Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File: 8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier: fo6vuFvof73KymFSvoEKhNRq98GM5OVCeNt3RADHxK4=
Subject key identifier: 1C:1E:9F:E6:3F:69:A3:E8:38:2B:2B:03:40:F3:CE:53:AC:52:E0:BD
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial: 019A72CA3A0541770D7F227B5D6E5813C0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number: 026D
Signing time: Tue 11 Nov 2025 12:00:46 +0000
Manifest this update: Tue 11 Nov 2025 12:00:46 +0000
Manifest next update: Wed 12 Nov 2025 12:00:46 +0000
Files and hashes: 1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: agq+JVDFeyorfCeSwk+yCyDp6I1U5H8hN/Qwk8gVW1I=)
2: I9B7Iw-lVDjKZXQpLdWJsK0y0wg.roa (hash: 51ni5eAnE+Uva7Z7eVwqTn8UmbMwpkaozroHS0ckX3Q=)
3: uYmDkNSOTpoFpFn87a-aXY254ZI.roa (hash: f1Ff5ggY03B285EwxB+EjeSorrx1qWrOpvl1cl092pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3a:05:41:77:0d:7f:22:7b:5d:6e:58:13:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Validity
Not Before: Nov 11 12:00:46 2025 GMT
Not After : Nov 12 12:00:46 2025 GMT
Subject: CN=1c1e9fe63f69a3e8382b2b0340f3ce53ac52e0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:cb:ce:9c:e0:48:91:a1:c5:f8:74:4c:34:
9a:d2:fc:ef:01:58:64:f6:21:16:09:f6:f6:9c:90:
c5:0e:40:89:ee:6c:20:58:73:66:11:2e:fd:3b:9b:
95:1e:40:ad:5d:ad:f7:97:c2:a6:4f:ec:8e:13:03:
62:c0:c5:ca:9d:30:b5:0b:f1:d9:35:c5:a3:09:9b:
e9:b8:f2:5b:b2:a6:4f:34:56:ba:1b:eb:fa:09:92:
01:7b:37:19:5d:a5:9a:4d:bb:7d:50:e8:18:61:ff:
ca:b8:14:c7:de:d7:bd:c5:30:27:a6:57:65:5e:2c:
e4:13:ef:d7:fc:8b:b8:14:78:25:63:21:5b:c5:62:
23:2b:72:e2:cb:50:91:27:c8:0f:ee:5b:89:3c:ca:
b6:7b:fb:99:65:69:94:96:2e:b3:2b:4d:07:68:42:
b2:93:5a:e9:2a:ea:cd:9c:23:69:03:8c:40:e4:32:
5e:9f:19:27:78:a2:8b:b2:b1:b8:ec:b0:79:8e:d6:
fd:90:7e:1d:87:3c:80:e1:dd:b2:14:04:77:f5:27:
71:cd:40:b2:1a:c0:4d:54:f4:4c:e7:cd:7d:de:2e:
c3:64:9c:ee:49:88:fd:52:a3:18:6a:94:96:8c:1c:
a2:b0:b2:3b:f1:8c:c3:31:8f:5f:98:a5:81:d1:e3:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:9F:E6:3F:69:A3:E8:38:2B:2B:03:40:F3:CE:53:AC:52:E0:BD
X509v3 Authority Key Identifier:
keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ce:0a:3b:6c:83:1e:cd:f5:4d:29:1b:bd:35:12:1e:90:72:
7d:d9:4c:41:c0:e9:4e:e4:fc:26:51:35:a1:ab:11:ab:0e:62:
10:49:b5:25:c0:33:4e:8e:fc:48:45:25:89:04:fa:ca:76:5d:
32:ae:4e:bc:2b:f1:a6:2f:9a:84:00:c9:bd:a3:a2:13:62:af:
47:55:1b:54:08:2e:94:e6:c0:2f:ab:2d:5f:9c:58:b5:cc:b9:
37:f8:cb:a3:71:35:be:ca:07:7f:a1:69:aa:ad:8e:19:2a:a7:
19:f2:8d:84:41:b0:0f:11:3f:ee:d7:5a:9e:12:0a:40:25:1d:
cc:2d:b2:98:67:60:8e:62:a6:3c:1c:20:a0:3d:f4:7e:87:8a:
0b:3f:1c:84:f7:99:75:de:f8:c8:33:48:bd:70:78:77:b2:a7:
77:5c:e0:1b:2f:42:5b:84:00:c0:93:14:5e:c5:87:63:0d:f1:
b7:e5:52:8c:e8:04:d9:a3:a9:c3:dd:cb:ae:b5:9a:5c:4f:b4:
59:aa:86:e8:08:53:f8:30:00:26:6e:e6:a2:e6:28:ad:b8:40:
ae:d6:02:4e:15:2a:6f:e3:01:65:65:c1:51:d1:13:bb:40:07:
59:eb:3b:99:6b:53:6d:0b:b8:16:be:2a:e0:0a:92:dd:23:35:
52:de:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:15 2025 by rpki-client