Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: v/DLOFS21cNByh4nTw+UfgEAY/TRATfVB+9WHp66xBA=
Subject key identifier: 63:0F:4B:0E:3C:76:C4:91:1E:8F:88:B4:70:26:AC:EF:FC:AC:6E:9A
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019A1272247566CF96EFE2EA790444A1030E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 0F7F
Signing time: Thu 23 Oct 2025 19:01:01 +0000
Manifest this update: Thu 23 Oct 2025 19:01:01 +0000
Manifest next update: Fri 24 Oct 2025 19:01:01 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: WRL/40J840t0A0oLs2NGzQl6WWDhjqVDoItuikBw8qU=)
2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=)
3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:72:24:75:66:cf:96:ef:e2:ea:79:04:44:a1:03:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Oct 23 19:01:01 2025 GMT
Not After : Oct 24 19:01:01 2025 GMT
Subject: CN=630f4b0e3c76c4911e8f88b47026aceffcac6e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:be:7a:a3:8b:18:88:51:52:6f:b6:99:27:
2a:91:67:4a:16:55:e7:30:c7:a9:cc:da:06:65:f1:
8b:3b:16:e3:0e:9f:0a:49:d4:55:89:77:3a:9a:1a:
ba:a9:2b:bf:96:86:0b:64:96:d9:c5:f7:42:5b:ac:
c8:4d:d4:0d:00:d6:79:b6:c1:5f:e8:93:c7:db:2d:
72:7f:00:e5:b2:73:da:b2:0d:09:1a:90:56:40:61:
a6:1d:60:94:f6:ac:7b:14:59:c7:c9:51:16:f9:42:
08:bc:1f:a9:17:f2:38:d8:13:41:e4:eb:b5:ae:94:
55:13:2e:3c:d2:95:78:38:ea:dc:80:7b:42:d4:fc:
44:b4:ba:80:05:a9:76:2b:34:bb:40:a5:3d:45:af:
a0:8a:c0:a2:38:a0:20:28:7b:2f:6b:8f:13:32:4d:
51:ee:99:e6:a8:56:63:b8:d0:b1:07:dd:3e:91:07:
4b:a3:40:4b:56:de:12:11:92:c0:53:3b:f9:9d:0d:
f5:45:13:8f:22:18:dc:b2:27:1c:0a:4a:91:fc:51:
2f:4e:c3:71:b9:bf:73:6a:88:1a:85:5b:e8:13:68:
68:ca:55:2d:d2:85:69:f8:be:9b:31:5c:16:3f:5a:
e7:2a:ad:54:b8:11:95:e4:e1:83:8e:1a:05:2a:5a:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0F:4B:0E:3C:76:C4:91:1E:8F:88:B4:70:26:AC:EF:FC:AC:6E:9A
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b2:c8:f3:cf:30:1b:24:ee:22:2d:b7:ff:ab:c6:af:56:c2:
d9:7a:54:e4:c9:bf:34:30:16:c7:fc:2f:46:86:3f:b4:f8:91:
b1:22:93:d9:3b:65:b7:5f:22:e9:bf:3c:a5:d9:10:aa:a9:9d:
ab:0e:a3:7e:d7:58:a0:86:de:63:4b:85:0e:85:df:0f:08:97:
ed:0f:8d:f7:64:32:d5:e7:e5:d0:9b:11:25:48:9b:a8:2e:99:
31:13:7e:bd:87:19:9d:ba:c2:1b:5a:21:b3:8c:c1:36:79:cf:
99:13:24:65:f8:af:5c:ab:99:ee:fd:23:b3:71:96:50:2b:dc:
a4:f6:95:39:34:bb:18:65:02:e0:40:46:7c:6b:8e:70:41:ea:
e1:ec:04:2d:67:e6:52:cf:8e:a6:02:d8:50:b6:01:f3:4b:04:
d0:ef:8c:6a:15:36:0d:4b:ea:bc:38:f9:26:5c:01:37:d6:88:
17:8d:02:64:26:88:05:12:00:6b:8e:a6:c2:1e:87:f3:ea:b7:
cc:cc:e2:88:e9:c0:fb:2b:15:9e:27:8f:e4:83:70:f6:7d:ee:
ba:66:57:f7:80:2f:15:da:47:2e:f0:cc:1b:7e:84:84:d2:86:
b6:c8:51:9c:d5:3c:a7:5f:8b:16:6b:e8:16:9a:3f:68:b7:67:
1e:f5:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 22:58:31 2025 by rpki-client