Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: npG/N4Q5AmX4nFjvbITvVASKLkMARxdp4KdfmoMJX6U=
Subject key identifier: DA:12:B8:7A:F6:9C:9F:F0:A4:98:CA:4C:D4:4F:C6:D2:04:F8:27:B0
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 0199FC8F55BB6206CB6BF563C766B3185A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 0FAD
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: LX/LE3i7SzsoyPGedOI4drLOSUivJaAYEJaYkVG3BmA=)
2: m7fQ-cMMDdeyLl0RJP3A0VDHgVE.roa (hash: rB/+iXy3MWnMmudzmSTexHxDroAo7zhjaO5iq26LcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:55:bb:62:06:cb:6b:f5:63:c7:66:b3:18:5a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=da12b87af69c9ff0a498ca4cd44fc6d204f827b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bd:b6:a0:b2:56:9d:74:36:12:f6:b8:c3:50:
99:ea:70:84:a5:4d:b1:a1:0a:82:7a:cb:96:8b:ed:
08:58:d9:3e:b4:60:f3:02:2a:33:bf:47:44:ab:95:
97:70:2f:21:e5:2a:11:17:2c:22:d9:59:66:a0:11:
03:d4:ec:59:2d:8f:28:47:1b:a8:8b:aa:73:3d:ee:
9e:db:35:42:b4:e5:b1:fc:60:00:f6:08:ee:09:6a:
6e:bf:90:a0:f0:2e:b0:6e:48:10:84:58:a6:f3:a1:
c0:d4:33:93:34:22:54:7e:c6:09:3a:5f:fc:bd:19:
ed:c9:03:f3:95:4e:76:96:19:8e:48:5d:74:e9:4e:
a4:d2:d1:9d:c1:ff:08:e3:5e:52:d2:eb:1a:45:f6:
03:2a:96:a3:8e:4d:41:e8:cf:a4:c8:73:e3:07:af:
fc:4f:32:bb:58:4d:a7:dd:33:34:1a:30:89:82:59:
0c:9c:f4:5e:89:3f:bf:8d:94:a3:60:13:ed:44:da:
49:dd:b1:e7:83:21:9c:56:c8:05:92:58:e1:b5:b1:
a1:69:99:0b:eb:18:6e:58:23:db:90:55:37:fd:75:
62:b4:14:ef:3d:9d:0c:99:5e:a6:4f:e2:61:78:4e:
6a:06:5d:db:ec:82:00:64:83:8a:3c:19:24:70:ec:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:12:B8:7A:F6:9C:9F:F0:A4:98:CA:4C:D4:4F:C6:D2:04:F8:27:B0
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:91:5f:4a:dd:89:30:be:81:78:ff:7b:6a:fd:e1:b2:93:2b:
71:52:cc:42:76:75:94:04:a7:e6:0b:5a:74:f4:2a:73:19:0e:
bf:81:ea:bb:89:ac:5a:71:a0:0c:5b:70:3c:27:a5:60:47:df:
3d:12:02:f0:34:4d:2f:f2:b8:64:4d:ef:6b:07:3c:33:39:28:
a8:50:d8:e4:2a:87:cb:62:2c:04:d5:d0:c9:3c:ad:34:61:e4:
5e:21:2f:52:00:4e:4c:54:b0:3c:7e:e8:f3:d0:29:59:ec:5d:
1f:d0:1b:9e:f3:52:a3:9d:1d:f5:6f:ce:f3:d8:81:3e:9f:5b:
2e:41:66:45:ba:17:3e:49:22:16:cc:69:57:bf:42:1b:4a:1d:
86:e7:6f:a2:8c:4f:e4:49:83:7d:9a:32:6a:84:40:c6:ed:a5:
c5:44:62:d2:c7:d9:fa:08:a8:18:38:b8:74:4c:dc:a9:9b:e0:
02:42:3f:dd:d8:67:b4:c5:db:e0:93:50:05:e7:4b:fa:d7:7e:
78:bb:d0:c5:44:5f:90:d9:1f:b7:c1:28:c9:44:d5:af:6c:cb:
88:1d:6a:56:00:77:a3:90:26:34:fb:15:c7:d8:c2:09:26:32:
79:35:01:4c:cd:72:ae:f4:e7:99:c0:29:02:8e:d3:8a:ac:a9:
7a:26:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:36 2025 by rpki-client