE=
Subject key identifier: 6A:E7:87:88:53:01:8C:82:35:70:68:8C:81:31:96:3E:B7:19:40:7A
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 0199FAA0CEA222537A4844FCD60C677D0C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 018F
Signing time: Sun 19 Oct 2025 04:01:06 +0000
Manifest this update: Sun 19 Oct 2025 04:01:06 +0000
Manifest next update: Mon 20 Oct 2025 04:01:06 +0000
Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: i2R6wABPXDrnV/i95Z8KPYHKGDD1GVcglk1DxxBaqbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:ce:a2:22:53:7a:48:44:fc:d6:0c:67:7d:0c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Oct 19 04:01:06 2025 GMT
Not After : Oct 20 04:01:06 2025 GMT
Subject: CN=6ae7878853018c823570688c8131963eb719407a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:c5:6a:bc:9d:fa:a0:a8:61:4c:c6:6f:f2:
aa:0b:52:7b:55:1b:0a:14:85:9f:76:de:c4:93:c6:
37:49:0d:3d:d8:20:7d:fb:52:88:e4:a7:84:7c:62:
2e:40:b5:e7:6b:32:8a:1a:5b:f8:6a:06:99:a1:03:
e6:5b:e1:4d:5d:a2:c6:cf:13:6f:30:c4:07:d6:ee:
7e:b4:30:bf:0b:0f:dc:4e:94:8e:f8:62:43:55:2a:
9c:83:9e:a6:91:1e:73:c6:67:c4:7c:e0:8b:bd:a5:
80:1c:31:68:e8:c9:33:88:d7:28:90:3e:47:f2:90:
07:25:cd:a1:a3:e1:d5:ee:6d:9d:3b:4d:ed:78:48:
6f:45:24:a9:4e:8b:38:62:3b:a6:1f:09:54:f4:ad:
e8:cc:70:27:c2:36:08:bb:54:da:79:29:b1:f9:f5:
ac:9c:82:41:d8:89:56:e8:4f:19:3e:79:b7:a7:cd:
0d:30:82:50:b4:d1:3b:dc:98:e4:e2:64:2d:fd:94:
04:bb:9b:13:c9:91:ca:54:9e:d8:73:16:61:dd:ac:
fa:53:29:28:f5:c0:43:29:93:11:43:02:a5:1f:a6:
e4:ff:7f:7b:23:67:8c:58:50:91:1e:e9:56:b5:55:
9c:57:25:ba:7f:af:76:e5:43:25:11:21:24:e3:de:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:87:88:53:01:8C:82:35:70:68:8C:81:31:96:3E:B7:19:40:7A
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:39:66:1f:19:7a:cd:61:b2:65:96:e8:03:e9:1d:8f:40:d0:
f8:b2:e7:b6:3a:f7:2d:91:e5:c0:0f:8e:93:07:a0:ef:a5:84:
4c:9d:8d:3d:83:cb:21:e3:f3:b7:c9:19:6a:1f:b2:d7:81:28:
70:57:40:ab:07:04:47:7c:50:05:04:fa:cb:ea:d2:a8:62:b9:
8b:5a:84:5f:2e:56:ab:83:41:89:11:62:1b:c2:ac:e0:f7:06:
c7:d1:12:cc:22:9b:50:0d:e1:a8:a6:16:28:27:f3:7b:4b:06:
e1:a9:42:0f:f1:f8:13:6e:77:49:32:57:00:b6:68:7e:99:65:
9e:38:eb:7b:69:e9:36:15:1a:fe:94:ba:5f:3d:91:2e:f5:91:
0e:c0:51:8a:74:85:5f:19:02:3c:1f:67:70:e2:9b:8f:c5:9c:
2c:11:fd:64:89:97:78:fa:7f:7a:41:1e:1e:63:0b:01:b0:ca:
78:2b:fa:70:12:f2:d6:e9:2e:49:b6:1f:5c:8b:1c:02:35:0c:
af:c6:ff:df:59:0d:c9:96:94:b3:ad:35:da:9c:e3:8a:d6:3d:
07:2e:41:fd:65:e2:3d:17:5d:12:b8:89:49:ce:07:46:20:74:
f4:05:98:4a:67:0d:3e:fd:b6:1e:f2:9e:60:d9:23:72:a0:77:
bf:c7:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:25 2025 by rpki-client