Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: jBl5//S7ET3TubjsCOZkLgNdaze3KVCPwUsWLJKmHmg=
Subject key identifier: D6:8E:E3:B5:1D:34:26:B0:08:DB:DD:B8:75:67:5A:36:85:48:D0:58
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 0199FCFD34B6C0BE07E960C35D3C3831C91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: Rbi64P3EoX2krT4Lrr9PwOM5gcW583WSEkRPvcHJc6U=)
2: G6K_DWhWU68de4ypb82fcRNbq1c.roa (hash: Gtd0kHs/yyYgjTN6WOR+S2KJ5GiQ71eqM+ooEqk1CdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:34:b6:c0:be:07:e9:60:c3:5d:3c:38:31:c9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=d68ee3b51d3426b008dbddb875675a368548d058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:41:bb:6a:c4:b7:e7:5c:81:e9:25:5c:8d:
15:0d:cd:e1:be:4e:6d:24:f2:93:e4:b1:53:19:bb:
6e:39:f1:b3:77:de:69:b5:85:15:fd:e1:7a:b8:85:
ff:9d:ac:21:35:37:02:a5:d7:b0:cb:78:f5:3c:1a:
e9:a4:16:65:fc:c1:09:70:a7:4a:00:af:5f:f2:31:
e1:63:c5:eb:a1:8c:8b:bf:52:90:1d:18:bb:a2:d5:
33:fe:68:1f:03:c1:da:bd:2d:76:04:64:51:23:04:
c4:c3:4a:a3:e6:60:a1:b4:ae:60:2e:95:0d:01:e7:
54:1d:29:48:00:b0:08:3b:a9:21:0c:c9:d9:20:ed:
45:2f:e0:d9:b6:8f:62:8f:81:19:b8:ab:bc:83:e5:
f5:4d:68:30:de:56:24:e8:15:3c:46:c4:c3:63:c7:
96:3e:c9:fb:10:9c:f4:82:34:02:a7:66:7e:3e:35:
6b:29:3e:78:a8:37:37:3b:2a:56:c1:df:9e:b1:46:
1f:c7:22:b3:c3:6b:fb:10:82:8d:de:47:0e:3f:9e:
90:8a:5b:85:74:93:3b:45:a7:ea:c5:03:86:26:d8:
55:30:1c:a7:f0:97:10:d4:31:80:22:22:ca:69:0e:
a8:ac:ca:b4:48:cc:a4:97:33:71:67:1c:57:7a:80:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8E:E3:B5:1D:34:26:B0:08:DB:DD:B8:75:67:5A:36:85:48:D0:58
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d5:ea:74:b7:63:41:97:be:c8:6a:54:dc:af:36:09:0f:a8:
e4:a0:39:57:c6:30:8c:6d:cd:76:63:fb:a7:be:26:6d:4d:c2:
a3:1d:96:aa:a0:e5:6a:c8:89:8f:58:10:20:f8:72:7a:d9:ea:
4c:ae:a0:d1:d9:1a:87:e1:58:15:47:c8:28:e1:27:e1:55:b7:
39:29:63:ec:54:80:83:ed:00:13:79:5f:9b:7d:b7:0d:bc:b8:
b5:76:1f:10:b5:8e:29:15:db:2c:51:a6:6c:9e:bc:00:71:66:
8e:38:cc:17:81:25:d3:a6:7f:8f:15:c7:d2:2e:f9:e7:fb:84:
3e:fe:27:54:63:6b:25:fc:be:7c:63:65:d2:f1:c2:63:96:43:
9d:ba:e8:7d:70:9d:92:82:be:2f:6c:8c:b1:bc:ad:a8:bb:92:
39:7d:05:4e:5e:9b:6b:1d:dd:0d:59:46:f9:92:5c:cb:cc:f5:
3f:aa:06:2c:34:51:e6:01:00:38:b8:65:5c:85:2d:2e:83:2c:
8d:64:86:12:1e:e5:78:cd:50:17:9e:37:37:d5:ae:98:7c:8a:
93:d7:d9:ea:de:bd:ec:0b:34:de:11:05:9e:4e:fb:48:38:56:
fd:a1:b6:0c:f1:73:31:ea:2f:88:7f:1a:75:d7:2f:4c:ed:26:
73:c8:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:23 2025 by rpki-client