Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File: 8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier: od0+2mEx4gLOiv0G6p9/2aqMXnsRjqkJbed2xLSSVF8=
Subject key identifier: F7:04:1F:2F:25:16:56:74:5C:3F:49:50:BE:08:AE:A4:B0:13:BC:5F
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial: 019A51F555BB8F67BA7597C7FF7AEE30FEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number: 025C
Signing time: Wed 05 Nov 2025 03:00:23 +0000
Manifest this update: Wed 05 Nov 2025 03:00:23 +0000
Manifest next update: Thu 06 Nov 2025 03:00:23 +0000
Files and hashes: 1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: FOxzzCOrLzN11mD3RgqPBAjpmo3mByHE8xymhfRtp28=)
2: I9B7Iw-lVDjKZXQpLdWJsK0y0wg.roa (hash: 51ni5eAnE+Uva7Z7eVwqTn8UmbMwpkaozroHS0ckX3Q=)
3: uYmDkNSOTpoFpFn87a-aXY254ZI.roa (hash: f1Ff5ggY03B285EwxB+EjeSorrx1qWrOpvl1cl092pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:55:bb:8f:67:ba:75:97:c7:ff:7a:ee:30:fe:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Validity
Not Before: Nov 5 03:00:23 2025 GMT
Not After : Nov 6 03:00:23 2025 GMT
Subject: CN=f7041f2f251656745c3f4950be08aea4b013bc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:b4:6b:ba:24:6d:12:1e:28:6b:68:51:73:
fc:02:b6:65:9b:c9:b9:8f:86:c0:58:e8:be:28:95:
f2:da:87:f3:e9:cb:9d:5c:24:22:e6:3a:b8:d5:02:
02:03:66:fc:84:82:9d:ec:1a:ef:ab:7b:96:d9:8a:
27:66:70:6b:c4:c3:0b:7e:a6:55:bc:6b:a0:17:b1:
ee:5f:d2:4d:9c:5a:5e:eb:6a:4b:d2:bd:4c:68:e1:
3a:97:23:cd:ca:07:af:2a:18:08:4f:e2:69:52:db:
f3:72:47:33:eb:2e:96:f5:20:fe:f2:6d:95:6a:4c:
b3:ed:ab:9b:d2:53:72:cd:79:da:8e:13:6a:0f:c0:
0a:28:02:50:c2:c9:af:2e:d0:b9:3b:1d:4a:6e:93:
88:17:1c:16:73:40:38:b7:da:5b:39:6d:c1:35:9a:
d4:57:08:85:44:e4:f7:df:a3:68:35:3e:2e:d1:29:
29:78:cf:37:c0:ff:4a:3f:9c:b5:db:56:89:33:6b:
d8:ad:bf:b2:99:54:45:2b:b1:39:94:74:0b:3a:07:
02:5e:73:14:de:55:01:ed:69:49:b0:bf:6b:d8:c1:
1e:76:95:7a:c5:2e:f9:50:1c:64:49:33:67:84:88:
6c:e5:aa:37:fa:86:88:e4:84:0f:9f:86:33:f6:a6:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:04:1F:2F:25:16:56:74:5C:3F:49:50:BE:08:AE:A4:B0:13:BC:5F
X509v3 Authority Key Identifier:
keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b4:58:11:9f:2e:3f:41:fd:02:99:d0:44:20:0f:10:d3:7d:
1b:4e:71:27:35:8a:b9:e9:52:d3:29:0d:e3:2b:2d:94:fc:ea:
fe:fa:a2:8b:03:90:89:76:84:65:bf:2e:70:18:1d:5e:a3:f1:
67:23:a3:ae:c0:98:47:8c:49:32:26:39:94:f7:76:64:e8:fd:
fa:0c:06:e3:10:64:3e:5a:36:3f:cd:ac:fe:4e:42:89:5e:ff:
44:1a:bd:31:83:41:87:26:04:3c:83:f2:56:30:e4:3a:05:b2:
05:b1:78:84:91:e3:4b:53:97:7e:41:09:93:ec:5d:8b:ab:e2:
8d:b4:ca:6d:c9:0f:76:0e:62:9c:f7:c7:93:0d:1c:9e:cc:e4:
ec:5d:e5:66:b9:3c:ae:bd:e7:5b:b6:2c:81:3c:44:6f:23:6c:
51:8c:6f:c0:ab:8f:1d:70:42:2b:6f:b0:60:c9:88:61:7d:61:
b3:98:46:6d:df:2e:41:a2:b6:a1:e4:4d:c3:14:2e:56:4a:ee:
ab:20:0d:33:4c:8d:b7:f1:43:72:26:06:22:cf:56:8f:c6:52:
08:04:28:7e:ab:88:22:da:c5:28:28:e7:bd:27:f1:0f:5a:d5:
1c:42:37:1b:29:06:1b:ec:39:31:1e:f6:8d:10:7a:aa:ef:fb:
5a:2a:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:24 2025 by rpki-client