Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
File: 8UHWZGmLcP-yom9oS0fetsjVmlM.mft (raw, json)
Hash identifier: fKd760qn9e8s4DJunH+sT70Gpw8vf5Mq6t175Lhf+2c=
Subject key identifier: 13:FD:BF:A4:C9:D1:9D:12:96:42:2A:FA:FA:D9:3C:C7:79:D7:DA:EC
Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
Certificate issuer: /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
Certificate serial: 019A7225E69D30683AB6FBCF80EF529A6ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
Manifest number: 1157
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: 4T4WQHYVEwM6aHV5StYkGf2jN5Y.roa (hash: KlTVObGFhQ/EitqWP5C6TUwR0SNqxo8YoBWHXEsTCiE=)
2: 8UHWZGmLcP-yom9oS0fetsjVmlM.crl (hash: 9O30XtUMlAUrxesx+gt3FA0kR66poJDIDAzHS9zn+kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e6:9d:30:68:3a:b6:fb:cf:80:ef:52:9a:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=13fdbfa4c9d19d1296422afafad93cc779d7daec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:62:82:8c:cd:8d:d6:76:28:7a:ed:2e:ca:
d2:d3:d2:92:67:55:c8:89:53:ab:2b:89:50:b1:76:
28:13:b9:72:41:95:65:93:a0:95:d1:5e:94:ba:d7:
6c:0d:46:b4:81:86:bf:3d:1e:b1:9c:df:b2:21:46:
2c:b9:ae:28:12:9d:0d:f0:1a:5d:e9:7d:86:20:00:
4e:05:b0:56:8b:d2:5e:a0:f5:92:d9:b9:68:f3:44:
e6:22:93:99:cc:e0:3a:f6:33:81:64:a0:c3:16:70:
6f:bf:ec:6f:12:ed:be:43:f4:6c:6e:1e:86:95:ef:
14:a9:b1:af:12:86:a6:3e:25:54:fa:74:a4:b4:a6:
95:1d:41:fd:bf:ac:0f:e0:b1:18:7b:33:9a:61:21:
e7:e6:77:02:45:39:0c:95:91:53:f1:29:86:93:b2:
27:67:2c:f6:1c:7c:23:bd:10:38:b8:cf:ec:6e:72:
fd:39:ea:d6:e0:b8:36:f2:b0:c9:ff:52:fa:2c:bb:
9d:e2:02:a4:e9:51:4a:be:23:d1:43:8d:87:5d:c6:
cf:30:20:c9:d9:8c:dd:9a:93:a1:09:d4:b9:52:c7:
37:13:3c:fe:60:42:14:89:52:7c:4f:3f:aa:21:b4:
a5:52:fb:2c:b7:3d:96:82:f8:90:79:b0:12:4e:ae:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:BF:A4:C9:D1:9D:12:96:42:2A:FA:FA:D9:3C:C7:79:D7:DA:EC
X509v3 Authority Key Identifier:
keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:f5:b6:97:25:e5:59:2a:1a:41:63:62:0e:92:4b:03:60:
e6:44:51:04:79:53:96:f9:91:24:d0:e4:80:ac:b0:dc:a0:ef:
bd:3d:ae:c3:87:88:8e:93:d8:7b:4d:c0:cc:d4:f7:fc:d7:64:
a4:3e:2c:26:0f:0f:a5:0d:55:7c:1b:fb:09:5b:c9:e6:04:c1:
cd:1a:0f:a0:9c:f0:f2:4e:27:f9:87:fe:3f:65:98:f0:bd:dd:
65:51:9e:0a:43:d1:3f:d2:3c:d9:e8:78:71:c8:ad:06:21:5b:
cf:6c:f0:9a:fc:8e:a5:fc:b5:d3:e6:e5:9f:25:17:e8:cc:63:
e2:c8:75:b1:10:3a:a7:87:17:4c:72:95:c0:8f:f2:b7:82:1e:
1f:04:05:9f:c1:b5:e0:bb:9b:d2:7b:dc:10:23:3d:d2:e1:14:
26:f2:47:25:6e:05:49:7d:bb:ce:64:98:bc:cf:e6:a1:9c:2b:
9c:2b:0f:7e:55:8b:b5:70:a2:33:cc:ad:9c:de:55:79:77:f0:
26:4f:6c:fe:35:f4:3e:bf:04:ea:f6:f1:7f:63:da:69:dc:6b:
33:97:70:a6:03:f6:99:a7:a7:ea:f1:80:e1:81:d5:a1:f5:87:
39:5e:94:1c:a3:81:1c:27:9a:b5:87:02:20:62:78:2b:fa:06:
44:78:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:32 2025 by rpki-client