Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: RuTYq9/gdY4GAt5QWLlPLQEhaAtZvPLX65tCj0/XTTk=
Subject key identifier: FA:1B:5E:7D:D7:6E:AC:E4:E5:FF:BE:86:78:DB:3B:3E:7B:F6:88:36
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 0199FB0F2760AF13DEC25AA95E126E7D2EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1263
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: gsoO11d4Srh5qMYSGtyltZiQQnW/o76Jbvf6O1lvCdg=)
2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:27:60:af:13:de:c2:5a:a9:5e:12:6e:7d:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=fa1b5e7dd76eace4e5ffbe8678db3b3e7bf68836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:50:74:b9:ad:f7:2c:14:7e:6b:ee:b0:ac:
2f:ae:c8:e5:14:34:2b:bc:7f:06:a4:71:24:5b:f6:
b3:b2:57:45:9f:e8:5f:ff:27:b8:54:c6:9c:c0:f8:
0e:d2:83:d8:b3:2a:f5:c3:cf:2d:5a:a6:62:27:33:
1f:6a:e0:3f:91:27:9d:1f:fe:a1:51:76:98:f5:a7:
bf:92:cf:5e:17:62:05:6c:dc:70:4e:33:d7:f3:95:
33:b4:2d:49:bd:2f:86:4d:11:3c:05:4a:e3:25:29:
69:97:b7:b5:f5:ac:ce:5e:05:6b:87:3e:f2:47:c7:
73:f0:ac:06:ad:2d:d3:30:92:06:3c:56:c4:eb:1f:
0d:fd:85:ed:ad:6e:28:98:8d:f7:0a:56:95:ac:dc:
ca:bd:fa:b9:4e:b3:53:77:47:47:a9:06:d9:7d:0a:
b7:6a:7b:84:a0:38:0e:ae:54:bf:45:6f:c4:58:ff:
2d:8c:22:c8:04:c0:ce:21:1d:d4:06:5f:59:1b:84:
c5:3d:e8:21:84:08:27:d0:d4:c8:c9:b0:a8:a1:35:
aa:26:46:5c:d0:ab:26:26:a5:e7:4e:3c:ca:ee:95:
f3:a4:51:47:86:62:47:48:b4:1e:7f:61:78:55:73:
a7:92:f3:22:28:4e:da:3e:84:a3:a5:8f:a4:2d:34:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1B:5E:7D:D7:6E:AC:E4:E5:FF:BE:86:78:DB:3B:3E:7B:F6:88:36
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:26:f0:45:cb:1d:3d:58:31:0e:68:cc:ab:bc:bb:c0:d3:3c:
f2:c2:56:dd:87:8e:cc:82:6b:9e:c2:9f:73:fb:2c:33:9c:0d:
f2:92:09:4a:83:2a:89:07:ec:f3:95:2c:51:61:8d:ab:8d:a0:
b9:34:8b:cc:8c:c9:08:5b:66:9f:0e:ad:e3:4a:54:2f:5f:cb:
e8:54:d4:a1:6b:34:5f:c2:ed:77:b1:0f:0c:1c:0a:75:be:08:
04:78:54:e0:df:24:44:f6:ef:7a:fe:e5:a3:bd:f6:92:ac:ef:
4a:a0:52:5f:85:85:f6:6a:1d:e8:3b:f0:05:e0:94:ff:8f:29:
38:3a:e1:c2:47:29:bc:40:74:ac:05:ce:0b:3b:ce:19:d2:b9:
d2:c1:51:02:8a:b0:f3:36:4d:0d:43:30:12:4d:61:08:b1:c1:
d1:47:09:00:92:b0:ca:96:02:a5:bf:bd:71:eb:2a:df:1d:47:
a3:46:65:29:cd:f4:06:d1:dd:95:06:6d:92:b4:61:09:92:40:
d3:c9:08:ec:a5:cf:3a:78:d9:66:d9:41:49:37:8c:ce:cf:de:
08:43:e2:1f:7b:0c:c5:c9:53:cb:15:e9:1a:d7:3a:43:ae:d2:
33:ab:23:04:8b:24:80:99:01:b0:63:a1:ae:8d:be:fa:3c:08:
ba:38:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:07 2025 by rpki-client