Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: bd9wvFKMFzB8dlz15UzUYdNAt6Rq/2owDHmjqSdBJ+w=
Subject key identifier: C9:F0:B3:CF:63:51:39:32:87:4E:29:AD:F8:3A:78:02:52:FE:71:BF
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 0199FCFD2533EA02898149A892CFACDA4C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 0E84
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: Wqa4SsP2h_ssNFKOjNzf7n1D1Oc.roa (hash: r8Od7aNV9w5qxKZEsiTyK8JnMXxLB2GhaVrqj9OwkeA=)
2: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: OgtZNVehIhBbdpd6euRShdZwkToy5TaAFYCw72+sC7w=)
3: kwVeacE9Id0juKigol5W8QUGZmY.roa (hash: 7cxULpmrleNFyzISvZ8CMCvy9RGxzfGSr5MdwYQQpa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:25:33:ea:02:89:81:49:a8:92:cf:ac:da:4c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=c9f0b3cf63513932874e29adf83a780252fe71bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:00:f4:91:1f:16:2e:b1:37:e6:5e:78:f6:
94:9c:11:96:74:9e:45:91:45:af:52:76:c9:fe:af:
b6:20:5f:1a:6c:92:08:76:1d:22:46:78:8d:b6:d0:
86:07:79:9c:3a:60:cb:f2:83:d1:e6:cc:90:16:03:
18:4b:66:79:59:4a:2d:56:5b:a1:8a:e7:c0:e2:9a:
9a:01:9a:86:27:c5:f2:c7:d3:64:f2:bb:bf:f4:85:
d6:17:56:c4:d1:c2:40:52:6d:4a:43:b5:be:45:59:
f8:b4:cb:28:dd:97:de:24:06:a7:4c:0b:31:cc:43:
79:11:08:af:e0:d6:4b:f1:96:bc:af:25:dd:ce:34:
13:e3:a1:1c:ce:e5:de:6b:29:32:1d:f5:3a:ee:2a:
d2:69:de:de:94:bc:d0:e0:ea:b4:5f:23:fe:41:8b:
f2:ab:c0:ba:79:1c:a8:c2:1f:2e:1f:7c:c3:23:5d:
f9:34:38:08:c9:ae:89:83:d9:47:7e:40:2e:ca:63:
2e:5f:08:f2:e8:68:bc:82:40:6c:34:8b:1f:f9:22:
4e:23:b6:36:dc:58:b4:9f:20:2b:d7:a7:de:55:03:
ab:86:b4:a0:5c:d3:6e:9c:14:77:10:46:bc:32:f1:
39:d5:e6:e4:24:f2:b9:68:30:d1:76:fe:6e:8e:a0:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:B3:CF:63:51:39:32:87:4E:29:AD:F8:3A:78:02:52:FE:71:BF
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:90:5e:50:ba:3f:55:5c:aa:27:6e:de:a7:69:6f:48:32:
24:74:80:25:f2:a1:cf:fd:7e:90:98:41:4e:63:67:ca:29:d7:
a8:34:3d:ad:82:1e:98:25:05:49:1a:67:e6:1f:c7:b8:45:c2:
e1:9a:f0:0f:02:b8:14:9d:64:0a:e2:f0:a9:12:30:8b:f7:fb:
ae:2b:5e:42:01:93:9c:12:c1:82:56:84:ae:ad:ad:e3:5a:70:
51:95:03:d1:b1:b7:76:1a:aa:69:12:b3:b1:ee:47:de:4c:85:
4f:3c:c3:28:42:fd:a1:df:65:d2:75:c9:b2:1b:c3:91:bd:e6:
47:f9:5a:82:77:fa:74:90:fb:8b:e6:62:b3:8e:d4:be:e7:87:
05:d7:ab:7e:80:de:f3:fd:34:21:cf:9c:d7:53:d0:b3:77:b0:
6a:a6:3e:14:c8:fc:49:3d:06:d6:e4:b7:db:a7:be:ac:6a:09:
46:66:e6:e5:72:cb:09:91:7d:c5:fe:98:db:b5:b1:9d:68:65:
5b:0c:2a:1d:7c:02:32:97:ca:9f:35:f7:95:cb:33:d2:f4:c9:
20:40:23:28:c2:1e:60:d8:ec:02:0e:76:ae:c2:52:a8:b6:b2:
bc:e8:e6:93:9f:e0:55:90:77:0e:c4:e3:d2:4e:3b:d2:c5:55:
eb:75:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:14 2025 by rpki-client