Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: fcRwsc9Sz5uOEEddkpFk+ZmVc3qr1RuWGYoyWZbyNdg=
Subject key identifier: A2:6B:D8:E4:F7:8C:37:14:4C:93:6C:5C:6D:50:49:BD:16:83:69:18
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 0199FDD8CF4C66EE6E6E15D28C817DDC1E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:08 +0000
Manifest this update: Sun 19 Oct 2025 19:01:08 +0000
Manifest next update: Mon 20 Oct 2025 19:01:08 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: Q22S9pHQGsCqd9gAwjXUbHuyYnBB49M831+a5QmhspM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:cf:4c:66:ee:6e:6e:15:d2:8c:81:7d:dc:1e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Oct 19 19:01:08 2025 GMT
Not After : Oct 20 19:01:08 2025 GMT
Subject: CN=a26bd8e4f78c37144c936c5c6d5049bd16836918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:1d:5e:7b:26:85:31:32:32:a8:cc:0d:96:
62:fc:8d:c6:47:46:04:dc:c0:37:46:f6:36:88:b4:
df:31:78:b1:88:b2:7b:20:dd:b7:ca:df:bc:a8:b8:
e6:a5:20:42:62:6f:12:dd:0d:d0:1f:b7:99:80:ef:
16:b3:82:4d:d1:19:85:5b:f4:19:49:45:2f:ba:2b:
73:70:72:8c:0e:ab:61:57:25:fb:27:25:81:df:b9:
42:60:c9:d2:b5:b0:97:52:18:a1:ad:df:d4:99:7c:
7d:98:69:19:0c:6e:3b:d4:b9:b8:08:ef:09:6b:2b:
56:a5:0f:f7:fa:34:43:fb:5a:10:75:1e:7c:69:d0:
2a:69:1b:6d:05:df:44:b6:6b:01:26:67:f3:09:9a:
1b:f4:1a:b6:37:36:6a:2c:c2:26:a1:e9:0e:13:5c:
1b:0a:62:e2:2b:0f:ef:fd:ec:53:46:e5:2c:c7:45:
6e:5b:1b:72:21:a5:44:3e:9e:fa:93:1b:9d:a6:70:
5d:ba:ce:99:f9:35:54:62:6a:b7:01:62:24:6b:11:
bd:61:a8:9a:25:87:09:f5:59:c4:75:d4:f9:36:3b:
8c:e6:20:01:46:d7:70:fb:7e:69:90:51:80:b1:fe:
a4:56:d7:c6:ec:a0:a2:94:dd:36:ab:35:31:be:11:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:D8:E4:F7:8C:37:14:4C:93:6C:5C:6D:50:49:BD:16:83:69:18
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:76:bb:30:56:74:0b:aa:f8:4b:c7:e6:32:8c:83:1f:34:53:
71:d3:04:8f:65:e4:dd:22:72:d5:4c:75:d8:dc:f6:3e:d8:01:
f8:c4:a8:b9:b5:27:d6:c2:89:46:be:f0:2b:10:67:5c:e9:6e:
19:5c:33:f5:3f:84:a9:63:fb:a7:55:88:a1:bf:d9:96:ed:98:
be:bb:89:74:e1:2c:7b:44:5b:66:eb:1d:da:44:2f:5a:4f:a1:
83:06:23:88:4b:e3:91:a6:b9:99:4b:82:1a:e7:ec:b3:09:ad:
0b:52:f4:57:e9:32:db:40:9c:1c:bd:0b:b7:5d:0a:63:bf:49:
87:7b:64:6f:d0:4a:75:4d:94:49:db:1d:02:71:3c:12:28:32:
d6:3e:1f:0e:78:8f:ed:6c:8d:9a:db:d5:19:1e:e5:03:79:1b:
89:6b:1e:ec:ef:02:7b:fb:3f:23:cf:f8:2f:6a:12:41:fb:ef:
66:15:7a:10:91:57:0f:1a:b5:ed:43:da:ce:f4:8a:e7:86:be:
ad:48:2b:b3:b6:59:f9:50:e4:94:64:4d:22:e4:68:f2:29:8e:
9e:d8:fb:33:64:68:9e:43:be:3e:b5:15:cc:68:6d:54:e4:c2:
a0:ed:1d:2e:61:5a:6f:e9:70:ee:56:b8:00:c2:0c:4d:0e:48:
35:ff:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:45 2025 by rpki-client