Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File: 8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier: ZbxrBzGpn8ImdFXABYOMP5itcbn/c+gnJ5KTdLmY/tM=
Subject key identifier: A1:BA:09:45:47:CF:D4:55:2F:D8:42:23:7A:86:C2:0D:FD:79:82:61
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer: /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial: 0199FBEB7195CEE06E4CC583DB5BA4F7A804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number: 0F36
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: 38C2XU24LX0wXRW44M+z20Rxr3S8UZJ96bvenfvjlhw=)
2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:71:95:ce:e0:6e:4c:c5:83:db:5b:a4:f7:a8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=a1ba094547cfd4552fd842237a86c20dfd798261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:69:ad:8d:e3:99:a9:bc:39:78:ca:0c:a2:
fd:59:5e:32:3a:0f:c8:07:2e:17:2e:21:89:1b:5c:
b2:d3:f1:bc:c8:99:8f:29:8f:fb:44:8e:c3:89:1c:
3f:57:f2:5c:3b:ac:2f:7f:2b:ed:42:dc:9d:a9:d1:
32:ea:22:b9:54:3e:77:cb:bf:2c:93:18:01:e8:95:
07:7f:78:d5:01:a3:79:8b:cd:63:76:11:23:af:a8:
4a:99:90:b1:56:f4:18:90:01:a2:a2:9d:b3:ee:11:
b1:0b:15:8f:20:2c:08:40:3b:da:85:2b:ba:49:b9:
4a:5a:b6:1b:88:c4:3f:12:c2:49:7b:fe:5e:a4:d2:
22:9b:db:41:6e:d3:99:58:6f:c4:0d:5c:06:90:3c:
37:a4:86:43:e6:86:1b:44:0a:de:d1:00:0d:7d:76:
9f:c8:c7:df:24:8b:70:58:a2:3e:d2:95:b1:04:94:
d6:8b:74:f4:71:6d:a5:4a:2a:9e:0a:fb:52:54:2a:
c1:2f:f0:6e:34:db:d0:8f:b5:45:d2:13:85:6e:62:
f9:87:a7:0d:71:74:81:28:1f:d7:5c:e2:c9:9a:25:
8f:5f:24:c1:34:63:bd:13:3b:1c:ad:d2:30:57:c6:
38:71:50:a3:c2:0d:1f:06:35:15:06:1d:48:93:ae:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:09:45:47:CF:D4:55:2F:D8:42:23:7A:86:C2:0D:FD:79:82:61
X509v3 Authority Key Identifier:
keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7c:4f:a4:ab:ce:b0:0e:46:a1:38:d0:f9:d6:82:a4:7d:91:
13:3d:24:c0:05:fc:7b:13:b8:ac:56:18:fd:60:4a:8c:88:73:
fe:80:4e:ac:14:32:27:87:8a:78:b1:aa:47:e7:b1:41:00:34:
db:40:ae:dd:50:cc:85:72:77:d4:e0:f2:0c:44:64:ff:80:ae:
a0:d6:b0:84:e5:2d:87:9a:8a:bb:8d:54:64:c9:36:7b:9a:81:
7f:5d:c6:86:98:8e:3c:45:5a:f0:cc:3b:55:6c:e2:5f:18:59:
27:10:e7:15:39:03:0c:fd:a8:43:c9:e0:9e:55:69:8d:e4:7f:
57:7c:f5:bf:d3:de:56:c7:40:08:5a:4e:bf:67:3d:c4:43:91:
46:9a:d1:24:c2:c9:2a:dd:1a:34:4f:56:55:f4:ac:76:9c:1f:
82:5e:ea:4c:99:8d:ed:7a:9d:cf:e4:76:81:15:db:9b:3c:80:
4e:13:4a:30:4f:09:3f:b1:3f:22:41:0f:71:09:1e:0b:c9:47:
ee:44:49:cd:3a:d5:e6:34:ed:96:08:01:b0:9b:8e:e2:d7:88:
0f:ff:d5:6a:79:5b:8c:1c:d1:da:36:12:46:97:fe:d8:c5:4a:
e2:ca:19:fb:db:30:d9:fa:c7:01:27:3c:17:ad:f5:53:a3:59:
0b:09:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:22 2025 by rpki-client