Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: 8QCb/VZqY4abgDnJNlH4gUFw55YWnCBOcmOrbQXzLUA=
Subject key identifier: DA:09:24:84:FE:C2:41:C7:36:E2:21:3D:6D:66:5B:3B:0A:E0:15:CF
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 0199FD3466C54C3440B3C652F71A6385D5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 0F74
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: Lju0M4hl4+gnkaHUGTW0rMbI1QCM7dBioasjTNkT5oc=)
2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=)
3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:66:c5:4c:34:40:b3:c6:52:f7:1a:63:85:d5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=da092484fec241c736e2213d6d665b3b0ae015cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:61:6f:84:8a:1e:ff:0f:bb:c3:64:b6:0e:
f6:3e:57:fb:96:45:28:10:a1:23:47:32:83:ce:33:
da:58:ee:86:ab:07:b6:b7:95:bb:c7:3c:ee:14:66:
7e:61:26:c2:ce:84:c7:71:5e:55:8b:49:df:76:94:
ea:92:d1:99:1f:ff:e3:1b:e8:42:6f:9b:31:b8:97:
bf:46:89:02:8b:82:f0:77:5b:32:a7:9e:11:65:7e:
03:c4:79:55:58:2b:63:33:ad:43:04:e5:4b:29:c1:
56:b0:c4:79:89:2f:ff:22:c6:6e:8f:22:6b:28:2b:
8c:c9:3f:61:5c:e1:41:db:f6:74:9d:4f:a8:9e:8b:
1c:0c:71:88:9b:e5:b8:66:11:06:1c:1d:e0:65:a3:
28:c9:8d:23:24:d7:34:0e:b8:25:54:51:5e:b6:99:
0b:a7:c2:23:94:c6:2a:49:f4:b2:6d:bd:3a:41:6b:
8b:69:e6:c9:51:87:af:2c:22:53:08:be:41:72:85:
0b:a4:18:0b:05:7b:f7:ff:e1:92:da:9b:c4:67:0e:
34:bc:e4:09:15:99:25:36:5a:df:b1:66:be:fe:33:
cc:6f:fe:9b:9a:ed:d1:d6:97:8d:68:00:b4:37:da:
32:18:30:b9:43:a0:1e:99:69:5a:1a:f5:12:22:e3:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:24:84:FE:C2:41:C7:36:E2:21:3D:6D:66:5B:3B:0A:E0:15:CF
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:42:35:17:34:23:20:c5:7c:60:4e:91:a5:08:06:15:3c:9b:
a1:a4:9b:31:4e:d6:d9:d8:f9:0f:b0:64:ec:73:1a:db:43:87:
8f:65:0f:8e:34:45:60:dc:63:2d:06:f3:8b:4f:3c:03:10:68:
44:7f:fc:d5:9f:d9:dc:fd:12:35:5d:29:21:1f:52:a0:70:f6:
83:a9:26:d3:78:fe:7f:92:76:d2:8e:9a:6a:c4:ea:b7:19:e8:
cb:5c:3b:74:42:35:9f:31:ab:23:c6:8b:5a:fd:bc:4f:46:fc:
53:ab:e4:51:cf:7f:58:c6:5f:2a:06:30:3f:3b:ab:a6:2d:07:
57:6c:78:a5:b8:0b:8c:d9:18:50:50:c7:c4:77:a7:a9:63:21:
d5:c1:4c:27:42:9d:54:91:60:9b:1d:39:95:69:65:a6:3d:68:
77:cd:bc:72:bf:bc:21:21:58:a2:d9:55:79:20:b5:57:89:e0:
81:e5:a3:24:df:49:66:8a:d8:9b:a1:b3:fd:40:bf:dc:19:81:
84:d9:82:77:45:d6:48:c1:d0:b4:19:d3:7d:bc:2c:65:e6:a3:
d0:aa:8d:62:77:66:b4:ab:93:81:7e:f5:01:a4:26:d5:82:87:
1e:dd:6c:e7:33:fc:c3:26:47:a2:f4:db:cf:dc:d5:cd:7e:53:
6f:78:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:12 2025 by rpki-client