Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: 77iHTzz/6qSn0UB43dMhwD01+kRXVlELIW8LbOiNlsI=
Subject key identifier: 60:78:B1:13:9C:32:F2:41:E7:39:B3:37:70:0F:FA:66:C2:C4:14:F4
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 0199FE46B2373488545F1898436FB9BEDDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0B3C
Signing time: Sun 19 Oct 2025 21:01:09 +0000
Manifest this update: Sun 19 Oct 2025 21:01:09 +0000
Manifest next update: Mon 20 Oct 2025 21:01:09 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: zsmsDtHHG2OF05zy35XCILaQPdrFojjaDORjj6DK+Rg=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b2:37:34:88:54:5f:18:98:43:6f:b9:be:dd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Oct 19 21:01:09 2025 GMT
Not After : Oct 20 21:01:09 2025 GMT
Subject: CN=6078b1139c32f241e739b337700ffa66c2c414f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:88:17:e7:54:29:12:6e:d9:96:c1:4f:1f:
51:5f:9d:05:26:d3:10:18:92:e3:81:6b:06:ac:13:
c9:8b:47:e2:44:8c:dc:e8:34:b2:a7:bb:e2:0d:95:
fd:d7:36:f8:76:7e:38:ea:7d:fd:d0:56:80:73:20:
3d:95:c4:4e:bc:1f:9e:34:0c:ab:f3:35:cb:a5:68:
18:8c:73:bb:24:d2:19:3f:cf:f7:0a:a1:f7:b6:66:
39:bc:dc:b2:b8:bd:fc:ef:e8:81:09:ed:83:e8:be:
e5:31:8a:9f:5b:02:7b:c4:58:42:2a:30:15:a2:02:
b2:6e:44:0a:72:fe:3d:7e:4d:22:ce:6a:c3:67:09:
6b:5c:13:92:45:a4:b9:8b:a6:74:c9:04:40:25:a4:
1d:74:4b:21:3b:3e:fc:e5:87:b0:95:b9:46:53:4b:
32:ef:71:e9:d0:46:3a:6c:5f:c2:66:3d:59:5a:be:
b1:86:0f:10:ac:28:e3:90:b3:a1:6f:1f:83:26:9e:
5a:6a:cb:64:73:e9:ec:3d:c0:27:d6:d4:9e:45:86:
44:52:ab:a5:4a:ab:bf:25:de:37:bb:81:90:82:d4:
6d:9a:5e:a2:74:35:b4:f9:da:05:39:3e:b6:c8:77:
50:5e:67:b5:2f:7d:d5:5a:73:f9:6b:c7:f3:de:27:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:78:B1:13:9C:32:F2:41:E7:39:B3:37:70:0F:FA:66:C2:C4:14:F4
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bf:8e:a1:08:82:99:df:3e:7d:4d:69:a9:f2:3d:b4:b0:c0:
e1:3e:71:d3:76:5a:1e:81:e5:34:9b:bc:d1:9c:c4:3e:ef:cf:
e0:7e:92:5f:a0:8b:59:1e:e9:15:81:6d:0e:26:5c:e4:30:60:
2d:6b:f8:13:69:12:78:02:4f:56:cc:9c:32:36:f3:83:a1:24:
38:07:49:c4:c7:63:ed:e7:0c:48:92:c2:f5:11:c7:e8:5b:a5:
bf:e2:17:2f:b0:1e:ef:b8:af:3d:39:44:19:b0:f8:23:58:b5:
94:5d:65:fd:95:0e:47:3f:65:75:6f:50:e5:46:ac:4d:ce:f1:
d1:69:31:a9:7d:eb:cb:3b:00:36:2d:e8:b9:01:49:99:fa:db:
6d:b6:8f:c7:5f:b3:23:a3:a2:67:b4:a1:b0:4e:ff:2a:c5:68:
76:ec:03:8e:b8:52:99:33:8c:10:cb:2f:59:45:59:af:aa:de:
fd:a7:43:f9:b8:b0:6a:ca:5a:47:b9:d9:be:d0:e7:6c:34:b0:
38:28:68:56:c3:5d:04:00:bb:d4:96:8d:8f:ba:4d:b3:7b:43:
14:3d:c6:69:8e:84:e5:f7:13:74:11:14:c7:5c:e6:32:89:34:
27:2f:78:26:38:5b:c9:2f:42:75:72:23:93:d8:f2:91:79:43:
8b:82:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:44 2025 by rpki-client