Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: k7YFz85kK5c2jgDStOqAWUZMTOcGp9xeQe8z6XNY3Fw=
Subject key identifier: F2:3E:FE:97:44:F4:FD:A1:82:5B:04:8D:66:60:67:CA:79:F7:E1:B7
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0199FC58E7D249253B3874BEC931FA07523A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: Zhjjm1A//3l6V8OiKixBk/+phUMcV85C/ibMYEko3X4=)
2: cDE3EzAZuRkA2qUdMfThi8H1qTc.roa (hash: zcH+YrXnLIMTdiSZDY4vYih+mBv8OXiFFCnkDP60SoA=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e7:d2:49:25:3b:38:74:be:c9:31:fa:07:52:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=f23efe9744f4fda1825b048d666067ca79f7e1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:a2:54:28:69:95:5d:e6:d4:05:d5:31:ea:
22:bf:9e:e7:ce:fc:46:8a:a3:5e:76:2a:8e:ee:11:
07:ee:c9:a7:1f:69:28:c7:6a:cc:fd:2d:a2:52:4f:
8e:55:30:c1:cc:bc:d6:41:6f:c5:d8:c1:90:ad:1f:
83:b6:aa:cf:ff:32:21:16:80:b9:82:44:4c:4d:63:
37:78:e6:3d:c2:9b:b9:e6:a2:19:f0:63:f5:1a:b7:
8d:1f:7d:96:17:9c:fd:6a:7c:56:94:ef:45:b5:43:
0f:20:63:30:22:4d:cd:a4:d4:86:84:1f:b7:72:72:
90:98:73:12:2c:c1:14:fd:4b:a3:46:cf:d1:71:a4:
ef:11:f6:be:84:da:cc:38:61:a0:7e:c2:8e:60:57:
51:e3:69:8d:0f:26:bf:6c:41:32:58:e7:90:eb:70:
ab:f9:1d:47:b7:ca:f3:44:63:6f:bf:8e:35:80:89:
c2:1d:37:19:37:82:c5:f2:7f:c5:ae:0a:1d:7c:4e:
21:7f:be:96:9f:73:33:d9:35:04:45:97:24:a2:ec:
dd:5a:c5:1e:2f:b2:e4:32:b5:3b:18:75:0e:0e:1a:
e5:16:8e:8e:38:fe:1e:16:64:11:cc:ee:83:b4:c0:
6f:2e:64:cb:fd:ac:43:18:12:78:09:be:de:fc:1a:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:FE:97:44:F4:FD:A1:82:5B:04:8D:66:60:67:CA:79:F7:E1:B7
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:60:44:c8:0a:be:e1:8e:4d:40:86:c6:70:04:d7:2a:21:
35:4d:09:44:31:3c:e1:36:d0:26:09:e1:82:11:a7:f6:8d:3e:
76:6d:0e:34:13:ce:64:7c:ac:97:92:af:40:85:30:97:20:37:
2f:9b:11:fb:33:73:b8:da:bd:78:3b:0a:77:d8:fb:02:69:18:
36:b0:8d:ef:ec:60:8b:75:46:9e:29:c6:b5:5e:9f:08:a5:80:
67:4f:1b:d2:ad:81:49:24:f7:d0:b7:4b:d0:53:73:ea:bc:75:
ab:ec:9a:3b:a6:4e:89:d3:2e:43:12:ab:96:6a:79:02:69:3a:
dc:26:70:92:ae:d4:30:e8:7b:c2:ea:c6:cb:31:d7:8d:a8:24:
40:37:fb:48:21:87:27:6c:82:e1:8b:ef:fe:b7:9d:7f:c4:ed:
e3:36:31:87:b1:d0:71:6d:e3:e8:5f:21:a6:9d:c8:d0:59:2b:
83:aa:db:9a:e0:41:ed:78:a9:aa:d9:35:75:6d:ea:63:fb:b0:
a6:1a:f8:02:9c:50:a1:6f:7e:ff:38:e1:81:61:9e:34:ad:c9:
ca:b2:50:30:97:1b:63:2a:45:0c:ae:fe:45:12:9f:de:73:35:
45:ee:90:9c:21:98:e1:f9:15:37:7b:49:de:1e:bb:dc:0b:35:
92:28:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:38 2025 by rpki-client