Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: BRvbJSXEjrrkGU+IqyrKpcqyK6MyCj7TNCEiydN1bgI=
Subject key identifier: 1C:DC:95:B8:F9:E5:40:71:44:D8:B1:F1:C6:D4:E7:8A:16:AB:FE:9F
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019A71EEBD1CD37A062759B86627AF875A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: m6BNbs3d/rWVBXvhFIUjyQApXjPnrVAF09bzb9qtVeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bd:1c:d3:7a:06:27:59:b8:66:27:af:87:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=1cdc95b8f9e5407144d8b1f1c6d4e78a16abfe9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:79:ad:9a:0f:58:24:a3:21:12:7a:16:08:
4f:3e:d4:a1:4a:92:50:1e:93:e5:61:9c:19:64:71:
2a:3d:07:7a:7e:43:f6:cf:9e:16:0a:7d:95:cf:88:
e9:9b:46:a6:2c:f8:3f:4c:20:af:9a:5b:7a:d8:25:
47:f6:24:c6:0a:01:34:30:40:04:bb:14:99:70:df:
f7:f2:f0:20:43:55:cb:9f:ec:66:89:16:f7:9e:b6:
da:e8:80:4c:13:8c:14:91:65:f8:65:2d:2d:c5:06:
86:b6:24:d2:c7:54:6e:fa:fb:8a:18:08:d3:14:7d:
05:c9:c8:fd:8b:d8:0a:8c:e6:38:a7:ee:60:20:8b:
95:3f:b6:50:51:3b:39:48:7d:9f:c3:67:f0:a6:5d:
d1:b7:13:1d:c9:95:ed:31:58:ff:fa:f0:d2:21:d8:
10:0e:49:96:dd:ec:32:59:d3:07:3e:b4:da:e2:50:
ff:cd:d0:c2:44:30:e2:e4:82:59:08:63:5d:20:d6:
6d:78:87:77:73:c4:49:5a:c0:47:9a:9a:b0:fe:7e:
c5:66:32:21:47:92:50:cb:6e:3f:e0:d2:99:46:36:
c2:c0:60:43:a1:5f:b5:4c:cb:94:ed:22:d4:8d:e7:
73:cd:74:67:75:fc:d1:ec:bc:7f:cd:00:bf:69:4b:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DC:95:B8:F9:E5:40:71:44:D8:B1:F1:C6:D4:E7:8A:16:AB:FE:9F
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:34:64:4d:f7:a3:4c:64:e7:6e:76:7e:30:a4:60:54:d3:f5:
11:15:0d:54:c3:e9:13:bf:ca:1c:26:ac:15:b6:4d:fb:eb:af:
e1:c9:3b:da:42:4a:d4:d3:40:f7:b2:de:a8:82:c6:dc:df:eb:
b2:b6:a7:b8:26:40:89:db:46:48:c3:f3:09:12:bd:30:da:bb:
55:d5:ac:b9:61:87:d7:bb:a2:a1:b3:93:d7:b6:12:aa:87:94:
04:9b:1b:ba:14:f3:10:5b:98:1b:5f:d1:57:00:3d:43:4f:48:
11:97:ce:43:e2:48:3c:1c:bc:3b:23:1c:a4:7a:0b:a4:26:5d:
67:c0:28:e1:70:13:77:21:71:6a:7e:59:43:ca:61:89:f2:1f:
40:b7:05:08:4d:15:8b:48:03:f7:22:dd:80:97:f8:32:0e:36:
eb:35:28:e4:8b:8c:0f:97:70:35:d9:cb:cf:4f:8a:a0:71:56:
f1:f7:98:08:61:1a:c0:e9:b2:18:57:af:5f:a4:83:9e:ab:dd:
c1:20:d2:12:05:7a:0d:d3:f5:ec:dc:a0:d6:6a:98:e0:a3:2d:
74:87:96:d0:f8:d2:17:f7:53:b3:1e:ad:21:77:ac:f5:fc:95:
cf:a7:33:76:d3:3e:13:49:96:45:df:bb:38:13:48:59:67:98:
44:67:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:13 2025 by rpki-client