Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: 2SH5OOsfYsSOVZ4oe0aoyZI/3CmQNTW5okVY4mA6jmE=
Subject key identifier: 72:19:FA:3E:9F:48:70:C7:8C:0F:55:E9:FC:18:D4:41:81:B4:2A:7B
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 0199FC58349F441A72F134E7C942A4197745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 04C9
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: SN2CuOf+7w0gCC5m5HaxP98RETepyrbRXW9kNKh8Isk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:34:9f:44:1a:72:f1:34:e7:c9:42:a4:19:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=7219fa3e9f4870c78c0f55e9fc18d44181b42a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:5b:54:17:c3:b0:7d:6c:07:e0:4c:18:70:
66:a9:a0:e0:b8:1d:ae:f8:4c:c5:a3:8a:62:b5:a6:
43:2f:5b:f0:23:40:2e:2f:2e:73:6a:94:2e:7d:ff:
98:4f:0c:ba:6a:53:77:ca:16:b3:22:11:3e:46:ad:
1f:7b:8b:9e:6a:67:46:60:40:51:c0:e9:39:f8:ab:
c2:1c:51:20:d9:3d:b5:04:b8:63:ba:83:7c:2a:9a:
8d:b8:55:0c:f9:8e:7b:9b:2c:dc:09:c4:13:54:c6:
74:f1:dd:14:3b:89:e2:cb:54:6f:0a:05:b0:c3:43:
f5:c1:c3:49:39:66:2a:ad:fb:30:4a:e8:ba:cf:33:
4e:15:0b:2c:77:97:89:c6:2a:aa:14:47:9f:1c:6e:
10:23:c6:11:ce:7f:82:58:8e:62:83:3b:9c:ad:02:
8b:90:59:31:41:b7:fb:81:11:ba:20:eb:b6:6d:e4:
c6:e3:f3:7b:7c:63:80:41:68:de:d4:09:d5:67:a4:
77:68:87:96:05:57:bc:e7:4f:d9:c1:f3:8b:76:4d:
0c:5b:aa:91:e2:cb:bd:f5:b9:75:f8:ce:26:2b:20:
cb:2e:3d:c8:8b:2a:dc:47:e4:80:3a:86:19:51:28:
ed:80:b7:3f:b7:b7:19:64:a0:59:6b:08:97:88:f9:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:19:FA:3E:9F:48:70:C7:8C:0F:55:E9:FC:18:D4:41:81:B4:2A:7B
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:96:2b:6e:ac:2b:56:1f:58:33:76:9b:31:f6:a0:9f:b0:b6:
21:02:7e:39:bf:0c:ba:a6:97:99:d6:6a:69:98:2c:f7:25:18:
aa:44:13:57:7c:cc:78:3a:aa:08:47:72:bd:c3:5f:4e:7b:4d:
75:60:3d:fd:49:2f:a2:5c:6b:90:1d:5d:22:62:34:55:2e:78:
9c:21:29:cc:28:6f:fc:f2:30:0a:58:29:ab:e5:22:6e:bc:75:
c3:86:38:f9:93:53:e6:21:8a:4e:2c:03:e2:7e:e8:fe:21:fd:
67:13:bf:76:f1:a9:49:b5:e1:bc:aa:1b:af:48:bc:31:01:2f:
7a:1b:39:65:66:22:e3:c1:b4:5a:7d:c3:9f:ed:e5:d3:08:f0:
ee:78:68:c4:24:b3:1f:4b:42:c3:6c:a6:59:9a:51:14:1f:f2:
54:88:4e:62:8f:b8:01:f2:a0:de:c9:cf:01:1b:ea:fa:bd:cf:
7b:8c:07:41:20:d4:94:18:c1:0a:1d:96:6c:3a:7e:6f:23:75:
c5:76:20:cc:54:ce:9c:12:05:50:d0:e1:78:b0:e8:f8:bc:42:
3a:63:9b:24:ad:0e:67:5e:a0:22:f1:05:46:09:fc:d1:3f:bb:
27:d2:37:ce:e2:c6:06:d1:04:b5:bc:d8:f1:d6:e7:cd:5e:67:
64:de:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:50 2025 by rpki-client