Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File: 8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier: OBy+rrvNkCCzEtk7Yj57bFv0yhd01CLgIJssLQJA+j4=
Subject key identifier: 5D:72:F5:AE:25:56:00:1C:4C:13:84:65:69:BD:01:86:37:B5:12:6F
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer: /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial: 019A2DB1EEEA636982FDF0751903BB8BCC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number: 0D01
Signing time: Wed 29 Oct 2025 02:00:26 +0000
Manifest this update: Wed 29 Oct 2025 02:00:26 +0000
Manifest next update: Thu 30 Oct 2025 02:00:26 +0000
Files and hashes: 1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: cZCkS2sTzmBaJaTtSuk6CoW8k8r2uXr+V1ZIGGhsx48=)
2: rMoZ83VQ7iYFtJcAmlmBDs25c0s.roa (hash: 5UVFXIRMFFdYenUl6z+JEcUUQ5VhSSfJAeVRB/Ej+fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b1:ee:ea:63:69:82:fd:f0:75:19:03:bb:8b:cc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
Validity
Not Before: Oct 29 02:00:26 2025 GMT
Not After : Oct 30 02:00:26 2025 GMT
Subject: CN=5d72f5ae2556001c4c13846569bd018637b5126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:43:43:74:a6:5a:7f:f8:ca:aa:60:19:38:
8f:a9:31:6b:56:94:ee:30:e0:17:60:96:e9:4a:37:
a1:05:84:f4:51:a9:6a:01:f6:ba:ed:38:63:87:5e:
20:75:83:c9:91:31:58:8c:bf:1b:7f:fb:9c:9d:d4:
b0:1b:b3:d5:6c:ed:43:fc:82:f5:bb:98:c0:66:11:
86:59:b8:bc:39:5d:dd:4e:0e:29:3b:2f:ad:dc:78:
bb:fb:dc:d0:c3:c8:3d:bf:af:bf:5f:31:ce:4c:78:
a5:94:bf:4c:8c:c9:6d:4d:6b:7f:07:c2:5a:93:37:
5e:6d:57:a6:56:e3:bf:d6:34:75:3e:24:7d:ee:a8:
1e:fc:46:2b:08:d4:4e:d4:f0:c4:69:57:5d:53:61:
65:80:5f:d2:f9:ea:28:c8:ac:eb:10:5f:f1:ec:ac:
c6:5b:e8:ea:9c:ea:01:59:fd:b0:08:f1:5f:b0:40:
61:6d:69:3a:a0:8c:c4:22:4d:8d:62:66:5f:31:56:
04:3f:51:b7:d4:80:06:73:05:17:9b:00:24:3f:53:
fc:77:9b:fd:2a:ed:be:28:38:b1:a5:3b:eb:6d:a8:
99:f4:2b:ca:31:48:ca:23:e6:d3:8a:7c:32:3b:33:
cd:82:bd:a1:9d:e2:7b:3a:4e:e1:3f:68:f2:c8:5b:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:F5:AE:25:56:00:1C:4C:13:84:65:69:BD:01:86:37:B5:12:6F
X509v3 Authority Key Identifier:
keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4a:61:ee:e3:eb:f3:7a:9b:5c:81:c1:07:09:07:ba:a0:b5:
37:f1:5a:25:05:26:ab:88:3a:23:6c:fc:e8:19:01:ef:c2:c7:
78:be:93:49:6f:63:82:cf:a1:6b:a2:83:eb:ee:64:57:c3:a3:
50:bc:d1:b8:0a:7f:2d:3f:ad:9f:29:fd:1d:24:1d:23:02:2c:
74:6a:f2:d1:d3:45:1e:4f:a3:d0:94:ad:61:b5:82:08:15:bc:
a3:6a:32:67:08:d0:8f:3c:b4:e4:2b:e2:2e:36:37:42:10:e0:
6e:25:02:61:05:d5:cd:a5:71:e6:d6:88:dc:d8:08:7c:6c:15:
0e:76:a9:f9:e5:5c:9d:ba:3e:6a:b7:42:ad:69:3a:b8:be:53:
33:30:a9:0b:d2:57:76:ee:4b:b2:4e:a6:af:73:7c:54:53:2b:
99:35:4f:29:6c:26:e6:cc:45:a9:f2:27:04:9f:2f:58:24:f8:
28:9d:7d:20:92:d6:72:59:b2:61:37:90:53:27:52:9b:2e:27:
c5:fe:a1:1e:62:b1:5e:b0:58:13:88:b5:e0:f4:d3:b4:1d:9e:
86:04:93:6d:33:cc:a0:95:6b:8d:ef:11:86:be:19:c6:56:75:
cb:e5:8f:b6:ea:07:24:55:3a:3e:f6:c9:52:a7:84:ed:07:a5:
69:a0:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:31:15 2025 by rpki-client