
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File: 8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier: 8UZhLQqfOnKKuoYCjdgPPsYTzNKT8oELZocimDSk8GM=
Subject key identifier: D8:0B:C2:06:2A:22:E3:B1:8B:78:59:99:26:AD:E4:15:87:9D:17:5D
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial: 0199530B28EED5918B5B64B3FCD0BCC0D86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number: 01D8
Signing time: Tue 16 Sep 2025 15:01:04 +0000
Manifest this update: Tue 16 Sep 2025 15:01:04 +0000
Manifest next update: Wed 17 Sep 2025 15:01:04 +0000
Files and hashes: 1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: sWb/IeJ3GpPrn9KRW3bUz1WQs9JOyc1vcaacptkKB8s=)
2: I9B7Iw-lVDjKZXQpLdWJsK0y0wg.roa (hash: 51ni5eAnE+Uva7Z7eVwqTn8UmbMwpkaozroHS0ckX3Q=)
3: uYmDkNSOTpoFpFn87a-aXY254ZI.roa (hash: f1Ff5ggY03B285EwxB+EjeSorrx1qWrOpvl1cl092pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:0b:28:ee:d5:91:8b:5b:64:b3:fc:d0:bc:c0:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Validity
Not Before: Sep 16 15:01:04 2025 GMT
Not After : Sep 17 15:01:04 2025 GMT
Subject: CN=d80bc2062a22e3b18b78599926ade415879d175d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:f8:6c:f1:0e:4e:20:41:fe:87:87:fc:a9:
ce:b4:a7:1b:27:ee:69:b0:7b:92:9d:57:90:c5:dc:
65:47:0e:f5:d6:1c:06:9f:5d:78:a2:f4:29:bc:90:
4d:ba:ac:57:78:67:1b:d5:67:12:b1:19:bf:c0:b3:
c5:ae:0f:01:b4:5a:47:2d:ec:8b:f3:ac:1b:94:e8:
93:39:e7:b9:a1:9f:ca:0b:c3:3b:f0:10:3a:d0:d3:
fd:3c:f7:c8:7d:ed:b7:66:3a:5f:54:b6:62:81:a8:
38:49:5f:a5:59:d7:e3:01:db:08:22:61:1f:73:4d:
c2:ac:40:e5:3a:cc:ca:8e:bc:f7:36:e8:f2:81:17:
f1:45:03:ab:e6:de:44:fe:dd:b1:64:bd:7b:07:69:
80:f5:8d:79:21:2a:15:db:49:4b:88:b5:c2:4c:79:
e3:51:0b:08:3d:43:95:1d:f1:43:11:c9:a8:48:75:
5d:b4:7d:fe:8b:54:0a:ba:2a:f5:55:82:98:e0:86:
56:fd:9d:12:3a:86:3e:06:b8:7a:f8:1e:c1:78:98:
c0:40:4b:de:26:bc:04:2a:94:fe:5b:19:ce:b5:0a:
8e:b4:8d:98:d2:43:96:e8:25:81:2b:8e:8f:87:24:
ff:a6:9f:27:2f:6e:d9:ab:c8:71:22:9e:8c:29:20:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:C2:06:2A:22:E3:B1:8B:78:59:99:26:AD:E4:15:87:9D:17:5D
X509v3 Authority Key Identifier:
keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b7:9f:fc:9c:55:b9:55:2c:64:0e:00:fd:3b:7c:08:77:66:
82:00:f0:d8:6a:49:44:5a:9c:52:fe:f0:3f:0d:59:4e:db:98:
ed:7b:ac:1c:eb:f9:60:af:a1:9b:51:57:76:99:e3:50:b3:f3:
4b:bb:11:cb:c6:da:62:96:2f:42:f3:aa:9a:02:b0:2a:b3:28:
4b:97:db:df:dd:6c:32:d1:77:4c:7e:ce:bd:e2:5d:93:29:7e:
91:a9:81:c7:8b:c3:bc:1b:aa:86:ad:33:1c:cb:66:15:9d:0d:
2c:c7:7f:0f:55:d3:b2:19:43:5a:06:d0:ae:b1:81:c6:85:6c:
70:64:f4:ca:8c:a1:03:b3:8f:2b:03:55:19:3c:9f:aa:c2:b5:
19:7e:22:dc:6b:e7:7b:78:f2:71:3c:19:38:50:dc:88:ae:ef:
d3:2c:5d:c4:88:67:23:0d:1e:7c:b7:56:cc:f2:7a:88:e1:8d:
0d:f6:4f:8c:a3:27:a8:42:d7:f1:53:af:00:00:c0:a5:5a:9e:
95:b7:7a:d6:b4:8a:9f:35:09:e3:c5:57:4d:14:ee:1a:7f:be:
18:d8:94:e1:11:3f:98:1f:e5:5a:16:0e:fe:95:9d:3a:cb:9b:
dd:82:93:fa:f9:63:d0:21:b3:c2:d8:ef:61:93:f3:ca:e3:05:
bc:42:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:20:04 2025 by rpki-client