Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: 7T3F8sBT1AbwXpM8rK+hMllhEyP5WyEIaWKdnmM4MLg=
Subject key identifier: 78:2A:51:F7:71:81:50:1A:D2:27:A4:A9:ED:66:94:F1:F1:20:E0:E8
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 019A5074FB236AC2E989D09C82F4B0F51C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 1121
Signing time: Tue 04 Nov 2025 20:00:35 +0000
Manifest this update: Tue 04 Nov 2025 20:00:35 +0000
Manifest next update: Wed 05 Nov 2025 20:00:35 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: nEGv+uJa9fCa1+GoS6qMlmViZ4s35pAz8utr57clwk4=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:fb:23:6a:c2:e9:89:d0:9c:82:f4:b0:f5:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Nov 4 20:00:35 2025 GMT
Not After : Nov 5 20:00:35 2025 GMT
Subject: CN=782a51f77181501ad227a4a9ed6694f1f120e0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:15:46:07:b7:37:7c:a9:28:06:0b:79:7a:
92:01:b3:10:d8:60:5d:cd:89:2e:58:7a:07:a6:5a:
03:9c:1f:ed:a7:a2:df:fc:08:88:63:bb:7b:76:b4:
93:2b:40:ab:b8:a0:e0:14:47:7f:49:7c:ae:a4:4f:
66:cd:4a:2e:0b:10:a9:f8:50:32:bd:2c:57:cb:0b:
d1:b6:51:29:cd:c6:cb:b3:f9:c2:df:b1:c4:23:88:
c9:a1:25:15:48:52:51:20:e1:7f:eb:5b:c7:e0:62:
90:b5:92:19:4f:07:40:e7:44:a5:4c:20:41:1c:d8:
e8:65:8d:da:bd:55:a1:51:4e:97:b1:51:5c:a9:5a:
1e:c3:38:39:b1:a5:60:e5:1f:d8:9d:5c:84:32:8e:
ff:f4:13:b6:8b:d2:9f:e3:02:ac:78:24:68:c2:c6:
f9:33:22:f7:09:eb:09:ab:8c:c1:68:04:c4:d3:f6:
db:e3:8e:ad:3f:63:de:5c:9d:80:2b:70:81:f2:34:
16:26:91:16:e5:20:51:64:64:84:5a:f8:92:2b:33:
4f:fa:d3:a6:46:5a:6c:6d:4c:87:51:f3:f6:58:9f:
bf:60:d8:cb:55:95:02:44:df:2a:d1:8e:f1:74:f1:
34:ae:5f:42:78:3e:d3:df:00:ed:70:7b:ea:46:3f:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2A:51:F7:71:81:50:1A:D2:27:A4:A9:ED:66:94:F1:F1:20:E0:E8
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:31:12:a8:93:e8:78:de:72:cd:f6:6a:53:1c:09:32:e0:cb:
2f:a7:6d:3c:ac:2f:43:e3:30:07:82:68:eb:5b:43:af:ae:cb:
38:41:76:a3:b5:2b:f7:15:6a:4e:70:93:d9:13:f4:dc:89:5f:
bf:d5:63:8f:37:60:df:dd:51:79:16:3b:91:5f:e9:3a:f3:3b:
31:bc:be:1e:d2:ed:67:81:d7:6a:00:20:2e:04:2f:b1:7b:28:
85:d6:9d:49:6f:4a:48:07:ab:46:45:65:7b:33:64:72:ea:0f:
64:63:d4:e9:f4:b7:3a:6a:38:db:01:f4:ff:7a:fe:40:2a:7e:
aa:ce:31:48:01:59:8b:46:c4:88:72:a1:22:70:47:ad:84:8e:
93:54:fd:96:55:26:fc:74:f2:dc:75:be:7f:06:68:b1:6f:ff:
9d:0c:d8:d3:67:7c:60:ba:b5:3a:fe:55:74:32:6e:15:86:e6:
cd:08:88:7b:92:8f:95:4e:00:28:cb:fd:6d:e3:9b:36:5b:d2:
63:8f:c5:ea:e0:89:16:12:f9:af:46:f1:40:20:fe:b1:77:c7:
54:56:6a:c1:c6:42:47:9a:46:a2:c4:a2:80:3a:a8:77:20:3e:
c9:6d:9d:b0:8b:f8:c4:17:72:d8:84:f6:58:50:a0:a6:15:bc:
c3:5b:66:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:48 2025 by rpki-client