Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: fOvreKpWbmGaitrl1Zdr48GJpfO+xeOP5dgAfI8ENB8=
Subject key identifier: 1F:72:4B:A4:A7:0D:61:E4:ED:F7:5C:FA:7F:76:49:BE:A2:77:AD:F7
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 0199FC58D7A70FA52508B20BB59E432561AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 07A3
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: ws8ZGwdVDlJTqVYTd99e5vHiYtuHWJeNqQ0EhXRr1RI=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d7:a7:0f:a5:25:08:b2:0b:b5:9e:43:25:61:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=1f724ba4a70d61e4edf75cfa7f7649bea277adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:24:eb:cf:23:75:2c:f9:3f:ed:b3:b3:e2:
3d:96:63:3c:de:43:62:4d:f8:d6:91:46:1a:12:4e:
6b:6c:5c:78:2f:ae:e4:f9:5d:c2:46:4b:06:d8:d0:
5e:75:d4:7e:d1:f7:00:03:b5:d1:f5:78:53:df:0f:
83:5a:12:c5:4f:e0:fe:64:c2:aa:7f:d1:8e:00:9e:
55:c1:71:72:1b:67:c4:0c:17:4e:87:83:43:24:23:
d4:20:c9:f1:ac:57:82:64:b7:57:27:c3:f3:7d:7b:
2f:16:67:b1:1b:4d:35:68:71:f6:9b:dc:d3:b4:d3:
09:8a:2f:c6:86:72:70:83:f3:64:df:0a:b8:8c:5b:
3a:e7:13:14:00:07:d0:50:34:49:d0:aa:d4:d2:f2:
38:77:2a:f9:43:b4:64:d0:d2:c5:e3:ac:90:00:ec:
e8:82:a6:d2:44:68:b4:fe:48:d9:4c:5d:be:89:fc:
1b:3b:21:93:41:fa:e9:61:76:e0:32:6e:3b:f2:43:
46:7d:6b:8d:1e:81:c9:3d:02:6d:72:69:13:82:31:
e5:4e:e4:48:a2:b0:cb:05:6e:7d:68:27:1f:47:cf:
6e:17:4b:fb:05:2e:78:a6:a5:f6:f2:a3:78:72:f9:
9b:24:aa:a6:94:df:8c:0a:f1:f3:8d:c1:f0:be:b5:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:4B:A4:A7:0D:61:E4:ED:F7:5C:FA:7F:76:49:BE:A2:77:AD:F7
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1a:e0:93:05:b6:d2:76:94:8a:6c:1e:5b:b4:be:32:a7:b4:
6a:ce:ca:52:9e:52:c2:e1:a4:0b:a3:65:2b:35:0a:81:90:40:
2a:78:4c:3a:43:07:d6:b7:11:00:da:05:ed:eb:3e:e4:d5:f0:
fc:4b:d6:22:c5:18:05:ed:f6:4d:84:72:0c:28:eb:19:0d:b0:
27:fd:6a:31:f9:46:11:bd:0a:3d:a3:be:9f:a8:1c:2c:04:57:
d7:65:7c:7f:39:b5:9f:ba:b8:ba:c4:dc:45:94:97:17:72:af:
ab:ed:d6:7e:6f:be:64:63:83:41:a4:82:91:38:e7:a0:6b:8f:
46:98:d6:73:dc:e4:81:6f:54:b6:92:53:9f:62:39:3a:29:1f:
08:be:ba:c8:b8:ba:60:96:6d:8e:4d:d5:c6:d9:b9:2a:a7:58:
2a:79:58:91:56:25:5f:e4:8c:3c:a8:82:11:43:ff:92:63:dc:
8b:97:e4:ef:4d:53:21:25:fd:ab:09:7d:cd:28:6a:85:3c:21:
e8:75:d3:a9:27:74:57:9b:af:84:b1:e8:95:1a:c6:f0:5a:74:
45:88:64:63:ee:b5:bc:e1:f8:79:40:b8:cc:bb:70:ab:57:c0:
36:f5:84:26:15:6f:88:36:1e:7f:37:d8:97:60:1a:95:40:dc:
6d:3a:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:30 2025 by rpki-client