Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: Bz/yXYs4IRPeDh9EQA5NN8ZLNaIveRPPnKT5lfs1kvQ=
Subject key identifier: BF:B4:7A:B5:2B:F3:CD:B0:F7:B4:E4:F9:70:2B:8A:79:D6:E0:58:72
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 019A71808F6EAAE207EF8FD5B40EF550001F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 0AFB
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: tpRNYPPYK9AlKG6n/c0rVlWKDzTTs/nVjuY3kKjKoBg=)
2: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (hash: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8f:6e:aa:e2:07:ef:8f:d5:b4:0e:f5:50:00:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=bfb47ab52bf3cdb0f7b4e4f9702b8a79d6e05872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:6a:af:2e:77:66:bd:97:bf:8c:d1:bf:47:
f1:ab:72:f8:58:3f:c6:ec:f5:33:4e:63:2c:63:36:
e5:1e:42:c1:be:ce:07:ca:5f:bd:d1:87:c0:ec:01:
af:c5:e5:31:1a:8c:cc:b7:a0:d3:5c:18:38:be:2e:
17:57:37:bb:04:56:c7:be:6d:11:36:d6:f8:ae:69:
a1:a0:a8:81:bf:92:90:93:59:d8:9c:59:39:3e:b2:
92:62:a3:43:d0:f3:d2:78:bc:d1:3e:97:5f:8e:3f:
d6:b3:c7:83:8d:b7:fb:24:97:9e:8f:8d:16:9b:84:
94:ad:b6:25:15:4a:f2:02:47:da:da:98:0d:b4:9e:
36:e1:8d:ff:40:2d:ce:78:66:47:14:04:93:73:eb:
75:b0:f4:d9:6c:5a:ec:2f:17:4a:4c:0c:49:84:ad:
0b:ba:ad:c1:0c:d5:e5:9c:70:bf:3a:30:b8:89:3a:
48:46:9a:91:f6:8e:0f:f9:04:cc:7f:7c:26:c5:e0:
6e:73:3d:37:63:b9:91:d7:5a:03:81:bd:84:1a:7f:
5c:7a:b9:3b:34:67:b9:23:6f:20:66:65:9e:26:63:
54:33:12:41:29:f1:01:c4:70:86:96:02:cd:49:a2:
6b:b9:88:85:3a:d1:4d:30:d4:d4:8e:de:8b:9f:1b:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:7A:B5:2B:F3:CD:B0:F7:B4:E4:F9:70:2B:8A:79:D6:E0:58:72
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1b:e2:a8:27:35:fc:34:3f:2e:98:5a:f3:76:73:32:ad:f9:
bc:73:69:bb:33:64:80:01:36:fc:c6:98:5f:47:b5:e4:b4:b2:
7f:1f:20:0d:c1:ed:4f:b1:4c:32:a8:86:48:d8:b5:b3:b4:4d:
b0:e3:ad:b3:56:60:00:d3:41:34:b6:78:83:a5:c3:f1:e0:98:
f6:3b:62:19:7b:b4:fc:95:b2:5b:a3:2f:7d:26:e7:e0:04:8c:
d4:e8:2b:74:ca:c1:9a:b1:b6:e8:a6:49:85:fc:88:89:cb:4d:
fe:01:8b:eb:ba:2d:71:a4:b4:62:35:ea:40:1e:0e:b4:df:36:
41:49:9b:f8:3a:2d:91:91:cb:f5:cb:de:fb:e2:6d:b5:e7:09:
55:4e:83:4d:66:d6:28:6a:0a:58:1d:1a:74:09:b3:07:f1:54:
86:33:5d:6f:e0:62:ce:41:05:d1:fe:dc:59:09:9e:9b:dd:68:
d4:b2:5a:e2:01:3e:51:7e:a3:e1:40:c4:e6:a9:9e:23:ed:6d:
3e:13:31:70:45:02:42:c2:b7:ba:a1:da:3f:49:ea:1f:56:8a:
99:d3:7f:5d:6b:be:71:52:28:a3:9e:4f:cf:b3:5d:3f:91:01:
e9:40:fa:08:61:50:3a:3b:8b:0b:44:7e:5b:54:e4:f5:54:58:
49:5a:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:10 2025 by rpki-client