Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
File: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json)
Hash identifier: u5OOMDdE8gpdIpjvN0PSscyCe7snC8szUmCxvl2crjE=
Subject key identifier: 68:89:86:40:C4:61:3F:EE:AE:0C:1D:C6:C3:1E:C4:0C:02:43:54:52
Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
Certificate issuer: /CN=f0594e7a31db7937fab52fcc389059d3451f2366
Certificate serial: 0199FC2143AE80624456AF825531EC5D4980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
Manifest number: 1A
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: 1725gUGQIpKhUhC6TOahnEdES40.roa (hash: gz+cyjfpqWkO2//cF11n4nopLq+bPFaAXZONiWW+enE=)
2: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: 9DkwIfdTgUfYm5qud4tTgmjsUtgi7tmHa5tQTZx3ucU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:43:ae:80:62:44:56:af:82:55:31:ec:5d:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=68898640c4613feeae0c1dc6c31ec40c02435452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:64:db:76:3b:f8:5a:54:d9:a2:c7:61:05:
d1:23:95:9f:0b:df:d8:b8:f7:7d:ba:d3:66:0b:8e:
b2:4b:9f:99:92:5d:e2:28:a1:9e:ee:ed:22:ff:a3:
b8:e9:80:2d:ac:f3:fd:f9:25:65:1c:44:4d:4c:61:
f7:22:93:5b:bd:0c:4e:0c:19:ce:18:dd:da:f5:9d:
54:4b:aa:ce:c9:ca:82:b6:b3:5a:4b:17:37:06:e6:
16:ad:91:e1:36:35:26:d3:0e:eb:ae:4e:0a:97:87:
82:7f:be:9e:53:89:12:63:c8:92:76:a8:5e:39:fb:
72:d4:87:4c:b7:93:d3:65:6f:34:98:2c:4a:60:05:
ea:5a:ac:62:4e:da:3d:0d:9d:72:2f:38:6e:77:b1:
b7:3d:c3:98:2b:3b:6f:31:bb:08:50:16:5a:74:49:
b5:b9:b0:4f:74:e5:ac:3b:81:aa:96:5d:0a:d1:b9:
a3:f5:42:d7:92:b4:34:f6:1b:7c:41:9d:50:cc:3b:
97:d1:2a:14:5e:41:ef:55:1c:be:7c:32:6e:53:8f:
2d:92:a3:2f:fc:4b:d8:1a:61:15:b3:5e:e5:07:3f:
86:17:6b:cb:89:15:49:e9:df:b1:b6:55:84:3b:d7:
58:be:f0:9d:67:93:f1:ea:60:56:92:e2:87:53:d3:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:86:40:C4:61:3F:EE:AE:0C:1D:C6:C3:1E:C4:0C:02:43:54:52
X509v3 Authority Key Identifier:
keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a5:e4:0a:c8:00:0c:3c:5e:f0:16:36:22:f8:d4:7a:df:18:
0c:fc:d2:1d:b5:58:14:3a:ed:da:c7:7b:a2:d0:6e:ad:64:92:
cb:ae:bf:c9:5c:61:36:4e:ce:81:f4:32:ea:bb:8f:d2:4d:64:
77:c0:b1:7f:79:bc:55:45:5e:8a:b6:3b:bc:9d:11:69:9f:bf:
97:b5:6e:cd:50:35:28:e5:02:e6:59:af:14:70:f5:25:be:79:
76:f5:72:bd:aa:f9:72:45:e2:39:04:c8:3c:1b:50:ab:81:10:
ae:6e:b1:9e:8d:b6:cb:8b:5f:e7:64:b9:6b:70:c5:bc:96:84:
4a:4b:15:36:92:88:5c:43:65:1e:55:b1:e7:7e:27:c8:b0:05:
d3:c2:ca:71:df:8f:26:34:3a:a6:8d:8d:75:9c:bb:ad:e3:cc:
2c:95:69:8b:41:4a:41:8b:1d:62:5b:69:96:fe:62:00:ea:dd:
2d:ef:28:5b:b6:ce:a3:a9:32:1f:eb:93:b8:3c:e0:42:e2:ed:
d6:c3:f1:75:94:81:c2:f0:39:e2:ad:fa:1d:3e:c7:ba:37:67:
4c:96:2c:47:41:e9:20:1b:bf:2d:6b:da:55:a5:7a:0d:f3:ac:
80:9f:07:95:86:11:cb:da:e8:83:24:62:cd:36:02:57:f5:ab:
14:e0:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:07 2025 by rpki-client