Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: GOZhycXA3bFjoIxsPq9Hjwf84ekQoeUj3UJEhsvcvVU=
Subject key identifier: 2D:8F:1F:1F:D2:85:9E:1D:CA:FA:54:91:82:2F:73:4D:54:14:77:7D
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019A50E4246A508E6E079E090AA0A42843DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:02:00 +0000
Manifest this update: Tue 04 Nov 2025 22:02:00 +0000
Manifest next update: Wed 05 Nov 2025 22:02:00 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: zWMyPitUQuQdtg76kl7CtTsb2eZgDj0FnkjsnIcf8kA=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:24:6a:50:8e:6e:07:9e:09:0a:a0:a4:28:43:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Nov 4 22:02:00 2025 GMT
Not After : Nov 5 22:02:00 2025 GMT
Subject: CN=2d8f1f1fd2859e1dcafa5491822f734d5414777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:40:e0:3c:46:cb:42:d4:f8:7e:3e:58:11:
d0:4d:f0:ca:fd:7e:73:52:66:dd:28:f6:24:1f:b5:
24:da:50:5e:2f:76:1a:ab:e4:e0:af:2f:5e:df:e7:
df:1b:fb:29:08:09:78:6b:c4:29:85:2c:1e:51:c7:
95:ab:d4:34:8d:86:51:94:ce:b2:50:fe:93:56:3b:
bf:eb:bb:49:a6:d7:0e:bc:fb:24:96:1b:7a:26:44:
f6:4a:d8:31:b6:2c:c8:7f:05:92:6e:cf:fe:e8:29:
11:cd:11:12:5f:43:13:c2:c8:81:66:46:39:a2:8d:
ba:b3:35:35:c9:ff:7e:dc:26:ac:97:a2:5d:fd:a4:
49:1f:3f:84:ec:00:07:8e:8f:92:20:7d:d8:af:a9:
7e:a5:43:4e:c2:e7:e2:42:79:09:bb:2c:73:52:d1:
f4:7b:28:e9:57:d7:b8:59:e8:a9:6d:76:7d:91:70:
fb:aa:0a:fc:c1:42:18:12:f1:f7:d0:0b:9a:61:fb:
bf:ee:54:59:64:05:69:5a:c7:91:09:3c:ed:0e:c9:
5e:e2:ef:dc:7c:9c:2a:f5:d1:75:b8:67:6d:d5:cc:
73:41:80:f2:97:2a:fc:53:f6:48:09:ba:44:dc:84:
28:ed:10:16:19:4a:06:f1:88:eb:3c:fc:88:38:af:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8F:1F:1F:D2:85:9E:1D:CA:FA:54:91:82:2F:73:4D:54:14:77:7D
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f8:7b:f5:40:3d:04:97:e8:1b:e2:fd:ac:4a:9b:71:23:1e:
e3:87:53:09:34:49:9b:2e:50:68:9f:cc:a6:79:3d:51:ac:1f:
cf:2e:95:a9:57:41:ef:bc:3d:16:8f:82:67:5e:de:14:0e:00:
f2:4b:f3:34:91:02:9f:59:82:b3:f7:45:0c:45:cd:12:58:19:
8b:32:c7:75:97:39:db:60:fa:20:39:a2:67:24:c7:4a:20:69:
b5:d2:d0:f3:f1:0d:a8:01:f6:06:ac:be:66:aa:8a:fe:54:2c:
4f:7b:42:8f:b8:ac:b0:78:05:67:b6:32:69:17:34:b1:65:3d:
cd:c6:af:df:e1:bd:ba:c2:d3:a4:40:eb:2a:a7:08:d9:ba:69:
7b:26:12:20:9f:68:28:21:34:e3:bf:41:a9:ee:3d:ce:62:0d:
0f:cf:42:ce:24:ad:dd:59:98:54:a6:bd:32:0e:0a:3a:0d:fc:
70:b6:a3:5f:e6:f2:26:d2:ad:2b:6d:7d:ad:79:75:24:1c:5a:
93:97:6f:c4:ee:c8:92:d4:ba:67:6b:0a:c6:97:46:09:29:30:
19:58:78:53:88:5a:92:83:58:69:e2:9e:5d:c9:db:2c:03:96:
1d:5c:c5:be:5d:b2:33:f9:81:f0:fa:67:9f:c7:20:d3:11:89:
44:79:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:50 2025 by rpki-client