Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: oL/xI/7yVGZMQIC8tR4fbKlDRiHExx5AnAKuxnN3NdQ=
Subject key identifier: F6:B6:E8:F5:1C:60:12:28:83:0A:82:E7:00:16:2E:26:89:23:E9:3B
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 019A4D739605F95FF0BD622AE036AABB2977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 1023
Signing time: Tue 04 Nov 2025 06:00:11 +0000
Manifest this update: Tue 04 Nov 2025 06:00:11 +0000
Manifest next update: Wed 05 Nov 2025 06:00:11 +0000
Files and hashes: 1: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: VyjP5jrvjUbKBfBYBsHxDH+5LCzEvnhV/WgtEOi0VOA=)
2: nqo_O7xWpllnpXWgXV-EBK2yLMY.roa (hash: v3gPcs+xtmwPaPJ3A0/t7F8YEQgyHeonW0dBXWdUhwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:96:05:f9:5f:f0:bd:62:2a:e0:36:aa:bb:29:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Nov 4 06:00:11 2025 GMT
Not After : Nov 5 06:00:11 2025 GMT
Subject: CN=f6b6e8f51c601228830a82e700162e268923e93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:dc:c8:2b:f2:cd:67:34:7e:43:5a:3e:d1:
f9:5f:b6:b2:63:d2:f0:64:0e:e5:5b:25:d1:d2:bd:
31:4e:e3:14:38:70:43:00:01:54:8f:50:6e:b5:2b:
9f:b6:e3:8d:a7:e2:e4:7f:99:e2:ec:40:71:21:13:
d4:4f:30:1d:1d:47:d3:17:93:a9:c6:5c:ea:d9:15:
82:a3:38:52:10:ce:98:65:78:5c:6c:86:ee:02:cd:
58:86:1d:82:8b:ea:e4:24:97:47:5f:af:da:fd:fe:
4b:1f:67:df:6c:da:9f:69:08:98:58:71:40:3f:a0:
a7:a1:aa:9b:0f:8e:7a:50:40:3a:d6:64:27:b9:87:
22:d6:a6:ce:ce:da:06:ce:63:ea:31:8c:1d:51:6d:
d4:fc:6a:c1:87:ce:86:68:d6:d6:50:31:4c:d2:56:
21:13:c6:4c:9a:9f:94:e7:be:3c:22:2c:53:53:f6:
cf:e2:d2:22:c3:fc:12:19:7b:2d:35:a5:b5:53:36:
2a:71:52:3e:3f:8a:e8:11:e5:51:46:d5:66:23:6e:
b8:47:e4:04:42:09:b7:8a:50:3b:5a:ba:4d:a3:2b:
c6:79:ba:e7:71:f7:29:94:9d:74:ff:b8:70:4d:05:
33:7a:71:ff:13:2a:ed:0b:7e:65:06:f9:31:68:67:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B6:E8:F5:1C:60:12:28:83:0A:82:E7:00:16:2E:26:89:23:E9:3B
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b2:0a:81:2d:5f:f6:5d:8c:ba:ed:88:f0:b6:3c:b0:ef:65:
bf:06:2e:cd:d7:06:3d:01:ab:09:a5:a3:ff:ca:42:88:6c:99:
25:8a:34:63:fe:10:c0:41:b4:32:68:a0:1c:ac:24:42:00:83:
3a:c6:21:2e:3b:d1:63:ac:4d:4b:b8:9a:65:7e:b4:54:cd:e4:
84:49:8b:82:57:c6:81:47:42:94:3b:7c:c9:d7:d6:5f:5c:e8:
6d:cb:b2:34:8b:fd:7d:98:6f:90:75:5e:5d:77:0f:f9:41:32:
06:ea:f2:9d:f8:a9:f9:1b:ca:bc:0f:46:cf:e2:63:ea:49:53:
74:b0:07:ea:1d:62:6a:dd:38:fd:ec:a7:1f:be:6d:a6:a5:84:
01:f4:11:39:0c:9e:c8:05:c8:fa:f8:38:13:41:c0:e6:67:30:
0e:82:0a:32:28:cf:2a:0a:c2:60:fa:18:9d:26:33:a7:b9:2b:
ad:56:39:bd:48:db:b2:8b:8a:a1:ac:28:04:f8:79:09:32:11:
b7:1a:fc:88:b0:8a:b5:70:cd:ae:31:36:2d:9c:98:d5:de:ae:
d6:84:a6:14:ca:72:af:6f:8e:9e:95:0a:b5:12:30:52:4a:9b:
82:b0:16:75:27:74:f5:a5:97:1c:ee:50:ed:a4:4f:26:9a:b3:
d5:d0:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:00 2025 by rpki-client