Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
File: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json)
Hash identifier: jD5ajJE4Y4NfH/8oZYMc589zuQh9BfVAQhZ0a3ByFUo=
Subject key identifier: 1F:8A:84:E3:5F:5C:63:46:1B:ED:3D:4C:B2:72:14:7A:19:A2:D3:0F
Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
Certificate issuer: /CN=f0594e7a31db7937fab52fcc389059d3451f2366
Certificate serial: 019A53082BE42087DC024DBD2C00B38EC209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
Manifest number: 47
Signing time: Wed 05 Nov 2025 08:00:35 +0000
Manifest this update: Wed 05 Nov 2025 08:00:35 +0000
Manifest next update: Thu 06 Nov 2025 08:00:35 +0000
Files and hashes: 1: 1725gUGQIpKhUhC6TOahnEdES40.roa (hash: gz+cyjfpqWkO2//cF11n4nopLq+bPFaAXZONiWW+enE=)
2: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: +x8u10OfWCZ6aMP7Z7C2JgNla24UuNrLYj0f+1183P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:2b:e4:20:87:dc:02:4d:bd:2c:00:b3:8e:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366
Validity
Not Before: Nov 5 08:00:35 2025 GMT
Not After : Nov 6 08:00:35 2025 GMT
Subject: CN=1f8a84e35f5c63461bed3d4cb272147a19a2d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:5e:71:78:9b:b0:8e:dd:38:91:a1:9e:9c:
2d:dd:65:a7:89:2e:43:66:25:8a:5b:9a:45:bf:08:
3a:7d:5e:24:24:fc:67:9e:b2:a0:0d:22:aa:69:04:
0c:e9:b3:ce:ae:df:6d:1d:7c:0b:e2:34:b7:a5:62:
e1:9a:15:b5:78:65:58:2a:3c:03:d0:c3:f4:f0:f6:
38:91:3a:a9:15:6e:36:4d:c0:48:ff:d7:87:40:c4:
09:b4:1a:d9:38:03:92:13:d6:c5:a8:ce:ca:43:57:
1e:6f:20:f2:9e:95:b7:67:b5:c9:e4:f4:f4:9b:dc:
ff:75:2e:bb:61:a4:c7:6d:2b:da:61:5c:74:15:1d:
c7:a6:b1:ca:b9:d7:1a:24:ec:3e:22:8a:06:5a:81:
7a:0b:5b:cc:23:46:30:63:d0:d9:3e:0c:73:e8:f0:
ea:56:ad:70:4b:85:7b:4e:71:21:ae:21:db:75:a6:
88:5e:ed:6e:b6:fc:b2:1d:9e:09:90:f2:5c:b7:c9:
bb:6a:df:d2:36:cf:e3:b2:ca:47:6c:b1:38:a8:4e:
da:bc:58:1e:bc:79:52:42:00:47:44:1d:ad:34:16:
12:e9:78:7d:c1:ee:cf:14:df:cc:88:24:85:9c:c0:
52:d0:7b:57:e7:ec:71:2c:b4:34:a1:a2:e0:28:80:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:84:E3:5F:5C:63:46:1B:ED:3D:4C:B2:72:14:7A:19:A2:D3:0F
X509v3 Authority Key Identifier:
keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2f:6d:b7:a4:cf:1f:37:4a:0a:a0:e7:9a:af:80:46:96:5e:
dc:b0:d0:47:41:9a:51:d7:71:9b:e3:dd:cf:1d:f4:c1:33:1e:
6e:64:96:2e:a1:7b:fa:0f:ac:ff:43:1d:07:e9:5b:a9:e2:50:
bc:95:69:a8:2f:b6:7b:fb:7f:c1:45:cb:95:02:ac:c0:53:3c:
ab:95:56:de:4f:d5:a6:44:bc:61:54:fa:21:81:ee:10:ab:bf:
9d:5f:a1:d9:70:72:11:8c:0d:cf:b0:3f:48:f3:07:95:6f:49:
3d:8e:06:3e:22:e9:f6:13:5d:29:e1:54:c6:ab:59:44:70:09:
6d:c4:16:2f:e9:42:a9:10:2b:d3:9b:ec:60:3f:76:50:5f:6a:
79:f7:b9:91:a0:08:05:92:1e:17:15:a8:d3:df:a7:fa:3a:e3:
36:89:f2:d0:3c:e6:7c:23:29:f9:3f:86:ba:7b:98:35:bb:66:
85:bf:2a:fa:a2:4a:4b:80:ca:10:8c:d4:08:71:1d:0a:41:a4:
9f:f1:8b:73:fd:9e:b4:f7:3c:63:35:e5:b0:55:78:34:e0:cb:
cb:10:0c:9b:2a:ed:50:c2:23:81:1f:2c:8c:c6:b2:4d:33:95:
35:4c:bf:59:1f:9d:df:b5:6a:d6:70:87:f2:78:93:e6:b1:93:
cd:b7:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:20:03 2025 by rpki-client