Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: UE3GWOSNkl1RYAQ7Al8WEyrp5oPzcaizq3uOsWgvi0c=
Subject key identifier: EA:E7:E7:A0:B7:1C:C3:1D:29:DB:6C:5B:A0:A7:61:8F:E9:58:79:C0
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019A4EBD3D112411AB2BFDA23F7B90674F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 12:00:15 +0000
Manifest this update: Tue 04 Nov 2025 12:00:15 +0000
Manifest next update: Wed 05 Nov 2025 12:00:15 +0000
Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: 6zsy42g1UW/P7uCZNCi7rxJ9IXtkSCI7Y5GGz93IRnY=)
3: Jt7bihKghc7zukL52uY8fgD1W-o.roa (hash: 2TGz2CMfaxj9aqkazkTK9wOsLvIeBADGDZnq6/Vnqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3d:11:24:11:ab:2b:fd:a2:3f:7b:90:67:4f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Nov 4 12:00:15 2025 GMT
Not After : Nov 5 12:00:15 2025 GMT
Subject: CN=eae7e7a0b71cc31d29db6c5ba0a7618fe95879c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:49:81:bf:3c:3b:9b:f3:5e:cc:7f:92:03:
6b:b8:ba:8d:df:6c:04:78:7a:c8:b6:75:a4:9e:7a:
2b:db:15:fb:7c:c2:b3:85:34:02:ff:7f:00:52:d5:
b1:10:37:6e:18:e4:80:10:30:38:f1:99:cb:c9:2d:
dd:fe:f0:82:05:3c:16:48:a7:e7:8e:2b:97:f4:1d:
8e:55:5d:8c:37:f8:0f:c9:72:fc:36:38:05:81:32:
e7:e5:34:fc:96:3a:a0:6c:aa:6f:73:3c:99:29:4b:
8a:d0:3f:28:99:03:02:df:9b:b2:77:4a:83:ca:6d:
1d:9f:03:ff:2a:a4:06:f4:13:26:28:f3:d4:46:b8:
28:26:1d:30:cf:84:88:38:d4:5d:5a:3a:38:8e:10:
26:bd:26:1c:bd:6d:ca:82:a4:7f:d9:fb:81:6d:f1:
76:70:4f:75:22:77:2c:b4:f5:ce:8d:cf:f0:69:83:
c5:97:9a:a8:35:bd:4b:63:2d:15:7c:63:df:d6:36:
48:ce:c7:cd:55:65:af:79:db:01:a5:bc:eb:c9:37:
1c:a3:7c:28:56:ef:59:17:b0:08:c6:b0:7e:d4:4a:
24:fe:0e:b0:d2:ff:b6:91:91:ec:61:63:e7:ce:55:
71:ce:82:78:b2:ef:9d:c2:de:c0:1a:26:7b:2e:56:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E7:E7:A0:B7:1C:C3:1D:29:DB:6C:5B:A0:A7:61:8F:E9:58:79:C0
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:75:4c:39:92:0d:24:48:1b:6f:2d:a5:93:aa:14:1d:cf:
75:6b:fd:2a:62:59:a6:07:be:ec:70:62:fd:60:e4:22:94:cb:
5d:94:4e:df:4a:4b:9e:ca:d4:50:46:a2:43:9b:61:d4:c8:9c:
4d:62:53:15:b0:b3:a2:d4:d4:1d:35:27:ad:0c:8f:2d:b7:9f:
7a:ea:a6:d6:c7:d1:63:48:1a:fd:ee:30:2b:ba:3a:ce:eb:b5:
d7:50:5e:ca:4c:57:46:02:b1:71:57:67:6c:14:8d:ed:76:b2:
52:22:dc:ea:0f:8f:76:9c:a2:43:bb:6e:ef:c0:4f:49:b9:7a:
af:c4:f2:88:ba:50:61:12:a6:b5:24:a2:7f:12:a3:a4:2b:b7:
4b:93:d6:50:0f:ba:bf:72:6e:39:19:e8:ed:58:59:87:91:10:
11:04:1f:96:69:09:da:5f:a3:fb:9c:53:db:b3:73:73:3c:14:
e9:ff:92:f5:70:1a:c9:d1:c8:12:44:9a:48:66:49:84:e5:d7:
e5:d6:52:8a:42:76:aa:24:d9:f9:25:02:ab:f6:fc:3c:7a:d5:
33:18:52:98:30:18:0b:65:37:99:a2:92:2e:49:89:4e:b1:00:
9d:9d:54:93:30:c6:32:8b:b0:f1:4c:d2:fc:dc:bb:b3:14:4b:
03:ec:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:58 2025 by rpki-client