Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: Y5cAhEHo9v2/OqiFn9gJoSvS0oQnQYpABqfphnanukw=
Subject key identifier: 9D:05:70:05:8C:DF:DA:44:F7:28:E5:6B:96:F4:4B:AD:09:1E:6A:46
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 019A4EBD5DEEA466E4BBF6095E827481B2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 0AE9
Signing time: Tue 04 Nov 2025 12:00:24 +0000
Manifest this update: Tue 04 Nov 2025 12:00:24 +0000
Manifest next update: Wed 05 Nov 2025 12:00:24 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: 8qqcTatE3EsBMS8K1uc3RNasCul0lzlG7W4jxRx7YOc=)
2: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (hash: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:5d:ee:a4:66:e4:bb:f6:09:5e:82:74:81:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Nov 4 12:00:24 2025 GMT
Not After : Nov 5 12:00:24 2025 GMT
Subject: CN=9d0570058cdfda44f728e56b96f44bad091e6a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:b3:2e:9f:56:71:2e:85:b2:52:fc:97:bc:
f6:2d:75:d4:ff:e6:48:8b:10:77:a7:c2:ef:34:90:
5e:45:48:92:86:ce:53:33:2f:7d:20:e0:73:15:f6:
9b:10:b2:b4:89:08:3b:ee:4c:d8:4c:7f:a8:55:88:
f7:93:11:58:6c:2e:13:db:11:7b:17:2c:7a:b9:43:
e4:5f:e7:3d:22:85:b8:40:49:e2:6c:e9:8e:b4:1a:
fc:08:e6:32:88:eb:d6:ad:7b:9e:8c:60:30:6f:f1:
2c:40:a2:9a:b2:e3:9e:22:77:04:0c:60:01:c0:c4:
67:a2:00:44:32:97:15:dd:71:66:ff:8d:1e:50:af:
b0:4b:14:ba:dc:4e:c5:2d:fa:43:cf:9f:12:bf:85:
c5:31:c0:0a:d4:a0:6f:eb:79:6f:62:26:2b:d6:6c:
16:0d:53:63:a7:38:01:5f:08:ff:5d:fd:35:de:2c:
d4:49:ba:2d:41:56:b6:3f:89:24:3e:bd:dc:b1:01:
c8:4a:25:83:df:1b:8d:14:02:7b:c9:2d:cc:d6:2d:
11:08:fd:0c:52:3e:1e:df:7b:c3:f2:23:d2:12:06:
e1:1b:f8:89:63:55:0a:a9:fd:67:0a:15:04:41:96:
8c:33:f6:59:96:df:b3:b5:1c:48:1b:f6:57:75:c0:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:05:70:05:8C:DF:DA:44:F7:28:E5:6B:96:F4:4B:AD:09:1E:6A:46
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7c:8e:7a:28:66:c8:58:fe:59:de:27:d7:12:e2:63:6a:ed:
4e:8f:b6:20:89:49:0e:90:a7:8e:0c:06:29:31:12:d4:f8:39:
c9:bf:f0:30:25:5a:e3:5d:b5:06:70:db:dd:e6:b2:85:90:84:
1e:15:42:f2:ac:2d:4d:fb:9f:d5:4d:52:eb:85:bd:2d:cb:1d:
47:ae:b3:37:0b:8b:65:c0:41:22:eb:f6:1e:87:48:2d:82:4e:
41:d3:3b:3c:e4:55:b3:eb:9f:31:85:8d:ed:c7:f1:5b:74:b6:
66:97:2a:43:0f:a3:cd:41:f7:65:0e:01:7f:71:76:45:29:72:
f7:cb:b7:e4:8f:24:78:12:3c:d0:c6:50:15:72:9c:12:ef:b3:
b1:09:b0:ee:f0:a6:3a:59:98:4a:7d:50:bc:b7:e9:ec:58:96:
35:b9:a1:8e:8c:06:62:dc:bb:e0:bf:ce:c6:fb:25:60:a7:bb:
27:bf:99:6c:8f:2a:29:07:3a:df:af:91:0d:fb:90:47:44:75:
8a:99:84:c9:c1:6c:cf:e6:7b:13:a6:e9:f0:54:cf:57:22:4b:
46:fc:70:cd:a2:3b:e9:83:f7:46:58:9d:6d:4e:2a:67:89:2b:
aa:43:66:40:8e:de:fe:9f:5d:e2:d8:a2:ba:09:bb:3e:e6:9c:
6d:9e:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:11 2025 by rpki-client