Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: wJfx/+kOQZ1q6ZX83z8Ypo5XJahcgvQ8hHVQZeXanjA=
Subject key identifier: 61:F9:50:D3:98:55:A6:39:76:46:00:88:C4:2C:F5:56:A4:B0:43:4B
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 019A71B962D56E89C0304B532D0B73202C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 12C9
Signing time: Tue 11 Nov 2025 07:02:46 +0000
Manifest this update: Tue 11 Nov 2025 07:02:46 +0000
Manifest next update: Wed 12 Nov 2025 07:02:46 +0000
Files and hashes: 1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=)
2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: JS9yejaIP+0yKgvh7DUSeATTJPpJsh+koKLbsHk+zHg=)
3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:62:d5:6e:89:c0:30:4b:53:2d:0b:73:20:2c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Nov 11 07:02:46 2025 GMT
Not After : Nov 12 07:02:46 2025 GMT
Subject: CN=61f950d39855a63976460088c42cf556a4b0434b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:08:dc:53:b5:04:c5:21:72:b8:21:56:e1:
74:4f:f5:c4:26:ea:1b:50:bd:e7:1a:e9:ad:77:c0:
53:7a:bb:44:61:eb:ce:55:c0:8a:41:a0:ee:52:e1:
8f:38:5d:4f:09:61:7a:03:c1:d9:98:29:a8:15:04:
26:bc:4d:10:16:9e:4d:d7:a1:6b:5f:e4:53:fb:e6:
c4:60:57:cb:39:38:3f:ff:33:21:46:0c:ef:8a:48:
e3:a9:e3:b3:9c:df:9e:53:66:32:c1:63:4a:5f:c4:
34:6b:7e:0d:38:d4:43:b0:6a:34:89:0d:ab:c2:15:
a1:fc:e4:fa:e9:fa:93:1f:d4:64:a5:c7:ef:19:91:
2c:c9:d5:99:44:10:31:2b:4d:1a:08:20:f8:ab:42:
ec:f9:59:29:82:a3:bd:a9:66:72:34:9c:33:a6:78:
d9:04:83:98:a2:00:ae:13:16:00:ad:16:8d:06:cc:
03:7a:d8:a1:88:29:b4:b9:85:dc:c1:bc:4d:c6:e6:
b8:52:92:b6:56:9b:3b:38:f3:5c:43:72:07:f8:c9:
38:ff:0f:42:f3:3a:c0:f7:6a:fc:20:88:6d:d8:a0:
0e:8d:fc:5a:e0:28:b2:c8:d4:80:87:9d:08:07:ea:
e5:a6:31:ea:c6:2f:c0:11:ab:24:5f:eb:59:34:52:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F9:50:D3:98:55:A6:39:76:46:00:88:C4:2C:F5:56:A4:B0:43:4B
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ca:37:57:5b:d1:af:4f:8c:42:2c:56:17:31:e9:c5:5f:cc:
1d:97:0a:1f:f0:c1:1c:7a:c9:f7:7f:79:f4:67:08:0b:d5:4a:
7b:ff:cf:4b:dc:7a:4c:fe:2b:cb:70:f3:47:4f:8d:96:e0:a2:
3f:28:1f:82:d8:fb:a7:ee:f4:e3:8f:9f:df:2d:d0:e6:b7:b2:
2e:e1:3e:06:e2:90:4a:9a:33:3d:ec:2e:d0:d8:ae:0f:07:b9:
94:5f:bb:bf:dc:99:f5:31:53:8f:4f:78:7f:d8:48:f4:72:59:
38:ef:cc:05:c6:bb:e3:43:9d:34:c6:37:72:a7:da:61:3d:46:
6c:bd:a7:98:3a:de:51:8e:07:92:ea:36:06:51:5e:86:cf:66:
d0:7c:eb:97:d3:df:f0:b0:93:e1:27:a8:06:a3:51:a9:79:18:
46:97:90:bd:d0:d6:2d:33:5c:70:1a:0c:72:77:72:c7:c7:4d:
f2:48:26:28:3f:26:ff:0e:a4:83:04:ff:13:95:63:29:2d:a2:
54:b1:f6:03:e2:78:7e:78:44:b2:20:23:84:1a:b5:df:c5:6c:
31:6c:b4:55:6a:c1:01:f9:83:27:6c:74:8f:a8:ad:f7:60:a5:
f5:80:bb:4d:81:1e:d9:c7:b3:a4:30:e7:c0:29:d1:fd:f8:5a:
e3:94:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:22 2025 by rpki-client