Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File: 8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier: FDmTFGYOLIT/Lny1M4qo2RW0uD8aMnHvyKMWnZJ45bI=
Subject key identifier: 23:A9:6B:68:FC:F2:8D:53:68:33:18:28:AC:AD:73:5D:0B:44:A6:79
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer: /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial: 019A4EF5A4B296F94B69AE0A4CCD03A3F7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number: 0F61
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: 3RIG16pgtIuSoaj5QLHVerZS9L2T9UNv3s/vwiBetac=)
2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a4:b2:96:f9:4b:69:ae:0a:4c:cd:03:a3:f7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=23a96b68fcf28d5368331828acad735d0b44a679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:c1:39:cc:37:40:11:d5:7e:e0:b5:28:af:
1d:08:02:05:6d:34:2f:de:3b:77:a3:69:29:76:2c:
45:7b:aa:af:5a:b2:15:49:93:be:32:1f:cc:5e:5a:
b1:99:a4:86:a2:2c:06:0a:27:50:a7:f2:60:13:ac:
77:b5:f8:9e:71:d9:81:18:19:89:3a:e8:99:77:c9:
8e:20:80:25:6f:35:4d:fa:8e:17:84:3a:08:71:d8:
1d:b7:62:1d:cd:1a:f6:f0:e0:99:7c:a6:05:59:8c:
36:97:9a:70:9a:90:d4:db:9b:90:1f:fe:84:eb:a2:
b7:e5:8b:a4:ac:2a:fd:f9:4e:9d:4d:6b:35:de:4c:
cf:95:bf:6c:9e:cf:62:83:0c:96:ad:49:12:60:57:
4b:3d:af:73:e6:b7:62:e5:54:aa:a9:d2:ed:0e:9e:
ee:28:8f:7b:76:1a:c1:ee:04:44:10:b0:bd:0c:e4:
df:00:c6:f3:06:42:53:be:cd:b9:af:56:e7:2c:2d:
56:bc:4f:88:ec:59:20:f0:d5:b4:5d:56:ab:94:39:
13:d4:69:41:96:31:a7:e9:f2:4b:7e:f1:91:56:54:
af:ef:15:c2:6e:6b:90:87:2c:11:09:4c:9f:d7:ee:
a6:43:8c:7e:6c:eb:4e:a3:96:51:72:33:20:9a:56:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A9:6B:68:FC:F2:8D:53:68:33:18:28:AC:AD:73:5D:0B:44:A6:79
X509v3 Authority Key Identifier:
keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1c:54:d5:d5:41:e6:42:77:4e:82:34:7f:92:57:8d:dd:a3:
ac:fd:92:5d:25:93:9d:43:3a:92:5f:4d:f6:d9:dd:af:73:9d:
65:97:58:4b:c3:6f:ea:5d:1f:62:d9:2c:21:b2:b9:7e:6c:c4:
38:bf:a0:8b:1c:d3:a7:2a:91:ad:65:e2:d9:49:d2:d9:8f:59:
a5:f4:97:35:ec:d9:ff:88:8c:37:13:5f:6d:ab:50:26:ef:af:
90:a4:2e:53:f8:52:91:1b:f5:2d:8b:23:89:96:18:80:30:f7:
09:1a:4b:42:e3:4e:f8:48:2c:0a:48:47:a3:5d:3b:2b:7d:9c:
47:f7:40:d6:4e:3c:b2:30:a5:f9:77:5e:c2:58:32:3d:2d:de:
01:d0:3a:75:99:3c:85:a4:49:94:c0:af:0a:b2:4f:38:84:1b:
c4:90:19:20:99:0f:50:9c:75:8f:ae:21:b7:05:dd:2f:59:10:
05:e3:e6:bd:45:2d:79:3f:96:a2:c6:d5:08:b4:51:0e:a8:05:
be:bf:0e:71:b4:1e:b1:ec:d6:8a:69:95:da:93:e8:a7:be:52:
30:88:2c:2d:78:eb:f6:a7:69:e4:72:5e:24:f3:10:6b:f5:c0:
2d:4b:b5:1c:72:d7:3b:ea:7d:51:ca:2e:27:9f:f2:d6:ec:ee:
b0:ba:32:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:40 2025 by rpki-client