Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier: LMobyqHLD4hpd5iC7m+cmJSZxg/IAZKSGaoBoWOuVXc=
Subject key identifier: 28:20:F8:A0:75:4C:20:DE:00:B7:B5:67:CE:0C:DB:4B:85:15:DF:A2
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial: 0199FFC8C291F545F215CCC4871916A37D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number: 08F8
Signing time: Mon 20 Oct 2025 04:02:50 +0000
Manifest this update: Mon 20 Oct 2025 04:02:50 +0000
Manifest next update: Tue 21 Oct 2025 04:02:50 +0000
Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: a2tsgN0v+z3p+grZvWHJLP4PXcyQbLgwD9TBEEclyI0=)
2: QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa (hash: MDrtXAxZplUH7/qxVqW6e+250Fu4R4SP6B723HR2u5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c2:91:f5:45:f2:15:cc:c4:87:19:16:a3:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Validity
Not Before: Oct 20 04:02:50 2025 GMT
Not After : Oct 21 04:02:50 2025 GMT
Subject: CN=2820f8a0754c20de00b7b567ce0cdb4b8515dfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:0d:40:94:24:1f:b1:9d:8c:db:bc:55:70:
36:2b:61:0d:fb:ce:14:d8:90:7a:6f:6f:a0:af:e1:
d0:5f:7d:4c:8d:01:38:ef:5b:51:ab:45:00:86:f5:
4b:2f:a0:a2:06:17:4c:e7:c5:cf:84:16:30:a5:a9:
d5:fd:6a:01:76:61:ba:14:af:bf:89:b9:a9:83:f6:
8f:cc:48:10:70:99:17:16:29:66:bf:40:de:65:b8:
29:9d:e2:c1:4e:ab:e0:26:9b:be:5e:5f:9d:c3:83:
e6:b0:fb:1f:0e:87:d1:05:17:ed:5a:a1:c6:89:7e:
0a:d3:6f:85:92:6d:a6:15:53:cf:ad:1d:ce:49:4d:
7d:11:f0:fc:ac:08:98:fd:7e:4c:26:fc:4a:3d:2c:
12:55:9f:56:ed:f9:b3:ec:50:3b:b6:68:6f:0d:d1:
07:5f:a6:ac:9e:8e:07:f0:ce:a3:c9:1c:b3:a2:ad:
cb:fd:f3:ac:dd:03:cf:4a:54:df:fe:b2:8b:04:9f:
26:03:e6:76:23:01:75:91:6a:d1:43:af:97:b2:03:
ad:33:c6:42:fa:56:40:e8:17:9e:15:81:05:59:ab:
7a:16:be:23:f9:48:12:01:ff:41:0c:01:c8:77:12:
30:00:80:56:55:9f:e7:90:3a:78:3e:3d:b7:62:b5:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:F8:A0:75:4C:20:DE:00:B7:B5:67:CE:0C:DB:4B:85:15:DF:A2
X509v3 Authority Key Identifier:
keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:28:a1:40:9b:08:34:9e:10:82:76:75:e6:e4:e1:8d:58:
ac:ae:47:97:47:b3:81:b7:aa:e0:9c:e7:06:34:83:00:1d:1a:
cd:12:9e:8c:89:a6:9a:d4:7c:7b:dd:1a:9f:fe:05:99:48:00:
14:0f:ec:78:dc:dc:fd:44:46:46:fb:89:04:58:27:b5:f2:e4:
c9:cb:10:5f:58:c8:78:de:2c:9d:16:49:1a:51:49:df:97:2c:
ed:50:c2:19:a5:47:0c:4a:7c:a7:45:43:2f:42:91:ea:23:cc:
48:64:ac:2a:46:fc:2f:30:f6:0a:dd:f3:dd:da:dd:6f:c9:06:
87:9f:c4:81:39:66:63:2b:aa:f9:c9:29:9e:dd:19:f2:8f:d8:
be:25:b8:c7:50:79:72:8d:e0:bf:f1:9c:92:34:90:17:0b:8b:
4e:56:17:ba:4b:11:df:db:fe:f9:5b:67:a1:e7:c0:2f:cd:99:
28:79:c7:85:e2:b6:5c:b1:e2:49:a6:24:41:57:3c:b9:a0:5e:
a1:6d:6d:70:6c:46:48:a9:b7:63:ac:ad:23:57:fa:11:40:61:
88:cb:14:32:bc:68:6c:a1:22:96:75:a9:20:e5:5c:79:27:5d:
15:1c:d8:33:42:07:f2:d1:ac:af:55:39:8d:e5:1b:4a:2a:e7:
27:bb:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:15 2025 by rpki-client