Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: 6zsyxFmGI0qZBhOrhQ/oM/I4M8/ipcHlaWJH9SfWio4=
Subject key identifier: FC:94:DC:7D:BD:3A:E2:54:C2:A5:44:97:99:50:41:7E:6A:26:8C:EF
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 019A4F624196017F30FA71F35C7BDBEF3CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:30 +0000
Manifest this update: Tue 04 Nov 2025 15:00:30 +0000
Manifest next update: Wed 05 Nov 2025 15:00:30 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: sNDfLQhxWnr4XM789yILwo3VAJIfD4EcrufLQnUOfx8=)
2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:41:96:01:7f:30:fa:71:f3:5c:7b:db:ef:3c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Nov 4 15:00:30 2025 GMT
Not After : Nov 5 15:00:30 2025 GMT
Subject: CN=fc94dc7dbd3ae254c2a544979950417e6a268cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:f0:3a:64:b0:e8:b4:58:c0:43:77:9f:65:
ae:74:33:62:cd:5f:ef:e9:bc:22:55:b7:06:53:ca:
12:78:6d:a5:7d:4d:f7:b6:73:07:b9:24:29:2f:5d:
a6:f8:81:33:ef:f2:95:f0:69:23:6e:66:9f:c9:4d:
c3:6f:98:86:ef:de:5f:88:d0:58:7b:2e:d3:c0:e2:
79:c2:71:39:4f:d0:b9:59:03:28:ed:5b:f2:d9:02:
33:7c:7a:8b:ed:76:d4:32:52:e4:88:33:b9:92:8e:
88:12:b7:b1:ee:dd:39:91:bc:fc:ea:63:2e:d4:c6:
c1:0e:53:ec:ed:b0:1d:d8:08:e1:4c:f6:4b:25:76:
00:94:0c:01:f6:ba:48:ca:1e:05:e4:7c:f8:ee:f7:
30:bb:0a:f7:7f:24:0b:a6:cf:92:b8:e3:f8:c9:41:
50:34:fe:17:41:7a:71:69:bb:ce:06:df:10:9f:d9:
f3:6a:29:b2:04:1e:8d:d1:fc:1a:d8:ef:dc:dc:cd:
ce:d7:e2:17:ae:35:ae:83:95:13:40:bc:ef:1b:a2:
2f:51:b7:3f:fd:42:82:eb:02:66:6c:8c:84:e7:f8:
02:1d:22:bb:25:97:e3:72:db:01:b6:6f:4d:02:23:
b7:10:c4:a1:85:a5:fe:16:dd:34:f5:94:1f:12:d4:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:DC:7D:BD:3A:E2:54:C2:A5:44:97:99:50:41:7E:6A:26:8C:EF
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2c:b9:a3:1c:d4:d9:34:7c:d9:f5:d1:28:f0:f8:8b:ed:31:
e1:8f:4f:4f:36:46:e5:8b:9a:f0:00:97:b3:63:7b:fa:48:6c:
33:5d:c8:0a:11:d5:df:ad:49:3c:7a:74:97:3a:19:b5:01:ab:
ec:a8:d2:e0:b3:fa:0b:55:d5:c3:63:27:48:35:1e:28:ad:32:
5b:80:fb:c5:c5:54:a6:73:fc:cd:d5:51:0a:9f:7a:f5:41:ed:
50:b2:7d:e5:69:18:13:ca:4b:c8:09:8f:a1:e9:ab:b2:17:8a:
7f:2b:3d:1e:a9:57:5f:59:d8:b5:ed:66:12:a6:bb:52:78:b6:
78:8b:3c:9b:97:92:92:0a:2a:05:e2:2a:62:d0:5f:53:f4:57:
5a:6b:5b:f1:54:f4:9d:38:bc:31:ec:72:e2:a9:ad:0b:f9:12:
7c:fb:0d:d3:2d:6a:ff:43:88:5c:81:4a:ea:43:10:b4:d7:ce:
dd:b4:26:b5:bf:d6:7e:03:02:b3:38:be:3f:d2:c4:e0:36:cb:
9a:ae:a0:55:23:f3:b4:8e:87:a8:30:11:62:31:d7:d9:19:9b:
b5:21:4f:b4:15:61:61:d0:53:ce:b1:54:3a:91:f9:85:be:3b:
19:84:95:fa:02:6b:f4:07:d5:71:47:18:c7:48:dc:75:17:20:
4e:5b:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:36 2025 by rpki-client