Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: 2sntPmA9iDijhqVJIiOPx7KK0OCqoZ0xYRMkQGGmckw=
Subject key identifier: A6:41:CE:1C:E8:9A:04:33:6D:45:B5:60:74:6E:8B:AC:AA:9B:F7:B3
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019A5F7A3DC846E14EA41E13A3FCBF893260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 161A
Signing time: Fri 07 Nov 2025 18:00:37 +0000
Manifest this update: Fri 07 Nov 2025 18:00:37 +0000
Manifest next update: Sat 08 Nov 2025 18:00:37 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: 4Pt3GalIZCbZ/FRohwI/nv3JWaWjUrqJTJTs8PqsfLQ=)
2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=)
3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5f:7a:3d:c8:46:e1:4e:a4:1e:13:a3:fc:bf:89:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Nov 7 18:00:37 2025 GMT
Not After : Nov 8 18:00:37 2025 GMT
Subject: CN=a641ce1ce89a04336d45b560746e8bacaa9bf7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:bb:5c:5a:25:22:30:e5:ab:43:44:af:48:
f0:f6:71:95:af:04:bd:e2:30:6c:bd:25:64:d5:bd:
c9:26:9c:39:01:e9:60:66:52:39:af:48:af:12:32:
2a:d3:5c:be:e7:bf:0c:10:25:37:8b:ff:03:59:22:
1b:72:ce:61:e0:92:ef:62:76:27:27:de:83:e2:c9:
59:60:6a:53:5f:3c:a6:35:31:1a:1c:85:9d:b0:bf:
a7:02:fa:70:71:0b:b3:88:8e:5b:17:a4:41:70:03:
17:03:6f:53:9a:91:c0:3e:ee:92:6c:22:13:3d:b7:
c1:b7:06:5f:4d:97:ac:34:fb:b0:5e:08:d4:b5:80:
af:9d:ac:93:aa:f9:15:d2:05:21:1a:61:e4:63:1b:
24:5a:a0:f2:66:88:a3:1c:39:d0:d8:ed:14:c1:6d:
5a:61:82:55:bd:3a:f5:0f:91:67:2c:35:13:3b:98:
7c:6c:b1:93:39:db:aa:7e:dd:01:93:ff:1b:d0:b5:
01:8c:25:94:1c:c1:3b:f1:00:db:84:44:f5:17:d8:
56:f7:e4:e2:1d:d2:fc:7a:ef:11:9a:bf:b3:6a:18:
9b:94:58:25:c8:41:00:0b:b5:72:61:9c:a5:fc:b9:
36:ea:a3:eb:7f:ed:7f:d4:c3:74:ef:3e:b7:64:c4:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:41:CE:1C:E8:9A:04:33:6D:45:B5:60:74:6E:8B:AC:AA:9B:F7:B3
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c2:83:13:15:20:2f:82:44:fd:f6:4e:0f:73:c9:ef:5b:44:
a3:90:9b:72:ab:1f:a3:89:12:63:24:de:85:c5:15:89:b5:04:
38:0b:16:5f:51:30:bb:7c:fd:38:65:81:2b:f6:6c:0f:11:90:
26:cd:7e:be:d8:23:fa:8d:c6:24:ba:13:05:b2:18:35:ea:3e:
83:17:bc:c2:bb:45:91:00:ed:c2:44:28:3d:b8:3c:fc:61:40:
8f:23:79:57:be:8e:b2:ca:fa:f0:01:32:ec:ea:5f:58:0e:cf:
ad:24:82:39:80:aa:02:a6:e1:63:ea:1c:61:a7:50:1f:2b:64:
e1:1f:ee:a0:d3:4e:8a:83:1a:05:54:7e:8c:0f:30:34:13:b6:
f3:35:17:de:1a:e6:98:77:81:28:3b:ee:7e:ce:4e:3b:8d:5a:
ea:5b:90:58:eb:f6:03:9b:4d:71:96:60:a2:b8:c9:06:44:6b:
3e:22:55:96:6b:d2:d2:57:07:90:b3:a4:02:24:e7:27:b4:5c:
21:7b:18:d1:37:a3:22:1c:58:77:64:bd:1e:a7:f5:75:ff:46:
0c:d2:0f:b4:3d:8b:ae:66:5a:fc:cc:60:ab:a0:f5:c6:05:43:
34:8a:d4:f1:45:25:41:cf:53:10:4c:3b:cf:44:ec:8b:ff:e0:
76:46:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 04:05:59 2025 by rpki-client