Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: kkj1D3tn7kMEgUR8DzUczyGIKi4H+t/QprQg/66OWw8=
Subject key identifier: F8:29:8E:3E:DB:86:B5:D3:22:8E:81:88:8D:90:AD:CE:B9:26:82:11
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 0199FC8FC0162F54B8AA4E97FCAEB5696483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 06E7
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: +oM6cPfk3OJjjbs9ul5nIHjAFyOKWpHBeju3r5e6+Jo=)
2: Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa (hash: 0Bf0l0DWLnoKx593QVoGlu2x+BD1lYWYH448tSVbn0U=)
3: Tb-8GP8qcCsPrA2Xrleo-iet2HM.roa (hash: yyhoDt89y5+7nL9lVvf4sdS/dAeJY+OT1BrhoMFwMME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c0:16:2f:54:b8:aa:4e:97:fc:ae:b5:69:64:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=f8298e3edb86b5d3228e81888d90adceb9268211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:76:40:09:9c:ff:af:86:a1:eb:d7:98:59:
85:29:08:1d:1d:11:7c:77:14:b6:f9:64:e7:e5:29:
fb:b0:0b:34:34:c3:d5:6e:2a:00:e4:91:83:28:38:
6d:6d:22:75:03:d2:be:65:0a:0d:8c:bc:70:9e:d3:
8d:c4:e2:aa:a2:41:5b:63:cb:7e:7d:c3:4c:3b:98:
4c:c1:91:cf:39:7e:ec:59:7e:11:5d:a4:37:52:ea:
d2:a4:cd:b8:be:b8:df:e0:c4:4e:da:c2:4f:de:9a:
75:3e:c4:7d:64:e3:98:9c:2e:76:f4:08:92:0a:72:
65:72:b2:1a:1d:4a:c8:4a:20:2c:ea:b4:56:9e:72:
1d:57:d8:7e:36:99:5a:a0:f5:c9:16:4e:70:73:cb:
60:07:f3:03:1d:e6:dc:04:aa:92:4f:8c:c9:b0:a1:
40:18:59:28:11:d1:b6:eb:c9:ba:3d:6d:de:85:97:
73:4a:1c:53:b8:b6:7b:dd:34:14:b6:f4:4f:77:8a:
dd:bc:7c:c7:0a:25:97:a6:8d:d2:4a:e8:5e:36:0f:
86:40:aa:c4:ec:ae:89:50:9e:97:9f:d1:b3:97:1e:
f9:a8:aa:67:f5:de:4d:77:2c:f3:ce:ce:22:dc:b2:
f5:b7:ea:e3:07:09:93:0c:4b:cf:8d:4e:13:f6:ce:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:29:8E:3E:DB:86:B5:D3:22:8E:81:88:8D:90:AD:CE:B9:26:82:11
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a6:eb:38:68:fc:1e:c2:75:39:3f:28:5c:ea:75:63:02:06:
23:74:0d:1f:c5:be:b5:1c:b9:3f:6c:3c:4d:e1:08:2b:2f:d2:
87:68:29:92:e3:46:ff:8f:8b:b2:c5:b1:cd:14:36:48:c2:19:
fd:75:e2:b7:ba:6c:4e:28:9b:7e:b5:e1:72:43:3b:2f:a2:71:
d7:a5:04:6d:02:c4:27:da:93:a7:be:25:f5:8b:a6:ab:1a:93:
cd:1c:91:cc:d7:06:25:76:63:b1:14:51:e8:8a:77:3d:b5:cd:
41:bb:a6:8f:14:a5:ce:de:a5:27:5b:82:b4:8c:a7:74:e7:1c:
aa:8a:0a:b1:26:8b:eb:9c:54:e4:bc:6e:dc:1d:f2:b0:6b:7a:
a4:8c:64:1b:10:be:a3:a9:65:f1:e8:df:45:83:0e:b8:78:91:
fd:fe:12:a1:99:1c:1c:7c:2e:33:cf:4f:9e:54:90:1e:50:ff:
12:60:54:d5:b8:00:51:83:05:02:15:e4:c0:79:f9:7c:35:8b:
6f:0c:a8:ae:49:58:e8:72:78:71:4e:86:e2:ad:2c:83:ce:cd:
2b:37:51:3e:6b:db:3c:31:59:be:96:64:60:c8:a0:8f:23:cf:
be:1a:7f:a6:32:72:8f:20:1d:56:55:16:e4:d5:89:18:2b:09:
4a:5b:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:17 2025 by rpki-client