Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: /p9/iP1hYhWi5v/LPRlP5r6MkbYsZI5wsKk/A7BaOng=
Subject key identifier: 48:02:8A:D0:BB:B8:C4:03:4A:3A:93:73:96:79:19:8A:F8:9C:66:01
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019A4EF5A61CD93D5EFC79B8E911B9035503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0FD1
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: T3NHj3uLPv7OkQ6mxpqj5/f77/NLpiZ99UC/acw+a5o=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: Z9i6om7Xm-VJTFYr4Gx0uAR_icw.roa (hash: ANNmvdhb68U9bMYUn5YDoB+t5R72eGhNlvH1jCjqt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a6:1c:d9:3d:5e:fc:79:b8:e9:11:b9:03:55:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=48028ad0bbb8c4034a3a93739679198af89c6601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:a4:a3:fe:59:dc:39:e5:b2:96:9e:1e:21:
73:9b:22:d7:b2:27:11:a2:29:1a:80:5e:14:50:e9:
80:09:b2:66:48:60:5c:ec:bf:5c:f2:3d:03:68:56:
d3:f2:fd:8c:16:cc:e2:ae:7d:f3:dc:b9:f1:c3:82:
79:7f:61:ef:a1:5f:7d:eb:f2:cd:24:ba:70:83:8e:
25:fb:3e:f4:1b:dd:c8:29:86:1d:80:94:99:64:c4:
20:4d:22:5c:b8:05:a4:ef:70:ff:43:34:c2:8d:70:
a9:53:4a:a3:2a:08:06:91:a4:00:a5:dd:26:9f:95:
17:c0:03:0f:bd:d6:05:61:f7:c4:ee:0f:79:0d:37:
f0:20:11:70:07:2f:e1:d6:96:92:41:a9:aa:11:0f:
53:bf:8d:6d:d5:95:44:87:c3:22:82:ac:83:91:18:
97:9c:e0:8c:5b:20:c7:48:f5:c2:c4:90:10:06:a7:
6c:2d:3b:b0:7d:5d:75:7f:f6:4c:07:f4:ab:ec:db:
93:ca:3b:1d:1b:43:3d:c1:a1:2d:54:30:74:ff:3d:
2b:22:07:96:86:26:e1:62:68:8e:30:52:43:49:07:
11:35:33:56:9c:2c:70:52:61:86:b6:fe:9b:ec:d7:
0d:a5:73:26:ad:e2:3f:44:75:c6:c4:3d:da:ca:9b:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:8A:D0:BB:B8:C4:03:4A:3A:93:73:96:79:19:8A:F8:9C:66:01
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3f:fb:c2:b0:38:e1:70:ea:a7:a7:80:7d:0b:93:c0:60:d4:
57:a8:fa:0e:66:e6:28:3a:ff:b3:39:7c:9c:70:56:9c:e9:7b:
58:e2:16:0a:11:90:e6:6b:bb:28:9b:8f:04:e4:41:a3:4e:07:
66:0a:df:58:96:93:80:65:2c:b8:75:50:55:89:ac:41:89:eb:
34:3c:8f:94:cc:c6:09:7a:08:bf:ab:de:d0:62:14:7d:2b:6a:
41:a6:e0:40:46:cc:14:5e:b3:0d:db:e5:5a:1c:75:53:1c:a7:
fe:8a:55:4b:6c:87:aa:be:df:c4:78:51:bc:02:5e:ec:9b:27:
f6:f3:d5:be:58:f8:b0:3f:27:9b:f0:10:84:64:53:5e:0e:0e:
6b:2b:00:6b:3b:2b:5d:ec:f3:43:37:84:c2:3b:64:f1:17:bf:
c5:16:0d:5d:6e:ea:f2:d5:9a:71:5b:71:c4:6b:af:09:c4:15:
2a:9a:1c:be:0c:4d:dd:1b:55:fc:31:f6:47:07:cf:fa:83:d6:
a3:fd:ff:42:a0:4d:de:9a:81:60:95:ac:96:ff:6e:7c:18:e1:
f4:e6:41:b3:d7:14:0d:e7:d9:4a:7b:ca:ac:6b:3d:68:c9:e4:
7d:48:73:5f:62:da:34:5d:a0:6e:32:71:ff:f7:09:98:94:09:
38:0c:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:55 2025 by rpki-client