Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: OGxm5STYsQXNk6EDSbgrmnOFakkmjgY7+v1ktoymz2s=
Subject key identifier: A4:11:AE:08:A3:A2:D5:71:CA:7E:E5:4B:8F:A6:A4:69:20:CC:11:F3
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 0199FBEB4EFA6A05BFE9EDBBCC8FE0749EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 0B33
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: a526igbpdSN3g1I4eUS2Xy8g2ifAsXHOcK+Aniuior4=)
2: IAJBt24rgV_us-DgHGqft-brDOM.roa (hash: EYG4N8j/B/VmDjgrJQXF6wEvv1LkIhmvGFmYVI9Ke7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4e:fa:6a:05:bf:e9:ed:bb:cc:8f:e0:74:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=a411ae08a3a2d571ca7ee54b8fa6a46920cc11f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:89:2b:38:28:0b:00:6d:e0:7f:72:06:35:
6e:d0:19:c6:f3:b9:80:13:a7:60:c1:fe:ca:f5:98:
be:49:f0:3f:38:e7:97:6f:54:5e:65:be:29:97:6a:
30:32:97:58:0e:97:a2:19:e7:94:44:99:4f:71:a8:
15:bb:dd:cd:9e:a3:52:49:9e:cf:25:61:5e:8f:19:
93:63:7b:83:64:e9:de:9a:ce:da:a8:2e:c7:fa:bc:
c8:dd:b9:7f:bb:6f:1a:a6:68:b8:4f:57:60:2d:8c:
c3:27:3d:fc:ef:e0:8b:6b:95:78:51:3b:18:7b:ad:
e6:04:48:4c:41:70:ea:48:19:2f:82:e2:61:c6:51:
93:10:ad:19:5c:24:76:17:5f:af:98:28:07:6d:ef:
ed:c6:d8:ad:89:5f:11:b1:04:ec:cb:ea:64:df:bb:
92:df:ed:92:8b:4e:87:89:0b:1e:10:ef:5c:c4:6c:
a1:14:84:60:86:2d:fa:17:06:3e:af:df:8f:62:d7:
21:38:c8:db:31:db:50:d3:66:33:c7:d0:f2:32:8f:
48:f1:82:55:52:a6:ac:e9:82:89:01:d8:23:56:a8:
b8:00:bf:eb:77:ad:ca:e2:60:21:fe:bf:d9:d1:3a:
c6:11:6f:e0:5f:ee:0b:c4:52:4d:83:9d:bf:ab:ca:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:11:AE:08:A3:A2:D5:71:CA:7E:E5:4B:8F:A6:A4:69:20:CC:11:F3
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:72:d7:65:8e:6a:1d:49:b3:e7:74:15:b6:63:05:69:b9:9a:
9c:9d:c2:7e:99:57:2b:05:f9:18:2e:a2:f6:8d:6e:97:0f:7a:
f6:f6:79:b8:c6:85:0d:8b:8c:39:00:8c:91:23:86:27:19:14:
e4:13:19:2e:99:60:d5:39:e8:af:19:d8:8b:6d:5b:74:21:74:
5a:05:e1:01:95:56:7c:7a:47:a4:cb:e3:d6:fb:94:90:cd:e6:
66:63:a4:c1:19:b7:49:ca:f4:a1:88:3d:02:ba:60:0d:cd:1c:
22:4f:34:87:c5:1e:03:94:2b:66:ee:9b:4c:d7:60:eb:62:c6:
35:d9:bf:e3:26:2b:70:ed:49:e4:7d:0e:8a:1b:d5:48:64:42:
ee:37:8d:fe:66:76:3d:b1:2e:47:d3:f8:1f:18:d6:e9:36:12:
48:f1:26:54:5b:7d:11:19:04:3a:1d:a2:d1:ef:14:29:56:a6:
dc:6f:99:0f:0f:93:fd:95:6e:dc:dc:48:db:d5:7d:b3:2e:d1:
31:de:6b:17:14:05:b1:65:dd:b3:2a:bf:a4:c6:46:d6:37:11:
03:f5:2a:d6:1f:98:44:5a:da:2e:45:e6:5c:87:64:71:c7:e2:
b8:fb:b8:ee:3e:9d:d2:ce:a6:98:ce:ea:69:11:11:54:50:7d:
50:85:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:05 2025 by rpki-client