
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: xowOhtdT9KT6k5wlVrtxuVbM3zO7aZPj9RhrKJjrhps=
Subject key identifier: 63:32:4F:B9:A3:48:22:10:0A:6D:82:D1:64:8B:21:8D:D4:D3:C8:CA
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0199FC582990E23FDE9C9C42F656EA11B274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 13CE
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: 1fSA4hRyZGtJ6fQmx2jxp7FY976fNVbDWnIFnib6PrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:29:90:e2:3f:de:9c:9c:42:f6:56:ea:11:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=63324fb9a34822100a6d82d1648b218dd4d3c8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:aa:a0:a4:bc:b1:b3:25:a1:eb:e8:0f:68:
ad:a0:c0:0c:c1:cc:56:cc:3b:03:41:20:ed:b0:64:
c7:90:35:22:aa:09:41:07:cc:94:1f:09:03:30:84:
b8:cb:02:f6:5d:50:3f:6f:a8:63:c2:53:df:1f:66:
92:a2:5c:d6:b9:a3:e4:9f:a0:90:32:27:6c:ff:01:
6e:18:db:09:95:94:00:36:f4:cb:26:8d:42:1c:52:
1a:b4:5b:62:70:23:fe:ad:b0:27:5f:b2:16:b2:75:
a1:d4:e6:b5:bf:e3:93:e2:0c:69:7e:2e:ea:01:ad:
cb:ad:f2:ab:82:dc:51:57:28:35:8b:86:7d:0c:e1:
54:c3:4b:8c:03:aa:d1:4c:f4:1b:bc:55:04:82:63:
9b:bb:66:eb:75:d1:35:a6:10:30:6d:21:bc:4c:05:
f0:91:6a:9e:c1:17:45:37:60:c7:81:86:49:17:f0:
52:e0:f8:3a:3c:bb:2b:7d:12:03:9c:05:c2:c1:a2:
49:20:8f:f8:3a:ca:59:50:82:bd:84:f2:33:93:ff:
bf:0e:c5:53:3f:ae:49:b4:97:ae:48:62:87:02:19:
48:f3:68:ae:ea:1b:49:af:fb:fe:2e:10:96:ed:bc:
8e:85:8d:07:e5:e8:ff:f7:1f:ff:6a:3b:9f:fc:33:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:4F:B9:A3:48:22:10:0A:6D:82:D1:64:8B:21:8D:D4:D3:C8:CA
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1c:1a:c6:0f:38:ef:24:e5:75:18:e3:29:a5:94:ea:96:bd:
12:7c:6b:fc:13:b8:12:f1:a4:9a:35:59:d6:8d:4b:16:4b:5f:
43:4b:27:2c:1f:a5:c7:15:d9:1f:77:ac:30:4c:5d:6f:e4:fe:
9f:56:5c:2f:4b:df:cf:33:b9:4b:df:7e:47:48:70:aa:a2:61:
5d:fd:5b:32:c7:b9:74:a8:cd:93:ae:17:ea:94:3b:13:f6:f3:
8f:dc:7e:c6:82:25:d1:70:3d:fb:6d:59:4d:b5:e0:7c:6d:2f:
18:ef:6d:39:7f:7a:f5:e5:c1:92:12:d0:1d:c8:42:7d:0b:b7:
25:09:56:26:0c:91:ae:9a:93:11:f5:39:c3:a4:40:ef:0f:ac:
d6:25:69:c4:fe:c3:64:77:c3:a8:8e:ff:07:25:57:d7:1d:0c:
b9:5f:b4:6e:d9:b0:57:94:ab:16:4f:f3:7d:4c:27:1e:d6:d6:
59:99:72:bc:af:98:2f:46:65:f8:1b:10:5a:dd:89:fb:a9:71:
ed:9c:f7:42:fa:3d:94:1c:51:ba:10:38:74:44:28:82:df:22:
2a:7e:30:c2:d4:ac:29:5d:c8:55:51:ce:46:8c:bf:6a:65:15:
cd:55:4b:f8:9c:fe:74:e4:84:57:70:fd:54:93:ed:47:9c:c4:
ed:a9:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:43 2025 by rpki-client