Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: B4u/usR8UgzHwdQY8Hl+itCC3rZkYAq8NKfkVROOhpc=
Subject key identifier: 85:C3:C1:14:97:97:02:E7:0F:2A:8E:6C:04:78:7E:12:05:A4:4C:11
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 019A00DA4F6F2C942E85BD193803F55A8EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 099D
Signing time: Mon 20 Oct 2025 09:01:38 +0000
Manifest this update: Mon 20 Oct 2025 09:01:38 +0000
Manifest next update: Tue 21 Oct 2025 09:01:38 +0000
Files and hashes: 1: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: 1kZOt4edH74jiCecY7xnZkCacxHhFojg51p8K/Ygglg=)
2: UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa (hash: m8pCii9ZrFUBgw1JUoFjV1fAPuVi2H0sk6feFoafD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:4f:6f:2c:94:2e:85:bd:19:38:03:f5:5a:8e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Oct 20 09:01:38 2025 GMT
Not After : Oct 21 09:01:38 2025 GMT
Subject: CN=85c3c114979702e70f2a8e6c04787e1205a44c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:67:91:5d:6f:5d:a1:04:5e:39:ff:04:eb:
a5:0f:6c:32:46:dd:0c:c3:6f:12:1f:1f:55:9b:39:
c4:32:9b:25:46:b6:46:75:22:da:ca:4d:75:ce:c0:
a4:54:6e:9a:57:3e:1f:6b:25:53:f0:8c:a8:6c:ad:
fe:ac:d3:f8:58:43:05:d7:3c:3b:0e:85:a4:3e:60:
a1:e4:92:9b:98:d4:50:66:eb:0d:b6:88:97:ec:60:
c9:79:bd:fa:a7:25:c2:15:41:be:6a:a0:e3:56:9a:
07:5f:de:0a:97:de:81:12:c0:d7:12:0c:7f:d1:af:
1f:e9:de:b3:6d:7d:7a:f3:08:ba:9d:00:85:87:72:
05:80:4c:3d:dd:78:0f:4e:69:d9:8c:a5:70:d0:8d:
67:4f:e6:df:89:48:fc:f6:11:a5:40:ca:7b:e7:50:
90:4a:2e:1c:63:fc:61:cd:bf:ae:0d:df:ec:be:25:
96:21:41:62:2b:73:7b:91:79:4a:43:85:cd:1a:81:
23:43:98:8d:08:e7:40:62:73:08:d7:e8:ad:4f:85:
f2:72:11:d6:85:a1:eb:9c:30:42:9f:13:dc:e7:b6:
8f:20:1c:7f:4e:e2:32:52:5c:29:2a:0d:a6:53:59:
44:89:f0:c3:00:66:03:29:05:57:7f:48:20:5a:ed:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C3:C1:14:97:97:02:E7:0F:2A:8E:6C:04:78:7E:12:05:A4:4C:11
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:21:12:66:7f:f1:aa:63:a0:64:a8:d5:ed:c2:ac:8c:e1:c3:
ab:28:74:61:7e:78:70:17:f0:ea:e6:5b:4d:20:45:ad:11:8c:
34:ab:d2:43:b3:ea:0d:3e:60:da:b5:5f:44:76:d8:8c:37:27:
fe:d8:69:6e:85:d3:c8:23:23:2a:32:e5:00:fa:85:f1:7e:7f:
16:90:84:16:58:fa:fa:b4:d7:3f:2f:86:d1:83:09:cf:77:1c:
99:e0:8d:91:53:ac:8f:21:e4:8c:ef:0e:13:69:04:73:e0:68:
d3:ee:6a:76:8d:69:89:85:8f:63:1c:e8:0d:61:2b:b8:4d:76:
4a:40:c0:ef:71:b6:a2:d9:83:30:0d:66:f6:1d:53:68:de:74:
ed:d6:21:21:91:bb:c8:80:a1:f2:f8:bb:59:bb:a8:a4:4e:67:
21:04:09:64:bf:7c:cf:b7:d4:bd:d3:23:7d:88:28:3d:6f:f1:
66:1f:07:6f:82:70:85:e1:2c:50:f4:e3:30:a6:55:b2:8b:64:
46:a1:7b:79:4c:7e:1b:75:a4:11:98:98:e4:bb:35:a2:74:fa:
58:f8:3d:e8:14:f8:18:d0:72:55:57:12:3d:4e:1c:2e:6c:18:
75:f6:93:d2:29:51:4e:36:a3:bf:05:94:f9:83:63:20:5e:52:
81:74:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:53:41 2025 by rpki-client