Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: KmTE5U6Ig6XlZ63mkeeRKpf/YIGW4QwBZbqltHsDL4w=
Subject key identifier: 75:9E:23:C3:F1:89:05:3D:23:24:93:59:BE:28:CD:13:B2:D3:E7:76
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 0199FFC8CE034A0DA3AB0AF46887996EBBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0AB0
Signing time: Mon 20 Oct 2025 04:02:53 +0000
Manifest this update: Mon 20 Oct 2025 04:02:53 +0000
Manifest next update: Tue 21 Oct 2025 04:02:53 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: aNxNdNfUpzgJdWLmD2vtRrK+POi7eKh786U/rKEZAU4=)
2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:ce:03:4a:0d:a3:ab:0a:f4:68:87:99:6e:bb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Oct 20 04:02:53 2025 GMT
Not After : Oct 21 04:02:53 2025 GMT
Subject: CN=759e23c3f189053d23249359be28cd13b2d3e776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:c9:c1:b7:f4:53:46:a8:80:b3:92:99:6a:
29:5b:5b:f6:6d:49:ec:14:c2:61:14:63:19:cc:18:
9d:54:bf:4f:9b:31:55:ec:52:2a:7b:fc:b7:c1:13:
52:12:22:80:92:19:ad:47:d0:d9:19:25:c4:12:49:
9f:87:d5:d8:64:b7:c6:d3:a7:ad:3b:07:dd:9a:be:
30:2b:38:42:88:1d:1f:89:7d:91:35:91:29:48:f1:
0e:af:e9:4e:ad:3c:88:4d:d3:d0:ed:35:86:6d:2b:
55:d8:f9:78:ff:aa:f9:cf:fd:03:b6:24:80:dd:8a:
68:3e:b2:6c:0f:d3:ca:1e:52:55:0c:b2:05:d0:a1:
ae:d2:60:88:01:3a:5d:8b:7e:33:49:fe:1d:18:28:
94:d9:7c:35:37:66:01:65:3d:05:fe:2e:3c:5b:9d:
cf:0a:57:d3:26:db:0f:d9:48:6e:aa:9b:4c:cd:63:
d3:e8:e7:fe:9c:24:93:63:6e:38:f3:94:e0:7f:30:
14:ea:59:d8:36:11:48:5e:1b:dd:85:0a:28:1a:30:
91:47:2c:3e:7b:0e:90:73:5d:c0:e9:e3:12:d5:3b:
c1:af:91:8b:09:e8:48:e2:91:fa:88:0d:fa:7c:e4:
37:e0:b2:f0:da:22:aa:d6:2d:a4:b0:37:61:5c:39:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:23:C3:F1:89:05:3D:23:24:93:59:BE:28:CD:13:B2:D3:E7:76
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:18:72:f9:49:7f:b6:71:6c:50:3e:e9:26:c3:a8:d8:93:4e:
48:cf:40:15:03:0d:7c:43:51:7b:61:2e:bd:d2:4d:3f:16:f9:
50:76:31:67:d8:92:a5:c0:b0:5d:2e:e5:5e:57:e6:6d:03:88:
b7:43:4e:2a:77:62:e6:3c:67:94:52:d1:1c:66:20:16:cd:8d:
7a:9e:21:d0:5b:f7:17:31:7e:d6:7c:46:f0:c3:d3:c6:24:f6:
8a:43:1a:0e:2f:5a:41:f6:51:e2:16:1e:2b:87:ab:3b:fa:92:
77:39:52:43:d0:4f:f9:cf:6f:c0:b5:ec:87:9a:60:80:09:b9:
1b:2d:f4:bb:dc:e1:ca:aa:43:99:25:0d:4e:42:27:84:45:9e:
04:c0:97:b7:05:ec:10:eb:61:c9:6d:45:44:cb:74:ad:a5:80:
e5:fc:81:93:6b:41:1a:38:87:4e:75:4f:16:0a:95:cc:ec:a5:
0c:59:bc:8e:80:5b:cc:da:13:05:84:ea:34:8b:fb:fb:d6:9d:
5f:ea:14:52:b1:59:c0:8f:e6:5a:4d:cb:7b:72:a9:96:b9:65:
9e:bf:17:c5:84:bc:9f:e7:75:4b:39:4b:be:5f:88:6a:46:57:
07:9c:79:0e:fa:5b:58:97:b1:ac:45:55:c6:7d:07:e0:0c:f6:
1c:42:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:06 2025 by rpki-client