Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: /24P93k1QiralJTx4btDsDRoc9ZNZ34/QJSJVDcVli8=
Subject key identifier: 56:9E:BF:D5:A0:E0:2F:BF:FF:17:81:3A:EF:D8:37:3F:D7:38:AF:94
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019A2D43EF669607225B9542A1885303BBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0DAB
Signing time: Wed 29 Oct 2025 00:00:18 +0000
Manifest this update: Wed 29 Oct 2025 00:00:18 +0000
Manifest next update: Thu 30 Oct 2025 00:00:18 +0000
Files and hashes: 1: 5-tO1DtUPdvn-gHncHuAbgt6OiM.roa (hash: L6Z02H1tfyOJ9fsH+lsAomG7wfqgJlWMWjJh/1Ka9SI=)
2: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: mheJ1NJSJ9D6ino2vAbHFLez4ivp2pHzOWyqHfPNHg4=)
3: gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa (hash: 5qjlUc3/t7psPBo135Wzs5OYxrc/B+KKSYzn0gcEaGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:ef:66:96:07:22:5b:95:42:a1:88:53:03:bb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Oct 29 00:00:18 2025 GMT
Not After : Oct 30 00:00:18 2025 GMT
Subject: CN=569ebfd5a0e02fbfff17813aefd8373fd738af94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:71:6a:b8:ed:91:32:c0:fa:a3:d8:45:cd:
60:43:30:d4:88:0f:ac:0c:2a:27:7e:89:70:0b:ef:
73:08:ac:b6:41:58:cc:c3:fa:b1:cf:bb:68:ad:73:
1f:a8:fa:13:dc:32:11:ad:d9:64:07:1b:8f:0b:39:
bd:8d:ef:58:00:d9:75:53:ed:05:c9:cc:f9:8d:9d:
0b:43:ec:83:2e:9f:ad:4e:8c:ad:1c:76:b1:d7:84:
9c:28:f3:66:8b:3f:f7:f5:a5:3d:87:08:b9:84:36:
d2:29:59:49:b8:a2:e0:98:f1:51:57:2d:37:f0:3f:
3a:59:11:e5:72:21:d1:8f:8d:ce:6d:98:89:81:27:
ae:4e:77:17:cf:ae:44:1b:38:01:f5:41:e7:ed:ce:
d1:69:83:6d:b6:6f:8a:d0:36:b6:f2:45:ff:06:53:
bc:2d:6b:57:2b:b0:4c:c3:2d:9e:a5:52:1a:1b:42:
1e:a1:9d:d3:2c:62:f4:96:be:5e:71:2a:dc:34:b6:
4f:64:86:91:8e:05:2b:1a:cc:12:45:62:c5:e8:c4:
0c:ba:ad:95:b6:a3:37:57:c5:d5:35:c3:c3:b4:e1:
45:4d:67:20:26:55:94:7b:1b:03:00:6e:f0:85:2b:
e3:38:9c:b5:39:b6:42:9b:a1:5d:b2:c1:c2:72:20:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:BF:D5:A0:E0:2F:BF:FF:17:81:3A:EF:D8:37:3F:D7:38:AF:94
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b1:33:0b:ae:2b:9e:bc:aa:35:3f:e8:66:51:4a:20:15:8c:
f9:ca:fe:33:d9:42:a9:7f:cd:84:60:b7:c0:8e:37:a1:34:fc:
4f:a7:fc:15:5d:0b:3b:c5:86:04:e3:a3:37:4f:2d:f4:4a:74:
ff:a2:c0:d7:4e:1c:48:36:6b:cb:f0:6c:30:8a:76:97:cb:7d:
d7:4a:7a:c8:8f:98:6c:af:38:86:a7:49:00:4d:54:7c:58:e7:
fd:20:91:f4:be:84:c3:56:42:27:d1:82:6f:ae:77:0b:41:b5:
a9:54:12:e7:65:41:97:ca:89:87:b8:34:b1:29:eb:55:15:1b:
65:13:3b:7f:b9:86:77:74:b2:91:ef:1f:48:a7:11:b2:8b:f9:
31:82:6c:86:ab:a6:b6:0f:43:ea:5b:9e:08:7e:09:e6:c5:22:
9e:3a:64:54:91:92:59:09:62:c4:b3:74:8e:d6:ce:98:7e:e1:
59:47:e2:1d:1b:eb:57:69:4c:08:39:eb:a7:ba:a8:ad:8c:19:
23:3f:3a:39:a0:c1:3c:81:d0:e2:11:b2:0b:14:62:f3:ce:19:
c2:de:56:b9:2c:f3:62:91:e8:58:b7:8f:36:ef:8c:4b:3c:f7:
dd:34:15:de:46:34:74:3e:d8:a5:ce:6f:29:35:91:bc:d5:ef:
2b:2b:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:48:30 2025 by rpki-client