Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: V3pOZNi8uOFvoYK6xQK6oivc7Gd5qEpn5kNgaBm5uk8=
Subject key identifier: 1B:80:28:8A:31:64:61:7F:AE:9D:BF:1C:CE:3C:8E:DC:FA:7F:A2:3F
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019A4DAAFD29E2482EB1160FBA8DAB5BB80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 1155
Signing time: Tue 04 Nov 2025 07:00:42 +0000
Manifest this update: Tue 04 Nov 2025 07:00:42 +0000
Manifest next update: Wed 05 Nov 2025 07:00:42 +0000
Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: lZAANxFKd1992l701pGa0briVWnFpNz65WC8fet/oRE=)
3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fd:29:e2:48:2e:b1:16:0f:ba:8d:ab:5b:b8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Nov 4 07:00:42 2025 GMT
Not After : Nov 5 07:00:42 2025 GMT
Subject: CN=1b80288a3164617fae9dbf1cce3c8edcfa7fa23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:db:f3:b1:d5:fa:5c:eb:aa:c7:e2:8b:dc:
62:2a:a3:cd:5f:04:83:3d:be:9e:c3:ac:7f:d7:52:
9d:4f:c5:01:e7:84:26:1b:7f:e0:d5:77:78:ce:b8:
09:8f:c2:1d:12:ab:5f:32:d8:94:ec:07:1e:a1:bf:
b4:f8:53:b4:5f:74:16:66:57:07:ec:d2:bf:66:3e:
be:d6:86:32:e5:c9:63:f5:1f:94:44:96:a8:5e:d0:
19:c9:9e:2d:a9:64:9d:2e:1d:31:e9:05:04:70:96:
be:d5:ac:43:1b:ff:95:e8:0f:c4:f4:22:19:43:c6:
7f:13:7f:c7:48:62:b6:47:f0:a0:e9:ff:33:ef:01:
0c:16:47:6d:0e:fc:44:f6:f1:2d:6a:9b:83:a8:57:
75:bc:3e:c2:37:2f:f7:37:2f:f8:2e:35:2a:18:4f:
96:1c:a3:43:fe:33:af:07:5d:ee:74:b3:15:fd:ce:
d3:5b:2c:e5:30:b9:78:ab:fe:4d:e6:9b:cf:83:6d:
7c:e7:ed:2a:cc:1c:d5:c2:90:5f:64:d1:74:56:4e:
f4:36:b1:c3:d8:67:11:7c:54:20:8b:24:4a:79:a0:
e1:66:7e:b4:0d:bf:19:fe:aa:68:f7:f9:da:4c:fd:
73:bc:93:5c:04:70:70:1a:a9:54:e4:69:72:d5:79:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:80:28:8A:31:64:61:7F:AE:9D:BF:1C:CE:3C:8E:DC:FA:7F:A2:3F
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f7:1d:86:fc:b5:ee:26:cf:30:0a:8b:a2:4b:6d:79:fc:96:
32:4b:9d:f0:64:1d:41:19:fe:0f:b2:fa:97:98:c3:6b:9f:fe:
9d:16:87:c9:2a:0d:e4:fa:9f:f4:6b:a0:e9:69:00:ef:a9:a7:
a3:1d:ec:50:9c:71:68:43:24:2c:e7:d4:02:a7:c2:5c:df:cf:
af:6b:3a:ab:04:66:2a:a5:3e:c6:40:d5:b6:d1:14:80:10:33:
78:10:42:84:b7:c4:51:fb:35:13:4f:f4:16:2a:20:bc:dd:50:
5c:fa:95:46:d9:82:07:0b:2e:c3:ba:73:3a:62:45:83:8f:cb:
9a:f5:bb:a3:57:ff:73:f2:15:43:c5:46:4e:54:91:55:93:1c:
66:0b:8a:31:39:b8:2b:17:94:de:80:87:06:da:dc:69:e2:95:
20:27:32:cf:33:b5:36:21:f0:93:04:8f:ae:65:6f:14:3c:c6:
dd:73:27:17:ee:68:de:60:32:fa:37:3f:60:20:2e:09:f2:1e:
59:cc:b7:aa:cc:d3:13:c1:17:29:df:9d:91:d5:06:6e:fd:a7:
5e:e4:96:fa:b8:11:63:b5:5b:bd:21:ab:60:5e:9d:89:f2:d6:
c6:65:d7:18:be:cf:1d:6a:79:25:24:23:e3:d1:34:20:86:97:
f2:12:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:20 2025 by rpki-client