Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: eej/JoXoW/jSz18aaxcmhIN3un6Yo27vBkC70usBgXA=
Subject key identifier: 76:BB:D3:68:6E:05:C8:7A:5F:5C:E2:BE:75:4C:0F:DA:C7:47:1D:87
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 019A28550E7E0E91AC4DDAB30DA54AB44E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 04FA
Signing time: Tue 28 Oct 2025 01:00:54 +0000
Manifest this update: Tue 28 Oct 2025 01:00:54 +0000
Manifest next update: Wed 29 Oct 2025 01:00:54 +0000
Files and hashes: 1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: 0V+hchhW7USGpPipHXCxKQbp+xfpgRGm3vOFL6iakpw=)
2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:0e:7e:0e:91:ac:4d:da:b3:0d:a5:4a:b4:4e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Oct 28 01:00:54 2025 GMT
Not After : Oct 29 01:00:54 2025 GMT
Subject: CN=76bbd3686e05c87a5f5ce2be754c0fdac7471d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:aa:20:1e:65:88:46:9b:e1:21:a5:c2:12:
40:46:c3:6d:b7:cf:e5:40:0a:7f:11:36:94:43:96:
f2:e5:10:36:2a:d6:93:8b:dd:e9:fe:9c:fe:1c:fb:
10:d6:24:9a:a8:ba:b2:c5:40:69:4d:7f:ea:24:49:
68:b7:08:c6:ee:0b:67:55:28:63:bf:89:4d:85:bb:
93:cd:c2:09:f7:14:97:ff:40:57:56:c7:36:da:2d:
aa:ae:ae:16:e2:e7:57:cc:31:b0:79:17:74:ad:9c:
bc:c3:9c:3c:84:09:10:8c:1f:83:43:09:c1:4a:81:
ce:1a:ec:f4:3e:18:ef:1b:96:b7:38:6b:27:6d:98:
11:bf:57:5b:20:f8:57:36:33:82:97:11:79:07:2f:
87:5e:5d:de:8c:a2:31:43:0e:47:6e:b2:79:91:28:
aa:34:c6:44:f3:ec:61:d4:04:ed:a6:97:08:8c:7e:
ae:c0:e2:0a:06:20:ae:5c:c2:10:c6:c3:a3:61:ec:
54:b1:00:e4:f8:6b:4c:11:4b:d4:e2:47:37:de:cf:
fa:5b:91:72:1b:37:76:63:6d:e1:16:d3:26:e8:30:
07:be:52:ff:b0:2c:8b:58:ba:de:ec:fd:15:1b:70:
2e:92:5b:dc:b2:18:6b:78:78:6e:9b:d6:ca:21:12:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BB:D3:68:6E:05:C8:7A:5F:5C:E2:BE:75:4C:0F:DA:C7:47:1D:87
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:07:c0:38:44:ac:83:d2:6c:b2:97:2c:96:12:b7:7d:69:03:
8f:d2:20:f7:06:fe:b2:ba:41:49:47:84:18:ec:a5:0b:87:27:
72:12:c1:ea:29:9a:79:c0:29:91:dc:f2:ac:54:9f:10:48:e3:
b4:b2:0c:58:aa:77:64:a5:31:fd:2f:5d:c5:da:c2:86:d9:ea:
76:fc:f3:87:20:00:97:e2:b8:02:fe:69:df:78:e8:e8:cc:c9:
45:b7:6e:d6:10:b6:c7:12:a1:41:39:70:17:66:d7:2d:0b:52:
75:11:56:6a:65:6d:ef:6b:3b:59:17:2c:e5:e7:9d:ce:31:d8:
92:59:44:87:6e:32:93:75:25:b2:a0:20:8e:1a:4e:e7:33:89:
e2:15:a6:58:1f:31:38:64:9f:e3:46:86:12:0b:2b:df:0e:bc:
bc:04:cd:fd:d3:0a:14:c9:c7:ec:c4:ae:26:d5:d9:00:bf:47:
06:b8:58:29:df:12:81:a1:6d:4b:e8:9d:21:15:b7:e2:89:6f:
15:24:5e:37:8f:d2:b6:17:f2:8d:c3:ae:62:77:1f:5a:12:d2:
7f:ea:8e:b5:7d:e2:2e:6f:b2:47:fc:90:6e:d1:36:40:03:40:
78:2a:89:03:9e:65:cb:f5:20:44:87:20:d3:6b:d2:f9:74:1b:
7c:9f:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:59:07 2025 by rpki-client