Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
File: P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json)
Hash identifier: vquO6MeUP5v+zClmT+Et5wbN3O6U3uDdHX/AWGjO3kI=
Subject key identifier: B8:E3:93:AD:68:E6:C2:AF:93:43:13:48:54:1D:76:ED:5E:E3:9A:3A
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial: 019A228AA8B806FBE41F5DA4ABBC39C72A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
Manifest number: 040E
Signing time: Sun 26 Oct 2025 22:01:43 +0000
Manifest this update: Sun 26 Oct 2025 22:01:43 +0000
Manifest next update: Mon 27 Oct 2025 22:01:43 +0000
Files and hashes: 1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: SagfCi5fY5rG7cfSs4YFBRFe2M7jhe0QEQvdtQBPpTQ=)
2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:a8:b8:06:fb:e4:1f:5d:a4:ab:bc:39:c7:2a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Validity
Not Before: Oct 26 22:01:43 2025 GMT
Not After : Oct 27 22:01:43 2025 GMT
Subject: CN=b8e393ad68e6c2af93431348541d76ed5ee39a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:48:44:31:3f:fa:45:89:f7:1e:a5:73:bb:
e6:96:8b:77:2b:46:e0:19:37:c9:2f:21:34:fa:94:
86:f1:6c:99:f0:f2:99:d9:e8:9a:43:e8:51:d7:39:
3a:9b:fa:85:ff:69:6d:f1:7a:54:e0:ef:32:9f:85:
f2:37:ef:df:09:7c:ae:54:e1:3e:f7:90:3b:e8:6d:
22:51:8f:1c:c0:aa:5f:62:7a:62:7b:85:45:0b:dc:
dc:d4:28:1b:69:98:42:ed:10:ed:7b:58:09:7d:2e:
40:e6:68:03:3b:bc:c2:f4:31:cb:37:14:57:c9:af:
49:02:28:f7:46:a3:0e:17:15:76:66:4f:e7:93:11:
e6:1b:5f:88:2e:db:04:48:6e:67:9d:cf:86:f3:37:
01:a2:04:16:df:d0:1c:8c:61:d4:39:cb:c8:c8:4d:
59:65:75:ec:61:6e:62:4c:fd:56:96:3c:bc:cd:fa:
13:68:74:62:82:51:b3:3a:2b:3c:4b:dc:34:38:3b:
49:d1:48:fc:16:a7:db:7d:a6:f5:7f:4b:33:b0:11:
b4:80:ee:51:cf:8a:f7:46:19:2f:44:8a:71:d4:ff:
8c:f5:28:eb:04:a6:d4:00:a2:4a:4a:72:4c:65:97:
b2:18:5f:85:c9:63:52:0b:42:fc:49:d7:98:e1:6b:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:93:AD:68:E6:C2:AF:93:43:13:48:54:1D:76:ED:5E:E3:9A:3A
X509v3 Authority Key Identifier:
keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:3d:e7:2f:e2:28:de:b3:80:6b:8e:99:ef:0d:0e:2a:44:
1b:9c:90:a2:6c:f3:64:80:7f:0c:af:0d:28:5b:5c:8a:df:07:
e1:f2:9b:6e:66:44:9f:ef:44:f6:ea:22:04:9f:03:70:a5:86:
4c:51:33:6c:8e:e9:4c:58:97:16:fa:7e:a3:49:1b:d9:69:17:
42:af:28:89:d1:59:bd:fa:b9:bf:68:34:67:c6:04:01:77:96:
d3:06:7b:f1:ad:4d:db:24:00:a0:62:c4:26:df:4f:5f:fd:6c:
a5:f7:76:df:63:31:d7:a3:d8:b3:ac:a9:73:94:1b:24:2b:19:
b8:47:ff:c8:a3:6f:2f:0b:2b:96:bf:5b:93:dc:d2:b4:cd:a1:
c1:f0:9b:45:d2:f2:4f:b0:27:f8:ce:3b:26:2a:06:dc:07:ba:
60:92:9f:9e:0e:53:ce:df:cd:15:ba:e9:e1:04:5e:f8:80:36:
a7:83:2e:a4:a6:b4:8d:f7:89:35:f8:fe:05:22:4b:41:11:8d:
21:41:79:a7:f5:69:f1:73:e6:a4:c3:76:a3:46:7e:ca:27:de:
e5:2c:61:f2:c9:d2:ce:d3:81:5b:75:1b:c5:69:90:9d:9e:a6:
2f:7f:f5:e0:d0:58:34:44:2a:75:10:26:82:69:99:3e:e6:44:
2c:15:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:49 2025 by rpki-client