Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: kXhv2RekxNQxN6NwG7Q4boVbIYdcywE26mvuRGFTeBc=
Subject key identifier: 42:30:D8:BC:C7:C3:9D:8E:8C:3A:5A:A8:04:2C:0C:3B:B4:D6:1F:84
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 0199FB7D0698485BF184AC0DCDD6CBE45BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 06F7
Signing time: Sun 19 Oct 2025 08:01:38 +0000
Manifest this update: Sun 19 Oct 2025 08:01:38 +0000
Manifest next update: Mon 20 Oct 2025 08:01:38 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: 6Pg+SIjvtYpju8hiidh6Y0zqlowtTubNGZyQeFNQLIc=)
2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:06:98:48:5b:f1:84:ac:0d:cd:d6:cb:e4:5b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Oct 19 08:01:38 2025 GMT
Not After : Oct 20 08:01:38 2025 GMT
Subject: CN=4230d8bcc7c39d8e8c3a5aa8042c0c3bb4d61f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:87:81:c6:1c:da:fc:a1:56:cc:e9:63:4a:4c:
6a:2a:69:de:32:46:30:fd:86:c9:77:47:af:4e:e2:
9d:f8:98:46:ea:6f:1c:65:e4:58:d9:63:58:11:d3:
62:c1:55:77:aa:c5:80:85:0b:15:7d:fe:7c:bf:d6:
9a:98:73:24:69:a9:0d:c0:e9:a3:ca:72:65:bc:02:
4e:44:60:c3:ad:a5:c1:a7:cf:48:04:c1:b8:a3:10:
3e:0e:ce:b3:2b:69:70:69:5e:81:ea:c6:41:46:f2:
8a:37:cc:fd:e5:e9:2a:e3:a0:e3:df:53:39:be:eb:
ce:3b:7e:02:72:1a:63:87:63:c4:55:c4:02:42:17:
d9:c6:43:c8:4d:7a:b9:e1:93:6b:60:2f:5e:cd:bd:
81:2f:92:ec:21:20:db:44:f9:5e:ac:ef:1a:b9:44:
7b:82:db:b1:b9:02:45:32:72:db:e6:f7:13:37:75:
a9:a9:49:15:bf:da:97:01:df:5c:30:be:70:b5:e5:
bb:b2:e0:b7:ab:88:6e:3c:84:39:dc:f9:6c:1e:00:
a8:fa:8f:2c:b9:02:af:0d:86:af:76:9a:22:31:fe:
a7:37:3f:20:63:0f:d8:6d:94:fe:d3:87:d2:be:ea:
5d:31:81:eb:5e:b4:d1:d1:70:86:6d:3a:21:24:45:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:D8:BC:C7:C3:9D:8E:8C:3A:5A:A8:04:2C:0C:3B:B4:D6:1F:84
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f7:eb:44:4b:37:02:38:5b:57:a4:8c:ef:6d:90:94:a1:b7:
85:38:b9:39:2c:2f:90:6a:b9:41:bc:91:07:2a:b3:33:52:29:
10:26:a0:a9:28:f1:42:86:fd:b3:e5:c6:18:05:2f:42:fb:0e:
c0:88:84:ab:79:93:a9:4f:0b:22:04:49:c2:c4:4a:74:22:0e:
57:16:4b:2e:2a:67:9b:86:be:45:14:ca:2b:6a:c7:6a:66:69:
2d:58:f1:36:a0:96:1c:b6:11:c9:44:56:82:3b:4b:df:f6:08:
66:a3:71:22:d7:ec:81:b6:f5:8e:54:23:8b:31:71:1a:da:2d:
2c:93:37:65:54:34:20:f4:19:e4:aa:29:f1:19:41:9a:ff:f9:
d9:91:3b:cc:7e:7f:5d:35:f0:81:ab:ee:8b:2c:08:00:63:ed:
5f:b7:7e:be:7b:ae:68:71:33:f3:23:54:6a:47:ae:50:ff:a6:
04:59:b8:2b:ad:0d:98:88:48:0c:d6:47:cc:e1:37:40:47:3b:
96:0a:5b:7a:d3:30:c0:d2:39:08:ef:2b:49:1c:91:9b:61:37:
af:ef:27:98:dc:ff:79:39:f5:f3:64:49:c8:69:1a:1d:58:d6:
be:b0:0e:00:16:0d:f3:7f:ea:8e:19:64:74:bc:9f:c2:91:cc:
80:bc:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:34 2025 by rpki-client