Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: IEAjp0BFds6MKitOGNp0/kjAWuEr8pfHvSFGYNXq4pM=
Subject key identifier: 10:69:C8:26:2F:F4:B1:88:1E:C3:27:2C:B4:0A:99:BF:1A:D3:93:87
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019A00D9F9526B9D64ED89DA0E0BE5456E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 1133
Signing time: Mon 20 Oct 2025 09:01:16 +0000
Manifest this update: Mon 20 Oct 2025 09:01:16 +0000
Manifest next update: Tue 21 Oct 2025 09:01:16 +0000
Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: 5NO4yLv3S+JLvL2zUQI96dD9VjRlA7lQnXb7aRhsATU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:d9:f9:52:6b:9d:64:ed:89:da:0e:0b:e5:45:6e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Oct 20 09:01:16 2025 GMT
Not After : Oct 21 09:01:16 2025 GMT
Subject: CN=1069c8262ff4b1881ec3272cb40a99bf1ad39387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:4e:bf:bb:4f:b8:32:dc:f5:ba:60:cd:f2:
74:bd:d9:52:d1:9d:26:89:0b:d8:22:40:38:ff:68:
26:f2:28:32:8c:a8:74:35:e7:f8:96:b6:27:8a:3d:
88:67:b8:db:81:45:46:6d:3b:a4:05:e8:71:f3:b4:
7f:9b:c2:78:93:44:e8:f2:43:05:5d:00:eb:95:39:
f9:7e:d1:90:c9:5a:b8:18:61:fd:ee:1a:87:a3:9c:
95:80:d2:b3:f8:16:fd:0f:cb:ba:34:b3:c4:69:44:
fe:e0:95:4a:75:e3:5b:06:64:eb:1a:dc:d8:03:cf:
16:11:e0:6d:1d:e6:a6:41:6c:28:71:90:03:15:9d:
d8:38:91:22:4b:3f:60:18:56:5d:2b:1e:06:8e:f6:
4b:47:8d:65:81:2c:be:22:9c:8c:00:17:60:36:36:
13:ae:ea:40:6d:82:f3:17:38:a6:9f:89:16:c4:13:
d9:95:e3:9a:83:64:92:3c:2b:b8:6a:6c:b7:47:4f:
a2:fa:68:f4:65:18:1c:ef:39:ba:20:81:9b:fa:38:
4d:76:be:ed:b9:a9:1f:20:fa:a2:fa:a1:89:ce:eb:
b5:fc:06:1d:bb:35:04:de:a3:8e:2e:2b:16:9c:c4:
6e:4a:ad:a8:8d:24:b8:e3:d4:6e:cc:61:98:da:d9:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:C8:26:2F:F4:B1:88:1E:C3:27:2C:B4:0A:99:BF:1A:D3:93:87
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:da:38:36:ff:d9:8a:cd:02:ee:95:53:1f:47:a4:b0:ce:5e:
e5:31:2f:6f:10:81:9f:b7:54:34:79:7a:d0:35:86:68:86:d7:
18:9b:09:8f:11:ee:52:f6:2c:28:02:ed:23:4a:69:f7:07:0c:
6e:71:f2:63:18:f0:e4:e3:87:af:cf:0f:52:ed:fe:ad:4e:ad:
d9:ce:aa:dd:f8:4e:b5:fd:58:aa:cc:4b:c3:91:59:a0:d2:42:
72:31:1c:8c:d6:d5:c0:f7:b9:ff:e1:36:f0:88:67:a3:4d:6a:
2c:8d:ae:98:3e:8b:0d:92:56:c8:bb:65:ef:5b:0c:76:d0:24:
c7:1e:e7:bf:0b:85:1a:09:41:42:73:41:c7:1b:be:7a:d3:e1:
69:30:0e:32:5b:62:3f:5a:16:1b:41:53:44:a0:64:fb:90:02:
cd:0e:fa:33:b0:7b:af:8d:78:79:21:97:8f:4b:f8:0f:78:a3:
a2:ab:e3:47:26:56:84:0b:0a:13:97:9a:2a:12:dd:e5:af:9e:
78:dc:33:d9:c7:63:b8:a9:2c:52:f5:c8:e0:65:82:37:a3:fb:
91:62:07:5d:38:22:53:44:c3:c3:ea:e8:d6:96:df:1a:83:10:
72:fe:0c:9c:8d:be:19:0d:d0:0c:92:83:99:d1:f0:f3:be:0c:
d5:29:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:36 2025 by rpki-client