Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: vXO7/6YalXjmk3VYUNwCcIZX57XLFicYBCGtTpby5vk=
Subject key identifier: 6F:12:33:16:3B:5E:9B:A7:75:C0:8D:09:E0:8C:4B:2B:FF:7D:8E:6E
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019A522C979F619B9140CD7E2821EC5AFA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0880
Signing time: Wed 05 Nov 2025 04:00:45 +0000
Manifest this update: Wed 05 Nov 2025 04:00:45 +0000
Manifest next update: Thu 06 Nov 2025 04:00:45 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: VeJd1vb52SVC+AIIcm99fhTFggl9HeQ6U/RZQuCDdmQ=)
2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:97:9f:61:9b:91:40:cd:7e:28:21:ec:5a:fa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Nov 5 04:00:45 2025 GMT
Not After : Nov 6 04:00:45 2025 GMT
Subject: CN=6f1233163b5e9ba775c08d09e08c4b2bff7d8e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:8a:2c:45:2e:eb:af:ed:0a:ac:f8:7e:8c:
1a:17:8b:47:63:70:e9:ce:94:fe:a9:fa:87:f9:b7:
b2:fd:a7:e9:11:ad:48:e2:63:bf:03:fc:40:1c:ad:
3d:9a:3a:a2:e8:5d:33:9f:21:a6:20:36:f9:31:ab:
28:3a:a2:19:a2:1a:ce:ae:09:04:b5:9e:d6:8d:47:
9e:34:a8:78:d4:dd:97:4f:2b:26:77:95:e2:e3:46:
83:30:78:16:19:e9:b9:1e:0b:d5:9b:86:9f:fe:49:
3a:46:95:c7:8b:f1:15:bb:1d:cc:6b:cb:46:29:ae:
62:61:04:37:15:47:d3:9f:e0:63:df:a0:70:fa:24:
6e:bf:ab:db:9c:f8:40:88:98:7d:2b:f2:d2:ef:eb:
4a:28:76:65:70:01:6f:12:f9:3b:00:79:91:d6:19:
08:83:dc:a6:94:b5:b9:49:ec:71:6b:a4:f6:77:1b:
05:cd:6d:99:11:8a:21:e8:f3:64:ce:cb:21:ab:fd:
c7:0c:2e:f1:31:2b:d1:8c:c1:c8:6c:42:96:89:e0:
d5:af:69:4a:8c:12:ba:ec:b3:14:f1:c0:d9:30:c7:
31:c3:b7:04:32:17:21:c2:b6:2a:60:da:1e:4f:7c:
56:d5:cc:ea:96:76:01:75:ac:1f:a7:eb:71:93:f7:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:33:16:3B:5E:9B:A7:75:C0:8D:09:E0:8C:4B:2B:FF:7D:8E:6E
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8f:c7:0e:9b:c3:40:c8:2e:d4:6b:c5:a6:f9:b2:6b:ed:a7:
21:72:03:5b:f0:b3:9a:b8:59:95:d1:20:3c:24:6d:2e:24:e4:
53:2b:60:f3:12:63:b3:97:3d:ba:bd:cc:2c:6c:7f:90:c8:79:
40:6a:05:28:3c:34:cf:84:9d:a0:fb:97:57:ac:ef:56:1a:05:
7d:bd:65:00:ab:e0:7d:1a:33:6c:d0:6c:72:b6:7b:89:06:c2:
03:e9:61:28:3d:64:bf:f2:ac:1b:7e:be:f3:d1:89:20:98:49:
f3:89:a0:9a:84:05:7c:4c:5e:d6:78:59:31:40:d0:f9:9c:2b:
a7:87:77:b6:9e:f0:e2:96:2d:e4:be:2e:ec:dc:b6:90:b6:7c:
48:55:6b:e2:66:6e:6d:73:f2:dd:8e:a6:6c:3b:28:58:19:6b:
df:02:82:72:de:25:55:85:07:d5:74:8b:1e:f2:b0:b0:cf:07:
1d:b8:6d:36:1b:fa:eb:d7:3f:57:bb:54:29:74:0a:f0:72:1e:
99:16:4f:ce:25:ef:2f:e9:82:7c:da:48:df:dd:0e:27:ce:4f:
8f:3e:56:c5:c9:89:e3:8f:f2:8e:7d:87:66:d7:33:39:3f:d0:
d3:70:8f:d2:b6:77:34:e9:b0:ee:d2:ef:a3:a1:5f:71:f1:43:
be:47:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:25 2025 by rpki-client