Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: H1YGaMqRkGi05LosxRLn89oCISK9JvJR43AyL43lb2c=
Subject key identifier: FC:96:B9:A4:77:1D:F3:C0:0C:80:CD:8C:18:42:F0:AC:BF:D0:8F:B2
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 019A72CA6B4AC554DC5EFFEEF032BF783CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 09D8
Signing time: Tue 11 Nov 2025 12:00:59 +0000
Manifest this update: Tue 11 Nov 2025 12:00:59 +0000
Manifest next update: Wed 12 Nov 2025 12:00:59 +0000
Files and hashes: 1: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: E0ssPL8JipzuYxJTOYcWRjGhF7KhqHQUvr/1TBbnRjw=)
2: UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa (hash: m8pCii9ZrFUBgw1JUoFjV1fAPuVi2H0sk6feFoafD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:6b:4a:c5:54:dc:5e:ff:ee:f0:32:bf:78:3c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Nov 11 12:00:59 2025 GMT
Not After : Nov 12 12:00:59 2025 GMT
Subject: CN=fc96b9a4771df3c00c80cd8c1842f0acbfd08fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:0b:65:62:d9:36:22:66:52:77:8c:17:4e:
52:d8:2c:84:39:a1:60:db:c3:23:ff:2c:e4:f2:b8:
d9:5a:f4:82:bf:79:66:a9:18:46:0f:ee:0f:ac:d0:
4e:60:37:4b:36:74:83:25:d1:ac:14:92:03:4d:eb:
03:8c:0a:a5:e6:63:9c:e3:6e:08:27:2f:12:9c:45:
03:e9:a4:c1:93:ba:1b:4d:e5:54:f8:b2:2b:0c:ed:
a5:ba:7c:9a:37:56:a8:b8:2a:a2:1a:e3:d3:dc:b7:
ca:84:21:3e:b0:a9:08:eb:44:83:0c:17:91:eb:eb:
59:38:62:d3:6e:e0:24:9a:e6:df:dd:83:46:a4:dd:
15:33:af:0d:e6:c8:e6:fb:e0:75:a1:bf:a4:7b:78:
0a:11:d3:96:df:70:4f:51:8c:60:79:43:88:b8:89:
44:3b:60:4e:5b:49:da:1d:8a:22:21:38:0f:d3:0b:
ce:e7:3a:a5:7c:09:34:d0:b9:7d:23:64:fe:65:5e:
a9:fc:bb:e6:2b:65:4d:33:c8:48:11:d9:a2:44:47:
db:ce:2f:3d:f0:11:fb:89:4d:61:32:72:0b:ef:08:
7e:3f:69:c4:69:4f:91:7d:2f:fe:56:b7:99:6d:85:
ac:f7:b3:14:8f:d0:61:14:f6:f8:b4:0e:64:ef:fb:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:B9:A4:77:1D:F3:C0:0C:80:CD:8C:18:42:F0:AC:BF:D0:8F:B2
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:47:90:d9:05:c1:bc:6f:39:d7:63:20:01:55:e2:ca:41:25:
77:f5:0a:6f:3b:45:86:f4:a0:1d:34:19:64:0a:b6:2b:11:9d:
cc:47:79:49:25:79:b6:ec:e5:44:2d:67:cb:0e:f6:a5:cf:07:
7e:8a:2e:20:8e:8e:9c:69:46:fe:fd:4d:b5:99:af:93:e1:58:
cb:0a:a3:9a:9e:2b:56:42:41:1f:e8:93:be:af:4f:56:8c:18:
b5:d2:a3:8b:38:5c:f7:4f:5c:82:66:c7:b6:07:e0:6b:2f:e4:
fe:c6:e9:40:0f:9a:03:f8:b6:92:37:3d:b9:93:e6:ff:f9:58:
aa:a3:8e:53:85:1a:df:bc:44:7c:77:82:52:b5:14:c2:80:3e:
59:37:59:34:d9:79:a7:ed:a6:52:9b:e4:ca:6a:ff:37:93:76:
e4:da:b0:8b:2b:46:ee:5f:03:d0:82:20:ed:88:fa:ce:b5:d7:
80:a6:27:1c:8a:ea:b5:5a:7b:63:16:17:83:e2:0b:25:ba:cc:
de:d5:21:82:d3:52:ab:ee:98:3f:83:84:f3:9b:c4:b8:14:ba:
16:94:5e:8d:3c:db:ed:a2:f7:44:33:03:ca:c9:50:1e:ed:d7:
96:67:de:29:02:81:be:16:e5:dd:9f:49:c2:4b:c7:00:1c:65:
4f:e7:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:54 2025 by rpki-client