Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier: +tRL3+313LjIGGWwOLvfhyrN4M/cOxKlkTe4TsUsRfE=
Subject key identifier: D5:2A:76:2A:C0:2C:59:C6:DA:F9:9C:82:36:2B:63:F5:03:63:09:08
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 0199FBEC0D2B1DBF644762413351021326B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number: 0BDC
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: JOPqVKLLRDglkrJDLbbQoaFVugC2ouMlK6GRGguqSy8=)
2: UEbyIO2QVlOQRHoJpjetZw63ZWc.roa (hash: B817opIktL38b1nWyMw+3o8iSD6n1l22i7ARYEndhTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0d:2b:1d:bf:64:47:62:41:33:51:02:13:26:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=d52a762ac02c59c6daf99c82362b63f503630908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:56:3d:93:0f:96:7f:38:a0:f6:f7:2b:4b:3b:
da:d1:ca:40:b9:3b:a6:07:28:bc:9f:97:91:d5:38:
3b:cd:28:1d:5e:5e:86:ce:a9:61:ef:ee:b2:1a:0f:
eb:d0:1b:ed:d3:07:1f:84:0d:10:db:01:d5:be:9e:
f9:d0:8f:74:b8:bd:8a:76:fd:ec:cf:e7:c8:d3:24:
9a:6e:3a:eb:2c:27:6b:10:9a:52:fb:e9:3f:ec:ad:
b6:e3:3a:50:8e:43:07:1b:03:5b:87:fd:d9:fc:71:
e0:63:05:93:2a:2e:d1:48:63:d1:e0:51:71:05:0f:
60:7e:03:c5:e5:0d:30:37:0d:1b:27:dc:7e:bd:1b:
01:af:34:0f:57:6e:5c:22:da:b4:6f:db:d7:4a:bc:
b8:cc:29:d5:00:6f:da:a6:dd:63:43:ab:fb:ed:0c:
6d:b4:84:19:fb:39:a7:f5:e5:76:b8:1c:01:fa:17:
6e:c8:9b:bd:bb:67:b8:b3:3a:61:ae:01:97:9b:f3:
11:54:8e:2a:ee:56:c2:5a:43:cf:f3:4c:49:76:b0:
0a:0f:30:25:e1:30:c5:0c:a1:02:e2:fd:29:aa:a8:
2e:e3:65:06:05:46:e0:1c:44:27:fe:f4:82:2a:97:
de:ca:92:68:83:4b:82:04:f0:03:ac:ee:7b:d9:22:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:76:2A:C0:2C:59:C6:DA:F9:9C:82:36:2B:63:F5:03:63:09:08
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:b3:35:d8:58:84:04:2a:43:66:ad:7e:a1:e7:99:6e:2d:
a0:a3:b4:eb:91:32:30:26:2d:b3:07:8d:4f:e4:15:eb:21:d3:
66:87:5b:5c:cf:ff:0e:59:f6:7a:54:19:5e:25:fa:b1:cc:b4:
0e:a8:e1:ea:4a:82:cc:38:e8:00:92:2b:00:1e:8d:5d:b0:0f:
17:b7:86:91:9e:76:cc:44:20:11:f7:ce:df:be:d4:b2:20:a0:
86:bf:f1:ee:f4:3b:b6:ae:85:c9:28:fd:de:7b:f1:4d:2d:8a:
e0:7f:4e:6e:7b:28:2c:d6:54:7e:a2:85:0d:8d:27:22:2c:51:
2e:7a:ea:7d:73:52:78:88:3e:36:8e:d3:e1:16:a9:9d:4e:02:
93:65:f3:d6:16:4b:01:82:50:d0:08:8e:2c:86:43:f1:ac:3f:
6d:98:4a:88:44:25:4f:53:07:56:ea:64:aa:97:a8:2f:91:26:
ca:b4:50:af:e5:9b:87:ba:6e:25:cb:d8:b1:3b:a5:2d:28:9c:
53:72:35:06:6d:82:9f:e5:5e:ce:59:e7:58:03:d3:4f:c7:66:
27:d2:d8:7d:83:67:c7:6d:77:42:b2:78:07:58:23:b2:a3:68:
3f:9e:a4:40:a6:8a:1a:3b:37:68:de:37:c3:be:1a:41:62:71:
ec:38:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:43 2025 by rpki-client