Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: f48w+K+oeNdMf+miVqQD+wZnrPmkhSD18V2n79U+FJk=
Subject key identifier: FA:5E:43:90:22:42:B3:B0:90:48:48:42:79:35:D5:F6:8D:EE:80:76
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 0199FD6B3178DA4515B5EE49639BE48C3751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 0ABE
Signing time: Sun 19 Oct 2025 17:01:24 +0000
Manifest this update: Sun 19 Oct 2025 17:01:24 +0000
Manifest next update: Mon 20 Oct 2025 17:01:24 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: psrJaNoYzl3kjE9FD0EXcd6qFhIjWNlxGRzGgvf9Asc=)
2: mKP-r2WNz-DcN8jHguqt0IynJdI.roa (hash: 64sCq3JbYFHT/xnTN/Iz1j1wV1/No8n++lWEXivZPic=)
3: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (hash: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:31:78:da:45:15:b5:ee:49:63:9b:e4:8c:37:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Oct 19 17:01:24 2025 GMT
Not After : Oct 20 17:01:24 2025 GMT
Subject: CN=fa5e43902242b3b0904848427935d5f68dee8076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:32:12:45:51:35:c3:4b:d5:7a:0a:0d:78:
44:e2:63:6f:ac:43:4a:f4:72:f5:a2:19:56:d8:a7:
59:59:90:0b:6b:23:c5:3d:d4:f5:27:98:f8:ad:93:
44:18:35:a2:af:31:f1:c7:9b:ea:bf:3c:39:36:d5:
bd:04:be:be:29:59:19:fe:94:68:a6:fb:8a:3e:d8:
52:ee:f5:cf:93:94:12:38:a2:bf:60:c8:f6:1d:97:
44:a1:31:e0:64:27:88:a0:29:58:7a:4f:8e:70:1f:
07:2b:56:2d:7e:e5:a9:4e:91:9e:17:7b:ab:e6:01:
9f:1c:b8:43:f1:d4:b5:40:e0:17:8a:94:36:51:fc:
98:d0:f2:f3:48:3d:18:d1:21:b7:5a:2d:f7:76:ce:
bc:9d:08:fa:3c:63:76:48:57:8f:78:46:be:b0:92:
d5:0c:60:b6:c3:e8:c9:b8:9a:14:af:41:2f:ef:15:
c8:08:c5:ce:f6:c0:3a:d3:e2:61:b7:10:04:64:9c:
3b:65:be:3f:0b:24:6e:63:57:e9:a7:dc:74:7a:05:
43:f2:2f:8c:e3:56:84:44:4a:84:45:f0:93:96:b5:
12:e7:04:a0:27:de:92:6b:99:ca:42:50:9a:7a:2e:
9e:d5:6d:d0:a4:35:1c:e6:fb:37:42:72:f1:52:d8:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5E:43:90:22:42:B3:B0:90:48:48:42:79:35:D5:F6:8D:EE:80:76
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a9:40:ba:fc:b4:c5:ce:b1:ec:40:52:86:5c:39:5b:5a:c8:
5f:53:ec:87:87:e8:18:93:3a:66:31:d0:f5:ed:a6:93:a8:3e:
f6:1b:7e:19:92:1d:95:90:ad:ad:01:df:11:01:da:4c:8b:b0:
00:31:73:f9:45:c4:d4:3a:46:ba:df:28:01:5d:a2:aa:c2:7f:
5f:e2:03:8a:63:6a:3d:8b:fa:b8:06:08:56:2a:06:29:95:99:
6a:bd:41:61:4c:c5:b5:64:4b:d0:f2:dd:02:07:52:59:f6:32:
6a:41:e3:04:d5:72:53:fb:ee:1c:c3:62:80:b7:ea:c5:11:68:
7a:99:b3:57:97:3c:91:92:dc:57:27:30:f9:7b:73:73:c4:b9:
ac:53:70:4b:75:55:a1:f8:80:77:78:d9:0a:a4:01:d9:9a:1c:
81:35:1b:fe:7e:66:4e:b2:f8:12:67:27:8f:8b:f2:bc:f1:de:
16:00:3b:f1:6e:5a:48:8c:be:a0:03:01:9f:40:29:52:ae:5d:
ef:59:62:c9:d9:28:d4:23:5a:57:9f:53:59:fa:fe:8b:d2:eb:
5c:02:51:f7:d1:a4:f4:69:d5:0a:7a:22:ab:9d:b1:76:2a:03:
60:51:26:19:71:74:c4:11:ef:16:ec:26:3f:d8:0d:f7:af:5f:
d4:3c:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:00 2025 by rpki-client