Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: 3+tLebEI/VJkwi6e578ueU9GuNnUGx5tqXg33tqhOao=
Subject key identifier: FC:9E:7A:08:AD:C1:E6:84:EA:93:0C:84:90:5C:40:26:6C:A1:83:F3
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019A19BD8F9BDFAD7676C5C0DEAFA73C3144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 0254
Signing time: Sat 25 Oct 2025 05:00:44 +0000
Manifest this update: Sat 25 Oct 2025 05:00:44 +0000
Manifest next update: Sun 26 Oct 2025 05:00:44 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: SomDB+/DCnwdGWHVGLvpF82MLeQ/MjPrCFfGEys6nh4=)
2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:8f:9b:df:ad:76:76:c5:c0:de:af:a7:3c:31:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Oct 25 05:00:44 2025 GMT
Not After : Oct 26 05:00:44 2025 GMT
Subject: CN=fc9e7a08adc1e684ea930c84905c40266ca183f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:b3:27:fb:e1:b0:ff:1e:85:c3:63:70:a9:
b3:4f:ae:12:84:71:b1:42:03:f3:51:fe:16:9a:eb:
2d:d5:0b:83:8a:9c:6a:52:77:fd:59:b3:f1:1b:88:
51:d1:c8:e5:40:0f:66:eb:60:47:70:a6:13:2d:0f:
6f:3e:14:6d:fd:ac:53:d7:ca:e4:bb:89:15:ca:ac:
48:9f:71:29:38:54:e9:38:4e:88:6f:cd:b4:bb:6e:
4e:2a:eb:60:21:84:9d:81:fd:8b:23:5d:1c:3b:03:
7b:cd:a3:88:9e:3c:0e:24:99:87:2c:f1:b3:2c:aa:
73:b7:12:c3:04:84:89:52:ef:c8:db:83:9c:01:ad:
dc:aa:bc:42:5f:bf:89:10:fc:69:43:d1:7a:92:e4:
97:32:f9:b2:d2:eb:ed:80:ca:83:81:62:a6:2e:d6:
21:c5:cd:61:01:ea:99:b4:ea:65:67:0e:f5:41:c2:
c4:a4:db:6b:55:37:6a:d9:de:59:96:d0:8c:05:99:
f7:2b:66:ab:c8:6c:5e:90:75:08:3d:6b:d6:08:4e:
2e:b2:74:14:dc:bb:0b:d6:57:7f:ef:65:85:18:68:
89:21:51:b5:20:05:75:08:2c:e4:c0:e3:c8:a7:9b:
a0:44:dc:a8:66:94:49:b6:b7:c5:f1:a8:e6:c2:77:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:7A:08:AD:C1:E6:84:EA:93:0C:84:90:5C:40:26:6C:A1:83:F3
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:76:10:51:fe:43:7a:04:18:d2:a6:67:45:e9:8b:5a:22:
c6:80:36:db:a2:09:23:a8:67:11:01:82:a9:0b:c1:72:f5:83:
fb:08:b7:7f:5c:ef:f8:b1:ab:96:5b:39:93:11:a8:e1:f7:5f:
62:54:5b:ce:2a:9d:18:4d:4e:f7:5a:12:95:f2:9c:95:b1:25:
b2:01:bf:da:50:20:4c:b4:fe:14:ff:2e:e9:e0:28:3a:a5:3d:
73:f4:39:22:d7:3c:9f:f6:c5:3e:3a:ad:ab:2c:0d:ed:a4:94:
d4:f9:0a:87:fe:d9:f4:a0:72:7a:ca:cb:d8:77:51:7a:3f:6b:
80:f1:b0:28:f9:5a:a3:d2:5b:7a:9a:1e:55:66:4b:ce:53:1f:
2c:96:18:d5:11:70:d9:2a:ef:e4:ad:0c:e8:22:59:4b:89:2d:
f2:a5:f5:48:cb:9f:fe:d5:b3:45:32:79:ea:4c:8b:25:32:36:
23:8d:ec:96:90:20:4e:a4:48:4b:23:ac:75:f6:3b:2d:ef:60:
f6:db:d9:cf:08:31:b8:19:a7:63:0b:d7:bf:da:b4:61:ea:f5:
5b:74:08:79:6d:ed:60:96:28:0c:7c:cf:79:6d:aa:cc:d7:10:
6d:c3:b4:75:27:6c:fb:4e:6b:5d:59:5f:de:6c:39:b9:32:99:
74:5e:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:21 2025 by rpki-client