Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: uZStKTKaPZKTzFnlADRWocr2Vop/qXUWevgA0jGtics=
Subject key identifier: BD:40:16:5D:CD:85:13:2A:33:4F:1C:92:07:68:28:82:39:5D:5A:B9
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019A4DE1B38FA41FE9C75AFD578D5ADEAD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 124E
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: M60rcdqhtzEQdBOVVmK/VakJG7te3o80xbZxgiwpSk0=)
2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=)
3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b3:8f:a4:1f:e9:c7:5a:fd:57:8d:5a:de:ad:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=bd40165dcd85132a334f1c9207682882395d5ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:f3:49:4c:6d:ff:b5:38:dd:7d:5f:d2:4e:
9a:37:1e:ba:2b:f7:e1:4b:d9:b2:39:82:35:4a:e3:
1c:81:8d:b6:91:4b:21:44:2c:4c:e0:d0:66:7e:ee:
83:e9:50:f1:2e:ef:92:25:76:df:62:43:2c:ed:93:
16:71:1b:34:c0:d2:30:ee:47:46:c7:24:74:f4:e2:
b1:05:81:20:f9:5d:11:2d:30:ca:bb:66:fc:07:da:
5a:08:5c:96:5f:ed:d1:e1:5d:8c:2a:58:40:69:b7:
5f:fa:17:17:8a:44:5b:bc:50:a8:ab:5d:d9:84:05:
80:95:99:0b:70:6d:a1:05:87:1c:6b:fa:e7:91:fe:
7e:a4:6b:22:10:3c:ee:0b:a4:44:bf:41:00:eb:e3:
1e:e1:81:cd:a0:68:04:06:3e:94:8c:10:61:f0:13:
e7:97:36:58:38:93:eb:d2:db:45:4c:1f:7e:79:9f:
a3:a7:d2:c9:a8:78:d5:ad:1a:2a:39:43:70:f6:19:
9c:0c:d4:e6:5e:fd:62:28:a9:fe:59:3d:e6:07:db:
ac:2e:d4:b9:e1:35:b5:ba:e6:7a:21:73:1b:c8:8d:
f5:7b:c4:52:10:3e:c8:9f:7c:e1:03:28:44:a7:7e:
06:b5:27:a7:a2:b4:5b:09:96:3b:cb:31:26:ba:80:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:40:16:5D:CD:85:13:2A:33:4F:1C:92:07:68:28:82:39:5D:5A:B9
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3a:96:a1:07:2a:61:af:63:55:72:34:26:5d:03:b8:2b:44:
3b:ea:e9:b8:00:f4:09:33:76:3e:36:4e:9f:6d:8f:78:f7:ab:
6f:66:72:fa:d9:98:6b:b3:43:bd:e7:b6:6a:fc:7e:f0:52:9d:
31:cc:0f:69:05:13:a4:b6:19:3d:82:1f:8b:27:2f:33:24:7a:
a2:f9:d4:0a:78:dc:0a:2f:77:ac:94:0d:e4:02:2a:a2:a5:87:
45:8f:d1:4b:34:f9:b5:a2:d1:7c:3a:1c:7a:95:a1:f9:4d:e5:
58:e0:9d:3c:1f:53:fe:f4:26:20:ef:41:cc:ab:fc:ab:44:4b:
2f:21:cc:b7:8c:48:47:a2:33:a7:e1:98:5b:43:08:d0:a7:b7:
8a:bb:f2:2f:9d:5c:f5:72:ec:39:c7:6c:9e:a3:37:34:2c:cc:
25:e0:5a:1c:7a:4d:d3:35:9e:da:6a:ae:67:9a:e9:db:f2:db:
7f:1a:b7:ee:5e:81:74:12:bf:93:26:c6:7a:19:79:0d:0b:40:
a9:f9:81:ee:51:3f:a4:67:54:04:f5:08:ca:99:53:3b:6d:9d:
7a:b4:83:e6:fc:74:da:a9:a4:9a:57:67:8e:a9:f7:8a:42:f7:
d6:30:f9:d6:47:57:5b:72:52:05:2a:23:c5:60:44:f2:7c:89:
21:66:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:41 2025 by rpki-client