Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File: 8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier: vGosb2rgPBC0NMibt4M9NAyuj21ZNgyvPVJ3s92cPkM=
Subject key identifier: 28:4F:F1:37:C5:EA:68:5E:78:98:71:19:12:55:11:E5:89:C5:31:D3
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 019A70DBE0CC10C4BA1F8DE91D3DDBF1956A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number: 0BA3
Signing time: Tue 11 Nov 2025 03:00:49 +0000
Manifest this update: Tue 11 Nov 2025 03:00:49 +0000
Manifest next update: Wed 12 Nov 2025 03:00:49 +0000
Files and hashes: 1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: C9ZO7aSqMRxKDJ/o6u+G7WfxVr4KGz0LTHKo3XGSVGo=)
2: Bb-dCG0MYANSL8Bk5tQCjYBHu7I.roa (hash: 0dT55FR6gYNAR7wtBsJy+EY1xVBw/famE9UI3Od2H8A=)
3: K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa (hash: 2dlcOZzL+Eim7W+NTEiKqnv/Tt9OOEdX1RMt+wWQD9U=)
4: hwiO597jiOerCy1jD6kKNf_z4mE.roa (hash: At2Ig8rywEMbpAnMXYd8IjR4QLHdmR+nptBnEkQohjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e0:cc:10:c4:ba:1f:8d:e9:1d:3d:db:f1:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Nov 11 03:00:49 2025 GMT
Not After : Nov 12 03:00:49 2025 GMT
Subject: CN=284ff137c5ea685e78987119125511e589c531d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:08:fa:50:d2:91:42:0d:ea:a5:9f:82:e9:
11:be:56:9f:5a:ed:7b:2a:80:43:78:9e:37:51:2a:
70:87:50:67:46:6a:e1:16:ed:97:94:80:84:4a:ca:
a0:5d:52:5b:17:9e:1c:6a:61:ba:a1:fc:0b:01:cd:
7c:5f:b5:74:0c:ec:aa:e2:ae:f2:cf:63:09:78:3c:
94:98:13:3b:4c:5d:78:40:75:4d:47:bb:7a:54:92:
5b:df:07:6c:a4:8f:79:af:a0:69:c0:9f:d3:d8:6a:
9b:34:f9:c2:4b:d9:15:26:1b:3d:f3:0f:22:e2:6d:
76:10:f7:de:21:1d:83:d9:93:7c:fa:2b:88:6a:c9:
f3:ca:b4:04:f1:bb:de:3c:83:32:cc:37:8b:84:cf:
89:98:86:8a:1b:42:78:fe:dc:0b:eb:77:92:12:de:
d8:94:56:6b:d6:f8:95:d1:c3:6e:7a:55:b8:c2:fd:
0d:ff:1f:be:17:57:e0:a3:07:50:35:5b:ef:b4:f1:
5a:64:cf:bd:8d:46:e8:40:98:d9:a4:78:d8:42:89:
40:9f:46:66:f6:05:42:56:ec:7f:94:9b:ea:1f:50:
b4:59:7e:7c:f6:8a:e8:66:78:c5:89:49:8a:e1:99:
40:b9:bc:33:bd:7d:27:df:69:c5:a0:35:3f:d8:21:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4F:F1:37:C5:EA:68:5E:78:98:71:19:12:55:11:E5:89:C5:31:D3
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2b:0c:40:00:03:98:e4:37:f5:6e:01:7b:ba:70:d2:6c:d8:
e2:77:bd:7b:c7:c4:f0:8d:ec:ed:45:78:f8:65:8b:58:bc:39:
71:b2:b5:16:7c:e5:91:16:68:a7:94:4f:da:d2:9d:46:7f:10:
6e:1b:8d:3c:ce:4b:1e:e2:75:ac:51:cb:15:66:ec:d7:92:87:
96:33:cc:2c:81:45:a3:5a:cf:73:1d:3d:51:36:6d:ff:df:c1:
47:af:69:44:30:59:c5:76:fe:73:de:52:76:b2:4b:43:29:e1:
63:9d:50:39:74:c5:9b:98:5e:1d:b9:92:98:62:fb:5a:16:45:
02:5a:a4:09:cf:12:4b:11:9e:64:3d:3a:d5:57:50:f9:05:1f:
cd:71:43:5f:8c:ef:15:26:9a:12:7b:55:08:c3:06:01:14:21:
ea:a8:3f:a3:13:ca:17:1b:2e:a4:78:a9:68:2e:dd:50:45:be:
f0:d0:fb:99:aa:f2:ee:06:55:09:77:56:64:c0:9f:bb:72:3e:
e4:9f:7c:05:ce:21:42:be:fe:90:e5:e0:41:58:41:93:7a:15:
44:93:3a:02:35:13:ac:3e:05:30:c7:60:cf:c2:bc:89:0b:c0:
80:5d:7c:87:b2:45:04:b5:f3:62:0b:67:15:72:61:3b:0c:ce:
dd:13:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:19 2025 by rpki-client