Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier: b3uXQsmc/9lPsY3A9KaIhxwXd/+1bJHqdhlvBAR8VMc=
Subject key identifier: 2A:82:42:2D:11:58:47:FE:8C:B7:36:06:03:07:20:4E:69:6A:2F:61
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 0199FBEAB10117B7F034C1F0CDBF7C851ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number: 08C8
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: bXnbbkuVAz1FonTzux8Q653aP+uPakxVTaE4XuP8isc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b1:01:17:b7:f0:34:c1:f0:cd:bf:7c:85:1a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=2a82422d115847fe8cb736060307204e696a2f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:b9:6d:28:fb:3e:91:36:6a:34:a6:2e:b8:
95:70:bc:9c:f6:a2:3b:bb:22:8a:42:b0:9d:6a:b0:
05:03:f3:3f:0f:f1:87:26:dc:38:44:3c:b3:94:5a:
74:f5:53:ac:e5:7e:e9:27:9e:9b:6d:7e:cf:bf:f7:
37:cd:33:db:69:3e:4b:7f:1e:09:62:d4:34:21:96:
25:85:89:b2:e0:e6:90:b8:9e:ff:56:41:cf:aa:d6:
ed:8f:ab:2c:64:80:95:aa:a0:99:36:6d:1d:85:87:
7a:9a:cc:c8:a7:1a:5a:1b:d3:a4:7d:5e:91:e7:ae:
ac:0c:b6:e0:78:3f:f3:1a:96:2c:7b:bf:26:ce:69:
8b:49:7a:e9:85:b4:58:93:15:bb:ac:73:a0:4c:cd:
73:d1:23:42:05:af:3c:98:c1:58:d2:0b:a8:90:14:
a3:47:b0:e1:30:16:79:c4:81:48:61:d5:2a:77:00:
ab:08:d5:ea:bb:19:f0:9f:8d:56:96:e6:84:7f:5e:
de:68:3a:df:06:a0:b3:6e:8d:4d:d6:ef:ba:88:60:
78:ec:79:f9:51:c5:a2:f9:c6:d3:41:41:58:44:e1:
1a:2d:eb:76:e7:43:fa:07:bc:73:f9:8c:ee:5e:9e:
0e:35:34:b0:f1:b8:92:cc:96:89:c7:f6:6d:87:39:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:42:2D:11:58:47:FE:8C:B7:36:06:03:07:20:4E:69:6A:2F:61
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bf:fa:08:35:f9:33:a4:bf:0a:91:3b:8a:2c:8f:6c:e2:b6:
8e:50:61:ec:e7:b7:1f:eb:3a:18:4e:23:9a:a6:63:5f:fd:18:
54:07:5a:ea:71:03:91:3b:cb:02:7a:4c:5f:b6:c5:00:c8:36:
2d:48:3d:9f:71:b9:89:9e:a6:f9:3e:74:2b:c5:2b:8f:14:eb:
4e:4b:11:6b:db:13:ef:e3:ea:bf:23:2a:fc:3d:66:e3:fd:e4:
19:1f:e4:b8:81:62:9d:27:8d:10:1f:fd:ab:56:ef:7a:7c:8d:
fe:60:8c:12:17:f2:13:e0:66:e5:cb:93:04:87:95:51:00:a4:
da:6a:50:44:6e:e1:1d:20:f5:1f:14:d5:1a:6a:2f:b5:b6:a0:
f6:b1:1f:44:15:97:c3:9f:94:0c:ef:98:a6:2e:39:29:96:e2:
0b:17:7f:7a:c0:80:b8:4d:78:d0:39:c8:f5:ed:f2:ae:4d:d1:
68:bc:d2:8d:7d:d8:8c:76:da:98:26:a8:21:40:44:68:0e:fc:
c7:8b:21:e0:97:3d:0c:e0:71:82:98:65:a0:43:d2:ed:bf:bd:
17:b0:16:1c:b9:a6:91:9b:f8:1c:2f:8c:06:e7:0c:bb:1d:19:
8f:1b:bc:fe:02:dd:e9:c6:76:47:19:62:ba:ef:92:f4:d1:79:
57:c3:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:36 2025 by rpki-client