Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: EdYKfKqNzEn/xg3Oq6STzgg6oH8lj/ANz/LeCEVjbvE=
Subject key identifier: 06:8E:8B:98:A0:E4:6F:94:BA:D1:93:B7:84:26:FC:18:28:51:11:A0
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 019A4E86D43476A596BF4FE99186C6456305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0722
Signing time: Tue 04 Nov 2025 11:00:49 +0000
Manifest this update: Tue 04 Nov 2025 11:00:49 +0000
Manifest next update: Wed 05 Nov 2025 11:00:49 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: qSF0uGx0hmDc+q7fgSESvFlMGFrzbiFwrzoVz/5giVE=)
2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d4:34:76:a5:96:bf:4f:e9:91:86:c6:45:63:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Nov 4 11:00:49 2025 GMT
Not After : Nov 5 11:00:49 2025 GMT
Subject: CN=068e8b98a0e46f94bad193b78426fc18285111a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:85:19:b8:98:a5:51:59:ec:75:50:5c:9b:
65:3a:4e:d4:a9:f1:6f:8a:50:b2:08:02:f4:54:6c:
52:ce:5c:f5:b6:58:97:ec:82:fc:02:c8:ef:56:c3:
ab:d3:00:95:a9:5f:a3:b2:28:59:ed:2c:88:27:26:
20:41:96:18:57:3a:1f:b7:5a:7b:62:be:f3:51:8d:
3b:07:be:c3:f9:b8:06:2c:00:11:de:c1:3f:60:19:
16:e2:97:11:05:32:c7:51:fb:09:07:54:d6:6f:ea:
f3:b7:40:80:5c:09:72:fa:fb:ef:1b:a8:e6:0a:77:
c1:7f:8c:52:c9:cd:56:fe:34:fd:59:59:3c:d1:63:
24:b7:a5:2d:b9:26:b8:b4:db:06:bd:74:9f:48:7a:
9e:de:4a:cb:e1:97:a1:e2:64:29:94:37:90:de:15:
30:8d:50:14:0f:bd:11:83:4c:67:4f:68:04:25:84:
e6:cc:47:7b:94:cd:7b:5e:b5:27:23:4a:ec:3e:af:
e5:7c:a9:32:4c:2c:bb:4a:4b:f9:a4:d8:e3:25:19:
d4:3a:7a:41:c3:db:3b:6b:8f:52:af:0f:82:57:d9:
cb:bf:0f:91:f5:5f:d3:a9:36:ae:e0:58:aa:b5:be:
5b:2c:f3:21:4c:7c:52:20:a7:71:ae:95:aa:71:c3:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8E:8B:98:A0:E4:6F:94:BA:D1:93:B7:84:26:FC:18:28:51:11:A0
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:27:78:75:6b:61:32:c6:d7:8a:72:a8:02:31:a3:ff:49:5c:
50:45:ea:f9:7a:ba:0a:31:f0:a7:c2:98:59:45:c7:2c:17:2b:
04:78:ea:2f:78:e5:13:96:86:d4:ab:f9:0f:92:2d:f8:e6:b2:
ec:79:0b:f8:a2:c8:e6:59:f1:c4:43:53:f2:a9:46:47:07:fd:
8d:23:4a:04:07:01:b9:40:97:d9:ef:53:23:d3:5a:f6:76:cf:
3f:2a:f7:84:7f:ea:6a:18:30:12:5d:9d:08:c7:66:a4:34:c7:
35:2a:07:3d:ab:74:85:1f:e9:f6:26:42:9f:7b:ad:75:59:e9:
e3:64:9c:62:0f:a8:55:7f:55:0f:7d:05:5e:3b:4a:e0:31:23:
2d:f2:ca:d3:3d:5d:d7:43:41:77:73:49:42:04:09:57:83:e9:
8c:e2:8b:fd:51:98:c3:dc:0f:fd:78:27:bc:8b:3b:39:a8:ff:
34:0e:1d:46:d8:b6:94:ef:11:1e:c2:54:94:94:23:11:b3:84:
fa:7d:f8:4d:31:31:33:a0:1f:27:7d:f9:77:22:b7:2d:9c:31:
0b:70:9f:4a:ac:22:d3:3b:22:cd:ec:56:9c:33:f7:2d:46:d8:
85:31:97:09:a5:a3:49:ba:e8:e9:2c:ae:92:79:0b:4e:76:65:
1f:f6:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:11 2025 by rpki-client