Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: bd3AObKu5F19BAEIqf3DWrYQ6Kgr2t/Z3kV+lVUIlV0=
Subject key identifier: F9:0D:61:50:CA:2C:6D:2A:AB:D6:8C:8B:8C:49:D8:FA:6D:35:B3:B7
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 0199FFFE7DD9991477361DE3996BBED9F256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 010F
Signing time: Mon 20 Oct 2025 05:01:32 +0000
Manifest this update: Mon 20 Oct 2025 05:01:32 +0000
Manifest next update: Tue 21 Oct 2025 05:01:32 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: OpZmGiJBdjjYn0sxN8KX4nm+shApBLzU6r4d+/j2NBk=)
2: O1NX1SHolf4Je2aEzJJZvHyU16A.roa (hash: po5PkDRV33bzHbue9Doph6bDM4MKCS5aDFumD95q9kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7d:d9:99:14:77:36:1d:e3:99:6b:be:d9:f2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Oct 20 05:01:32 2025 GMT
Not After : Oct 21 05:01:32 2025 GMT
Subject: CN=f90d6150ca2c6d2aabd68c8b8c49d8fa6d35b3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:44:aa:c0:3f:74:fc:c8:9c:ad:fa:d9:a3:
84:5e:e2:55:e9:42:03:8d:79:92:a0:a7:43:95:e1:
82:79:9b:05:d9:7a:ce:bb:34:1e:3d:9d:d0:0d:d8:
46:56:c2:f5:52:56:c6:7e:42:b4:7d:c2:5d:1a:b8:
82:ef:46:1c:45:09:3a:16:fe:13:f3:24:c2:36:7c:
bd:5f:03:ce:19:8f:bc:e2:18:a9:c0:79:e8:8c:27:
1e:45:65:f7:fc:bc:29:43:15:23:61:1a:2c:c1:2a:
0f:03:27:94:d2:42:1e:4c:34:16:dc:68:b0:68:af:
70:56:8b:a6:45:55:9c:e6:5a:b7:6f:4b:fe:ea:97:
ba:de:9e:ce:15:89:fa:98:83:1c:75:28:a3:54:87:
0f:84:ee:95:f6:82:1a:57:24:55:48:61:71:c0:85:
56:00:f8:0b:44:04:2a:35:18:01:67:37:2f:ff:ae:
c7:46:8f:1f:e7:d0:fd:e8:a9:ae:d9:4d:10:aa:0d:
85:81:a1:63:8a:63:56:84:3c:84:f2:53:d2:17:37:
37:20:bb:cc:ae:57:07:45:f6:8f:1e:9d:fd:94:df:
8a:62:64:d5:04:bc:61:72:90:19:31:1f:77:30:ff:
31:f1:20:c8:6b:50:75:72:6a:36:67:81:73:c3:dc:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:61:50:CA:2C:6D:2A:AB:D6:8C:8B:8C:49:D8:FA:6D:35:B3:B7
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4f:b6:b5:7c:3f:39:fa:85:37:bc:0e:56:c1:c3:51:f3:e1:
53:46:e2:43:ca:fb:37:13:5e:9d:fe:94:1b:af:6b:2c:31:31:
ac:f8:d1:44:69:ca:62:00:41:c1:68:ce:49:83:72:a6:6d:58:
1f:21:3c:70:38:9a:7a:58:b1:6b:c7:64:34:f7:f4:b5:ff:b1:
42:9f:e5:c0:f6:1b:e6:9d:5a:b8:e6:37:91:53:d2:12:17:64:
b5:c9:4f:51:f5:a7:c1:42:a3:20:3d:3f:05:ac:b4:aa:cc:82:
89:56:85:41:70:d0:41:fc:df:96:dc:a3:99:9d:0f:73:0a:b3:
92:ce:18:30:b8:be:89:77:5b:26:24:2f:99:c6:89:27:e7:87:
39:56:fe:ba:9f:d1:b9:e1:bb:1c:d9:8f:ad:3a:cf:1a:b7:57:
fb:d6:cf:60:f4:72:f0:54:5f:8c:a9:22:2c:c5:eb:98:d2:fd:
35:be:a3:c1:72:17:6e:3e:d3:c6:74:c8:cb:c4:91:c4:5b:44:
1d:85:88:00:91:5f:09:d5:53:b6:d8:40:84:48:85:b5:d2:0f:
22:a4:d6:56:2e:22:8b:1f:21:2c:fe:60:20:a6:44:a0:09:29:
c0:0e:eb:eb:62:d3:ad:b8:5d:68:a6:cf:ff:da:11:f2:04:ec:
95:0f:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:27 2025 by rpki-client