Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: UU5yhx+vXgVKUTuZWEo8B7yvlKBZ2uVkFr3NPASAS6k=
Subject key identifier: D7:E4:25:04:8A:81:74:97:83:E0:6E:E7:BE:80:80:DB:E9:14:F2:92
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 0199FB7C870716C38217007C70C245B949B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 10F5
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: 4V9zKJJnQv8jZ9nqP61TMG5kbo/0PAJy923oD4lsdTQ=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:87:07:16:c3:82:17:00:7c:70:c2:45:b9:49:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=d7e425048a81749783e06ee7be8080dbe914f292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:aa:1b:5d:cc:8d:e3:9b:fd:8c:05:27:39:
dc:25:51:8e:8d:ba:3a:87:e4:27:0d:f6:c9:c9:d7:
a6:6f:05:47:8f:6f:86:bf:8c:77:c5:10:1a:94:f7:
56:fc:10:1e:36:aa:81:46:34:dd:72:4d:a7:2b:66:
35:23:73:89:02:c3:8c:c6:6c:c4:2d:14:50:a5:6f:
50:55:c0:9e:7f:18:c6:83:18:89:b2:dd:f8:81:54:
c2:5c:7e:e7:36:1e:a2:8e:e2:16:27:0c:e4:dc:e4:
d9:9e:e6:d5:66:c7:bc:1f:de:06:9a:f1:b0:15:8a:
96:a5:16:85:08:a9:90:ec:f8:23:3f:cb:4a:d1:9f:
02:36:8f:9a:a5:54:0d:40:ef:8b:8d:8f:85:3a:27:
58:5c:55:fd:4f:d8:69:16:3e:4e:f6:40:28:1e:57:
4a:30:1b:d6:ca:94:94:36:7a:48:49:60:4b:ff:75:
f7:58:71:8f:94:e8:6e:3c:4e:02:aa:f6:14:b5:d8:
1b:88:0f:b0:ea:3a:6d:c0:fb:0c:eb:f4:f7:9a:ad:
3e:07:88:86:f9:50:3f:f8:1c:3d:f2:e1:84:e6:18:
ea:b2:23:ad:81:09:a7:bb:de:7f:c5:71:03:fd:f5:
4d:8b:dd:52:ee:44:dd:2d:0d:e6:3b:41:7f:d7:7a:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E4:25:04:8A:81:74:97:83:E0:6E:E7:BE:80:80:DB:E9:14:F2:92
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3a:b9:fa:00:49:31:38:38:aa:06:e1:03:fd:fb:b6:4c:04:
1f:92:33:e5:fb:57:e4:23:16:e3:70:d5:72:0b:c4:68:6f:b9:
59:d5:6c:a3:77:2c:e6:cc:28:61:c3:54:f4:b0:06:cb:0b:ed:
f6:ea:99:0a:41:aa:d7:5f:d8:c2:c7:01:a1:51:73:32:0c:3a:
ae:ba:3e:c3:a2:04:21:e4:89:3a:43:92:54:cc:09:a0:0a:2d:
5b:76:59:20:61:30:c4:ee:8b:2e:2c:4c:08:aa:85:f6:6a:07:
f2:57:f6:85:e2:56:82:c9:af:14:a0:11:7a:a2:5c:96:74:1e:
9f:1e:cb:a7:f6:d6:8a:6c:af:f6:91:83:19:1f:ae:56:5c:9d:
f6:0d:f9:39:41:1e:36:1b:65:17:ed:a0:0e:00:c6:0d:e9:00:
23:cb:69:49:a5:a8:69:a2:e9:d0:3c:58:dc:ac:2e:1b:ab:ec:
d4:a6:00:39:15:49:4d:fa:22:a1:2b:fd:95:94:78:db:49:25:
51:83:1c:6b:c9:36:ca:11:72:65:e4:f5:a2:d8:34:71:34:c2:
88:ae:d9:08:66:30:e8:5c:66:ab:87:73:d3:10:1d:3e:0c:3b:
04:af:7f:50:1c:39:61:3b:f6:99:d8:c5:8f:ac:d3:a5:aa:98:
6c:4c:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:35 2025 by rpki-client