Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: wY9a05BPV1MaiR4IfSnAbpteSulfeZNyqU5RA2IUpkE=
Subject key identifier: E0:26:11:A8:01:09:C6:00:15:38:5B:4C:68:40:5E:DA:1B:28:D6:D5
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019A70DC0EE43CA887BFC609C9491D41BC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 07B7
Signing time: Tue 11 Nov 2025 03:01:01 +0000
Manifest this update: Tue 11 Nov 2025 03:01:01 +0000
Manifest next update: Wed 12 Nov 2025 03:01:01 +0000
Files and hashes: 1: 5lrGfq58aTW_pE055xCJWqbwHHI.roa (hash: HZ/ABKHtPjzdW+3khr3PKfbOq8CHBTNqQUp9BotDJOM=)
2: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: 27RrT0mfSk+89OE3c5e4Da6TU78rwwfa0+Y80aiyMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0e:e4:3c:a8:87:bf:c6:09:c9:49:1d:41:bc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Nov 11 03:01:01 2025 GMT
Not After : Nov 12 03:01:01 2025 GMT
Subject: CN=e02611a80109c60015385b4c68405eda1b28d6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:15:b0:9d:df:61:c6:a0:15:8e:65:cc:a5:
d6:4b:87:1b:7d:54:28:6a:cc:c2:e0:5b:70:d8:9e:
57:1c:4f:ac:71:a9:2b:4b:3e:27:c1:0f:ba:f1:40:
b9:a1:a0:1f:21:ba:81:a1:1f:97:1c:93:b6:8c:ab:
30:13:1c:13:da:64:fd:39:fa:80:4c:d4:99:24:46:
9e:36:4c:60:b5:81:ed:ed:e0:3a:11:5e:3d:b5:8e:
d4:8c:73:b4:65:c8:c8:58:69:80:4b:78:28:44:4c:
2a:74:8c:08:6c:d4:c3:a4:24:bf:60:04:15:15:d8:
76:85:59:d4:89:fe:4f:12:e3:92:58:cc:35:37:c0:
b2:30:ca:65:d5:d1:6b:43:4b:d8:28:71:f2:52:9b:
31:da:95:91:2e:72:c1:a1:44:4a:4b:49:3f:42:2e:
f8:a5:89:76:26:1d:ef:80:38:ad:50:77:14:15:5a:
17:ea:78:c9:43:37:d7:6e:84:96:e1:f4:cb:eb:2f:
4c:49:46:0b:a3:6b:4d:7c:72:fe:e9:59:58:1d:99:
fa:a4:78:6f:40:47:15:82:33:32:52:c2:7c:cf:50:
06:2d:95:c0:fa:0b:b1:19:65:51:85:12:46:b6:49:
28:e2:b4:d9:e8:a3:4b:0a:f2:02:35:ac:88:4a:a6:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:26:11:A8:01:09:C6:00:15:38:5B:4C:68:40:5E:DA:1B:28:D6:D5
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:82:9e:2c:e2:a3:41:e8:ad:9c:59:0a:92:63:f9:e3:29:3e:
66:8c:af:af:7c:16:3d:da:23:78:b8:14:a8:be:a7:0f:84:9c:
aa:be:97:07:ac:45:20:2b:19:23:f6:2d:0c:cc:39:7f:d3:9f:
a6:92:38:04:5f:95:16:9c:5b:2e:c1:eb:64:ea:19:91:ea:b6:
72:e3:9b:67:af:e1:1f:eb:10:a4:bf:3a:29:e5:cf:07:a1:d5:
30:9e:bc:77:1d:e8:a0:1f:55:b9:64:b6:87:ac:70:32:3a:26:
d1:48:db:52:e7:82:d8:42:19:27:7e:5f:76:8e:b3:24:22:61:
41:ea:dc:90:52:9a:46:16:e6:fb:1a:b8:0e:48:9f:fb:67:39:
a9:68:f0:76:a0:c9:1f:14:7b:a4:ab:54:61:1a:9a:ca:5c:c2:
72:48:c9:01:b8:37:9e:f4:a9:51:d8:91:77:d8:87:bd:b2:16:
62:41:df:d8:bb:41:5e:e9:7d:06:6b:65:7c:c5:ba:d0:0a:a1:
6a:4d:f4:52:66:c2:cd:82:97:d0:32:59:2a:ec:2c:dd:6b:77:
27:7d:5a:12:71:30:88:81:1c:2b:f2:b0:48:50:54:60:aa:58:
c5:7e:b5:74:da:a1:19:0e:eb:db:f5:e9:1b:6e:c1:b4:36:84:
10:5b:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:29:17 2025 by rpki-client