Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: BXSXrdQg7NDLWvKHfOBfXKfwDFoTyYU+YuweAnVNjAA=
Subject key identifier: 32:EA:84:CB:73:DE:6B:4A:3E:3B:FF:61:F3:9E:17:AB:EC:4A:AA:B4
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019A1317AFA0CFC75A4EDB45F9E22A5E3062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0ABA
Signing time: Thu 23 Oct 2025 22:01:50 +0000
Manifest this update: Thu 23 Oct 2025 22:01:50 +0000
Manifest next update: Fri 24 Oct 2025 22:01:50 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: 0i0tUW5mJl43W1GPzO5HLZjHBcY/SCZRj1F8UoG+P+A=)
2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:17:af:a0:cf:c7:5a:4e:db:45:f9:e2:2a:5e:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Oct 23 22:01:50 2025 GMT
Not After : Oct 24 22:01:50 2025 GMT
Subject: CN=32ea84cb73de6b4a3e3bff61f39e17abec4aaab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:55:3d:34:76:1a:ba:c8:60:b0:b2:e6:f1:
b5:8a:1a:87:76:26:5e:2e:37:ac:19:f2:77:e0:d0:
ba:f7:69:56:32:89:f4:e4:d8:88:1b:ba:81:53:ad:
59:34:b6:9e:fb:14:f0:fa:34:71:e2:8b:90:75:85:
46:d4:3c:fe:6d:39:a3:40:8e:d0:79:b8:80:00:75:
6e:db:1c:06:3a:a7:3e:8f:d9:4f:39:6c:c2:e6:c8:
78:f3:c9:79:f1:03:d6:7c:42:4f:fa:6c:ed:08:c4:
4f:ee:a7:66:f9:ba:a5:59:36:ee:b1:d7:c1:4c:e5:
f5:37:e7:9f:63:5a:ca:e7:08:89:39:4a:ff:ff:c4:
2b:bf:0e:d5:12:6a:08:92:99:58:d8:c9:59:4c:0f:
3e:3b:86:2e:bf:9b:ee:e3:54:44:5b:cc:72:ee:bf:
7c:54:d0:20:90:fd:17:97:77:07:2f:21:82:23:58:
10:9d:54:f5:a6:85:c7:e1:d2:d1:4a:d6:2f:36:cd:
39:41:f2:1c:b7:86:51:87:22:35:b5:d0:4c:e5:5f:
d6:45:e0:18:f0:b2:bc:46:20:7f:53:2c:aa:25:ad:
32:15:d3:11:30:3e:3f:9b:0c:98:96:f9:94:27:43:
3a:bd:e0:89:c5:7c:af:c3:ee:0f:8e:e3:8d:b0:17:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:84:CB:73:DE:6B:4A:3E:3B:FF:61:F3:9E:17:AB:EC:4A:AA:B4
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:89:b7:ef:02:fb:20:e5:84:15:03:ea:42:19:6e:da:5a:98:
3b:4b:e9:aa:ca:cf:15:25:7b:23:9c:6d:a5:44:eb:75:a1:3b:
c4:34:75:49:5f:8b:0e:01:ba:09:7d:3e:49:df:af:ef:51:c1:
2f:f5:0e:6d:f2:e0:50:12:cb:9c:30:97:78:9f:67:e2:c2:c9:
ca:20:3a:20:73:56:92:9e:a2:2d:0f:07:e5:88:6d:7f:a5:c3:
21:45:05:18:c5:5d:61:ae:52:1a:ea:85:21:48:09:c8:97:77:
96:38:6f:70:86:38:e6:a5:0a:42:e7:23:5b:1c:1c:03:a3:95:
38:28:92:1e:43:65:a2:e6:f7:f8:c5:01:34:2a:c5:f6:bd:68:
9b:8d:c2:6b:e5:ac:c3:d5:ad:57:b1:eb:cb:a6:34:6d:64:2c:
65:76:e9:9f:d2:0f:fb:0b:8e:ef:a4:fd:73:cb:7b:95:df:b2:
25:ad:2c:2a:fc:b1:c2:3b:8d:53:d4:62:58:3e:98:44:a7:13:
86:c6:c7:9b:a6:eb:66:63:6a:15:8f:a6:4e:9b:48:0b:9e:6a:
95:d5:97:58:23:2c:da:a9:74:3e:4a:6c:b2:cb:47:48:dd:ce:
ad:de:84:d1:2a:01:02:13:cb:6a:4f:58:6b:e2:57:d2:2e:9d:
f9:5b:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:40:09 2025 by rpki-client