Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: J2wQ7kJtHZ3z8MEVOChr9ZaqHVGC22Ke3jvmfbsH0lI=
Subject key identifier: B2:EC:33:1C:B4:27:90:07:69:DD:77:95:4C:9F:25:DE:BA:6A:7C:6D
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 019A503DC1A0F856FEA4E70E6C2732424415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 06A5
Signing time: Tue 04 Nov 2025 19:00:15 +0000
Manifest this update: Tue 04 Nov 2025 19:00:15 +0000
Manifest next update: Wed 05 Nov 2025 19:00:15 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: N13HwWTW5uB9R7VNI/OwPMc7D9EyRuvcwvNOjmg6hdc=)
2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c1:a0:f8:56:fe:a4:e7:0e:6c:27:32:42:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Nov 4 19:00:15 2025 GMT
Not After : Nov 5 19:00:15 2025 GMT
Subject: CN=b2ec331cb427900769dd77954c9f25deba6a7c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:9d:72:84:41:15:e5:d2:b2:21:34:d4:99:
13:54:f9:53:da:5d:f8:16:c7:dd:b6:30:6a:24:b8:
18:cb:07:12:24:e6:ed:9a:70:3b:6b:21:ad:2c:5a:
b4:42:f3:13:1b:23:11:b0:b8:58:30:49:7f:db:51:
56:d7:11:a6:1f:11:5a:cc:db:82:ff:22:24:20:8c:
8a:d4:b4:04:5f:23:34:f5:00:f5:ef:8f:a7:a8:f0:
a3:7f:78:60:fc:03:c6:93:3b:bc:4c:c7:a9:1a:50:
5c:9a:04:bb:d8:ed:c1:bb:f9:23:44:57:5b:06:54:
e3:1e:39:57:8a:49:f0:e2:7d:ff:67:54:e1:ec:3f:
4e:f8:d0:b9:77:04:a3:53:93:3e:a7:5f:6d:1d:89:
49:f7:1b:96:25:8f:8a:a4:ca:b5:f0:55:e3:78:07:
14:00:65:21:40:1e:4f:da:91:c1:6c:25:e3:0c:27:
cf:b8:e4:9b:7c:e0:cb:03:c0:ca:13:f6:43:bf:28:
b2:03:c5:34:e8:a2:7a:96:bd:3e:7e:fc:c9:15:f8:
db:fb:3c:ba:5f:18:10:9f:3b:3c:86:01:f4:4a:3f:
ef:ba:d3:c2:2f:85:3e:c8:c1:a6:98:7e:68:fc:57:
b0:91:0f:11:cf:25:e8:fc:ad:5b:7b:d7:af:72:0d:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:33:1C:B4:27:90:07:69:DD:77:95:4C:9F:25:DE:BA:6A:7C:6D
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6c:df:ef:5f:7d:9e:79:6b:a4:2a:21:a3:e0:45:61:9a:56:
86:78:08:98:9a:ff:51:e9:35:43:af:fe:f7:c9:fa:f0:aa:82:
e4:2c:66:dc:1f:c3:53:35:81:54:7d:1c:b2:34:2f:ab:39:b9:
1a:3b:95:68:20:83:29:eb:5f:09:5d:f1:98:24:d3:af:df:26:
fc:fa:67:6d:27:34:ae:8d:be:51:38:16:48:c2:2b:50:13:a4:
27:ba:03:e1:6b:64:54:8c:45:6d:77:e8:7d:43:97:0b:2e:24:
d8:da:06:51:45:46:65:5d:97:fe:1e:b3:f3:6b:95:8d:e9:13:
9e:a8:d6:be:b0:d7:b2:33:b3:99:16:b6:fb:07:f0:7f:2f:93:
11:6c:0a:6c:ac:18:08:4d:41:7c:bf:0d:dc:46:90:58:51:1c:
d8:23:c6:d5:c4:34:66:48:af:c4:9f:74:3c:85:4f:32:f1:2a:
0c:49:d4:e5:1e:72:8d:52:43:0b:16:62:29:85:f5:3a:41:c8:
ee:ed:30:bb:14:8d:62:29:c5:f7:43:cf:9f:a0:08:38:82:f2:
d6:ba:68:39:78:33:14:ab:49:5c:16:b5:53:1c:e4:e8:3d:2b:
86:71:4f:ac:c9:a5:fd:16:58:a9:50:57:93:fa:ea:09:72:75:
90:59:73:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:29 2025 by rpki-client