Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: FGVr70RWdXIzilKMVDqJPO7zdVXJJDjd3Ami4E4etDQ=
Subject key identifier: CC:AE:BC:33:15:62:ED:BA:CF:10:D2:28:DA:1C:AB:DF:95:B1:AE:FC
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 019A03A469AED3D00929EA15BA2378E2264C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 1290
Signing time: Mon 20 Oct 2025 22:01:37 +0000
Manifest this update: Mon 20 Oct 2025 22:01:37 +0000
Manifest next update: Tue 21 Oct 2025 22:01:37 +0000
Files and hashes: 1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=)
2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: 1uVOQ98HpRsmP1o78+pgyy7xPSG8/HNfmQh2dN1Ak8k=)
3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:69:ae:d3:d0:09:29:ea:15:ba:23:78:e2:26:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Oct 20 22:01:37 2025 GMT
Not After : Oct 21 22:01:37 2025 GMT
Subject: CN=ccaebc331562edbacf10d228da1cabdf95b1aefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8c:36:97:a7:66:d0:2f:8b:af:b4:03:0d:12:
97:90:d9:08:cb:07:c4:c5:f1:be:46:4c:ed:2e:d2:
36:e2:5c:8e:25:33:43:81:ac:78:d5:74:51:de:ed:
01:8a:5f:17:43:17:1c:95:ed:40:d6:df:b2:2c:05:
1f:4f:02:3b:2f:31:f9:06:39:cf:43:a0:39:28:25:
58:37:e7:99:d8:ef:6a:3c:72:c1:4c:b6:dd:43:92:
5f:9a:22:78:0f:fe:d0:57:d3:e6:c4:cf:15:9a:ff:
25:29:ed:ea:7e:4d:50:5b:ab:22:77:9a:e8:02:39:
82:d4:5f:f8:5d:21:2c:e8:aa:af:fa:91:ba:8c:81:
68:47:ab:c9:bf:1b:22:6e:98:da:31:ca:b4:86:d8:
65:35:ac:ab:e6:6a:76:0e:8b:cd:b1:09:e2:66:21:
ad:5c:0a:af:f8:d5:92:a2:2f:41:82:17:39:5f:3d:
9b:1c:1d:84:59:21:c3:4a:ae:13:32:9c:59:b5:c4:
75:3f:6f:95:8e:fb:c1:88:b6:80:0b:64:bb:f6:34:
22:6e:f0:9c:8a:5b:af:cf:87:5e:2a:d9:6f:f9:c6:
e4:e2:cb:1f:c6:2e:a1:ba:13:af:d2:ee:9a:c1:ba:
5d:bf:c3:f7:82:3f:8b:dd:84:bb:1d:69:8b:e6:2c:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:BC:33:15:62:ED:BA:CF:10:D2:28:DA:1C:AB:DF:95:B1:AE:FC
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:c2:63:f7:e5:71:7b:ed:6e:20:81:41:7a:2d:89:4e:5b:
ba:72:a1:13:bb:3c:de:2c:c8:c7:ad:e0:a1:e2:6e:b8:2b:e4:
4d:62:9c:1d:05:89:af:2a:d4:5d:ca:1f:30:37:e4:4e:96:ee:
b4:11:a3:99:db:c5:7c:44:36:ca:24:57:1c:cb:09:40:81:fb:
02:f3:3a:2e:a5:97:8e:61:5a:68:92:03:9f:de:60:88:95:e4:
ca:d4:03:4d:04:27:dd:f9:17:5b:d3:66:ee:59:07:32:b3:63:
55:ab:1f:e3:94:b3:f7:54:37:7c:68:d8:a6:0f:c9:06:18:3b:
79:0e:82:7c:ed:e4:06:45:93:ac:82:1d:8b:2d:dd:c0:c5:40:
fa:76:79:1a:aa:fc:f4:a2:d4:b0:c5:56:ae:e8:34:35:04:e2:
9c:25:72:af:e8:06:3e:07:ae:ee:6d:75:ef:c4:b8:14:92:01:
9f:bb:6a:48:a0:e7:79:55:3e:36:ac:8d:1c:3b:48:b6:a9:77:
6b:50:c4:14:35:9f:b1:5f:ee:06:a9:33:db:10:b6:b2:87:7c:
5f:de:b4:3a:2c:41:6b:73:09:bb:3a:1a:bc:8c:63:75:55:ad:
ce:f6:d5:05:2a:fd:79:75:f7:c8:08:d7:85:dd:6a:d1:f9:0f:
23:0c:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:14 2025 by rpki-client