Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File: 8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier: oGEsaFrP9krnUzQn/pkc9DZkOeHjbXUgBX9VTBJ15+Y=
Subject key identifier: E7:3A:05:FF:FA:71:CA:A6:67:F9:C9:5A:9B:4B:56:05:28:9F:2E:1E
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial: 0199FEEB8A75A5A4743E6114618FD0CFA43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number: 0231
Signing time: Mon 20 Oct 2025 00:01:12 +0000
Manifest this update: Mon 20 Oct 2025 00:01:12 +0000
Manifest next update: Tue 21 Oct 2025 00:01:12 +0000
Files and hashes: 1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: e26c9p8xrFHOJzXqmrzI3Inl8geJyPVTwcFUaI7PEyI=)
2: I9B7Iw-lVDjKZXQpLdWJsK0y0wg.roa (hash: 51ni5eAnE+Uva7Z7eVwqTn8UmbMwpkaozroHS0ckX3Q=)
3: uYmDkNSOTpoFpFn87a-aXY254ZI.roa (hash: f1Ff5ggY03B285EwxB+EjeSorrx1qWrOpvl1cl092pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:8a:75:a5:a4:74:3e:61:14:61:8f:d0:cf:a4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Validity
Not Before: Oct 20 00:01:12 2025 GMT
Not After : Oct 21 00:01:12 2025 GMT
Subject: CN=e73a05fffa71caa667f9c95a9b4b5605289f2e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:2d:33:6f:cf:e6:d7:f0:5c:52:cb:93:18:
55:98:bd:9d:cf:68:a5:72:f0:ac:aa:7a:53:a1:c0:
9b:29:ed:1f:55:4e:86:be:e4:01:fc:9c:3a:ae:75:
80:c7:1e:b3:da:bd:db:53:b7:74:2d:1f:42:ed:7d:
fa:f9:d9:04:90:b3:40:da:45:63:54:26:cf:38:a9:
67:0c:95:84:ad:78:0a:a7:c2:e5:29:14:4b:be:c8:
f9:5a:b8:ee:6c:5c:f8:63:5a:8d:32:49:e7:46:d5:
ad:68:ce:ae:21:5d:67:2e:72:d0:f0:40:96:5a:ca:
1c:ae:b3:bc:de:c6:fd:ac:d2:bc:ac:e2:08:8e:0b:
75:7f:34:e0:ee:81:20:39:ad:1f:0e:13:20:b3:d2:
f1:21:03:b4:93:59:00:d6:c0:c1:37:ee:ba:60:f9:
a0:d9:65:7d:f9:37:c2:70:76:9c:18:60:10:27:0e:
1d:df:d8:92:47:7b:7d:a8:12:04:eb:57:ee:4f:db:
2a:ff:7b:5d:a0:6b:72:12:40:2c:ae:d9:17:8f:f4:
33:67:c2:4e:f5:1a:fe:41:52:8e:a5:54:ae:b9:9c:
ff:eb:c9:82:15:71:63:df:fb:be:48:d3:cd:dc:3a:
f5:a0:1a:6c:42:b6:68:22:12:b2:2a:7b:d7:60:c4:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:05:FF:FA:71:CA:A6:67:F9:C9:5A:9B:4B:56:05:28:9F:2E:1E
X509v3 Authority Key Identifier:
keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:e6:05:3c:41:b6:cc:97:4a:f0:fd:cc:8a:a4:d1:ca:9e:
99:43:05:f4:f2:f8:88:14:b8:ae:9f:16:af:17:3f:ae:ab:b7:
cd:dd:e3:dd:dc:4b:22:16:93:57:98:37:c9:c7:20:d1:c3:9a:
47:5a:10:b9:95:61:d2:3e:69:a0:52:9f:0e:bc:06:f6:04:12:
82:eb:98:f3:6a:5b:63:f0:62:73:4d:c6:71:00:a7:65:d3:ee:
b6:e9:3e:88:ac:b3:28:a0:6e:0d:8f:ed:f8:26:3f:e4:98:3c:
25:36:c5:f2:60:ed:75:36:28:ea:a5:8b:51:c2:4e:a8:4d:95:
41:2c:e4:d3:36:a9:8f:27:47:5e:9d:fa:e0:8d:fb:e1:55:44:
ed:d6:c8:b7:bd:e5:56:22:bb:3c:3c:a9:0f:20:3e:42:99:2f:
74:fd:22:2c:89:a9:84:d2:73:29:6f:97:95:9c:37:46:a5:3b:
b2:0d:bd:d7:23:98:bf:23:ae:63:0a:dd:2d:df:0b:9f:f2:de:
5a:cb:e4:9f:09:9d:d8:45:51:83:91:20:a2:89:61:88:ab:cb:
e5:e3:b1:72:ef:7b:3e:d1:0e:9f:94:be:7b:f9:a3:fc:67:fa:
0d:f0:e3:e3:33:03:41:0b:db:4d:15:58:b0:d1:8f:da:20:0b:
0f:f7:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:59 2025 by rpki-client