Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: ScUmE6rDZybLE0gxqqggpWRhyKREgehZMaIqKXzGjpo=
Subject key identifier: B4:A0:7F:1D:EF:72:79:E0:A1:38:75:F5:2B:F3:66:A7:FB:30:B5:15
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 019A22C09C0777C276E6386AECFDA1F6E72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 12E8
Signing time: Sun 26 Oct 2025 23:00:39 +0000
Manifest this update: Sun 26 Oct 2025 23:00:39 +0000
Manifest next update: Mon 27 Oct 2025 23:00:39 +0000
Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: lQJOdAw1djHPyZmzVUaB5tJga2AY4pmVBqffnl+O21g=)
2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:9c:07:77:c2:76:e6:38:6a:ec:fd:a1:f6:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Oct 26 23:00:39 2025 GMT
Not After : Oct 27 23:00:39 2025 GMT
Subject: CN=b4a07f1def7279e0a13875f52bf366a7fb30b515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:7f:dd:a9:1a:f1:fc:de:09:4c:ea:7b:00:
b1:9c:1a:85:e1:f2:9c:00:9d:28:d9:be:fe:36:0d:
f5:a1:ad:d3:61:17:07:28:78:f4:31:d1:cd:46:9a:
a9:e2:4f:43:65:40:35:79:39:8a:b9:2c:a2:bc:3c:
da:8b:ef:6f:11:34:86:a9:e5:01:f4:94:34:ca:3e:
ef:c7:9c:7e:9b:fb:3d:16:80:5c:8e:40:49:28:38:
c6:20:ba:9b:14:41:59:6a:21:74:b2:1d:10:4f:12:
a5:0d:c0:a5:2a:45:1b:33:f6:8f:01:b6:ee:69:29:
8b:db:a4:47:20:3a:46:0e:93:09:e0:19:9b:c5:c0:
e7:c0:2f:d3:f4:51:48:08:b2:1d:34:62:18:21:3e:
e5:df:f2:44:84:b0:55:c1:68:5f:cd:19:e3:07:47:
fb:38:0d:97:64:64:6c:a0:b5:9c:29:2d:65:cc:be:
90:ee:7c:75:81:f3:2a:b4:b4:fa:1b:c6:ea:da:c6:
47:e0:5a:35:78:b2:0e:e5:e9:ca:e0:df:59:9b:77:
91:2f:b8:3e:37:28:9e:dc:e8:6c:27:ea:fe:e8:84:
43:1f:df:fe:a9:f5:09:bc:ed:8f:e4:be:d2:06:da:
9a:a9:ae:3f:cf:ef:dc:84:4a:0e:d8:ae:a7:65:ab:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:7F:1D:EF:72:79:E0:A1:38:75:F5:2B:F3:66:A7:FB:30:B5:15
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b8:19:e1:5e:4d:fd:96:42:62:e5:34:b2:d8:50:10:1e:33:
f0:dd:3f:9a:1a:e5:f6:f9:4a:98:65:74:05:4e:bd:63:8d:e6:
17:7f:6e:df:66:1b:64:ac:1e:a4:75:94:5f:4e:07:34:fc:78:
a5:7d:e9:35:7e:ee:c0:f8:d6:9b:22:77:4f:62:e0:90:bd:db:
69:e6:c7:bd:1f:54:a5:f2:10:6e:dd:24:c9:c8:3a:a4:df:53:
7a:03:96:4d:81:76:5c:17:f7:ef:f0:4b:8b:c3:dd:91:72:73:
a9:ed:56:d0:91:1c:63:7f:4d:07:6a:29:1f:4d:c7:29:31:e7:
15:e1:32:77:e5:ac:42:ec:43:a6:40:0a:87:3c:14:71:df:d1:
93:81:d1:51:04:c0:a8:c6:71:d2:1e:58:ce:8c:0f:b7:2c:53:
92:2b:e7:6a:2f:01:56:eb:2e:1d:09:9b:97:ca:3e:8d:c9:1d:
1e:2a:e8:32:68:fb:b6:b2:82:8d:ea:24:84:bb:f6:d8:e1:01:
93:36:bf:03:30:ff:b1:a6:7b:9c:d8:4d:33:5b:d0:25:64:a0:
52:31:85:e4:54:71:15:0d:04:a6:11:73:19:69:28:cc:24:1e:
79:e5:21:5a:90:d6:f1:25:69:dd:1b:d7:4a:c1:be:e5:37:e3:
8d:7b:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:02:14 2025 by rpki-client