Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: 1YR3UK5LFsemT5mmTCoOdkSbjza8OYjaP2BkZejlZMg=
Subject key identifier: A3:B1:F5:F6:76:B4:5E:46:DA:6E:2C:49:9E:01:A8:C1:FE:A5:C8:9A
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 0199FDD98B1A27D53F8E7801AB9B15357CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0FA7
Signing time: Sun 19 Oct 2025 19:01:56 +0000
Manifest this update: Sun 19 Oct 2025 19:01:56 +0000
Manifest next update: Mon 20 Oct 2025 19:01:56 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: +H5Gt6Ld3yspjIqzsuJc/V8doxcMPRZu9di81q144V0=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: Z9i6om7Xm-VJTFYr4Gx0uAR_icw.roa (hash: ANNmvdhb68U9bMYUn5YDoB+t5R72eGhNlvH1jCjqt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:8b:1a:27:d5:3f:8e:78:01:ab:9b:15:35:7c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Oct 19 19:01:56 2025 GMT
Not After : Oct 20 19:01:56 2025 GMT
Subject: CN=a3b1f5f676b45e46da6e2c499e01a8c1fea5c89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:99:5e:d5:56:82:52:b5:0e:6a:74:16:a0:
2f:72:b2:bf:16:bd:73:6b:de:53:d8:8a:22:f1:ac:
8f:12:cc:61:4b:85:28:0e:b2:d9:e3:0a:f1:af:9d:
49:0a:5f:1f:7a:51:94:a0:a0:c2:d6:bd:1a:6b:cf:
59:07:85:33:7a:95:57:39:36:6c:cd:88:23:40:f4:
5c:02:27:ca:ba:ad:e0:01:8a:aa:90:ac:7a:8a:3c:
4e:4c:92:8a:45:d6:84:d3:d1:00:6f:ef:54:c4:d0:
fa:b7:f2:dd:ab:b3:ab:48:97:dd:0b:24:4e:4e:42:
05:33:36:e5:81:82:5d:98:09:f4:27:17:bc:45:43:
d2:99:40:6e:b9:63:6d:7c:a7:79:86:25:83:7a:6e:
92:27:6d:7a:1d:bb:c6:b6:fa:5f:09:51:71:d9:9a:
52:96:42:cc:ef:5d:a4:06:45:6d:a9:b7:5c:7b:b3:
78:86:25:4e:0a:9a:1f:6a:c7:d8:26:54:ea:cb:40:
07:90:ea:83:5f:8e:4c:98:bd:88:d9:75:ee:64:37:
5b:5c:ec:a2:b2:84:f8:ed:f0:49:07:1f:d7:e9:70:
47:04:5d:83:fa:34:92:20:b7:82:11:5e:96:d7:dc:
bb:cc:17:de:80:c5:fe:8b:3a:fd:6d:ec:af:51:d9:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B1:F5:F6:76:B4:5E:46:DA:6E:2C:49:9E:01:A8:C1:FE:A5:C8:9A
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3b:78:8d:4e:dc:c3:6c:58:76:e7:0d:cb:6c:17:98:66:4a:
2e:4e:eb:95:fe:9e:7c:fd:63:8d:ee:4d:36:aa:28:2f:85:65:
c0:59:65:c0:c0:9d:0d:de:31:2b:6e:57:00:eb:70:b4:be:2c:
66:06:33:91:df:3e:87:6a:ed:39:ef:e7:ae:80:5f:4b:99:4a:
9f:b9:19:1a:23:56:da:e9:c6:e1:7c:13:84:c6:fe:73:ed:06:
7b:9a:a9:69:13:28:56:7c:93:cc:d7:23:02:ed:ea:f8:76:29:
5d:7c:0b:4d:a3:8b:02:86:2a:8e:ce:07:6c:e6:04:3a:cd:77:
35:e5:a5:8e:71:19:3d:0d:c4:93:3f:7b:6e:e1:c0:0a:55:11:
b7:93:18:d4:79:03:bb:43:f3:71:d5:16:75:25:1a:19:44:14:
44:d4:9f:ef:ce:93:fa:62:ec:09:c9:e8:a3:69:4a:44:5a:2a:
bc:81:3e:cf:4d:7e:3c:c8:0a:8e:bc:64:42:d4:08:cc:68:42:
74:27:c2:63:bd:e7:ae:59:14:76:43:ce:96:bb:1c:ee:fe:9f:
1b:6f:66:47:8a:81:29:54:f3:49:fa:7a:d8:2b:08:da:7c:a1:
1d:4a:51:6f:49:0f:99:ea:4c:2c:0f:73:42:74:06:03:67:35:
bc:88:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:15:30 2025 by rpki-client