Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: myfgVr/q5Rx++OITXxIbLh5sGJ48Xwv+3e3dLGXThO0=
Subject key identifier: 79:B1:03:FA:22:C1:FA:65:94:EB:44:48:5B:8E:03:D2:AF:9A:6B:16
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019A300F8277DB38BCDFE8EC698DE9EB0763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0FC1
Signing time: Wed 29 Oct 2025 13:01:54 +0000
Manifest this update: Wed 29 Oct 2025 13:01:54 +0000
Manifest next update: Thu 30 Oct 2025 13:01:54 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: 8ItyCY8vPKk8a5gJ31MkWF3Q/yoVofFRqxoGHd13qdY=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: Z9i6om7Xm-VJTFYr4Gx0uAR_icw.roa (hash: ANNmvdhb68U9bMYUn5YDoB+t5R72eGhNlvH1jCjqt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0f:82:77:db:38:bc:df:e8:ec:69:8d:e9:eb:07:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Oct 29 13:01:54 2025 GMT
Not After : Oct 30 13:01:54 2025 GMT
Subject: CN=79b103fa22c1fa6594eb44485b8e03d2af9a6b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:71:30:f9:7d:4e:f6:9c:16:d4:44:45:71:
f0:23:6a:46:a8:b7:c9:d1:39:de:75:ca:f4:d8:26:
3f:d6:2e:59:53:fa:b6:f6:04:f7:7c:17:c7:0f:6f:
e1:9d:7d:cc:48:93:d8:1a:0c:c2:1a:79:a2:83:7f:
aa:1f:bd:1e:58:81:66:4a:5d:79:41:00:f8:00:ad:
5b:32:f9:fa:40:41:2e:58:fd:ad:ef:39:a5:9e:96:
31:8f:a1:15:60:08:08:31:02:40:73:78:97:86:19:
ee:3c:35:44:0c:a2:e0:c6:83:a1:a3:70:1e:68:69:
40:ab:a1:82:be:ee:8b:45:b8:7a:3a:bb:c1:31:f7:
4b:90:a0:83:b3:e3:95:55:8b:b8:34:ac:cf:60:ac:
d0:90:80:b9:76:92:2f:7e:03:ef:54:e2:1c:f6:94:
3f:14:92:f5:a8:f8:fc:01:f9:6d:68:ad:1c:8b:eb:
66:c7:68:b2:55:81:de:e8:2e:27:a6:2e:3b:75:e7:
fc:02:2c:84:bb:d1:2d:27:02:da:21:62:4c:e0:4c:
43:cc:e7:1a:e3:19:21:c6:90:0a:27:f3:ec:e7:ea:
85:45:c4:9d:cb:29:3e:c2:e8:01:63:c0:23:57:8f:
88:fa:bd:7c:1d:53:23:76:79:09:2b:8b:a7:92:8a:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:03:FA:22:C1:FA:65:94:EB:44:48:5B:8E:03:D2:AF:9A:6B:16
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8b:5d:be:80:7d:8c:b2:a4:b7:7a:2f:f1:bc:3f:a7:38:92:
5b:c5:52:5d:c6:3f:64:89:50:4f:34:c5:4d:78:ca:c8:5d:aa:
dc:ba:b2:3b:1b:6e:d7:dc:7a:58:39:6a:3a:50:d8:f9:f9:92:
a9:33:9f:8c:ba:6d:22:4b:95:b1:3d:de:c1:06:c6:3d:2f:50:
96:8f:7a:9f:34:23:ad:c5:1e:64:8d:8a:2f:d2:d9:fe:61:70:
0e:d8:86:23:7d:66:00:2e:f3:85:99:75:4d:ef:06:be:22:b8:
ea:75:ab:bd:dd:ab:58:ee:5e:b3:fb:f4:4d:6a:9f:cb:04:20:
03:bc:14:bf:d6:d7:93:f4:a7:b3:fd:ae:04:5b:49:2d:5a:f0:
92:ca:b4:1f:83:08:f5:f8:53:f2:10:a7:0b:80:f4:52:5b:4c:
97:69:a8:6f:00:c0:4a:d0:2f:5b:46:9d:ae:6a:ae:4e:16:03:
fc:b4:d2:62:96:68:1b:31:b2:ba:ed:31:12:a1:1b:02:8c:08:
9d:43:e0:ca:24:4b:c1:3e:d1:2d:b6:7b:a9:37:ea:a9:77:a0:
fa:04:74:0a:a7:18:65:60:65:79:ec:6c:1b:e8:7d:81:a5:d9:
b9:dc:99:fc:ed:3f:57:51:91:c7:3e:52:ab:a4:28:98:a6:ef:
ac:8d:47:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:20:44 2025 by rpki-client