Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: 916wHmNN2AojopMdh7emeIo0j7n/l1FrekEPOACjE/s=
Subject key identifier: 30:BF:6D:E3:C4:0C:85:7C:F8:C8:77:D1:6D:79:C8:AC:3D:50:72:BF
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 0199FB7CE6E325F165511720A1CA06E79091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 0662
Signing time: Sun 19 Oct 2025 08:01:30 +0000
Manifest this update: Sun 19 Oct 2025 08:01:30 +0000
Manifest next update: Mon 20 Oct 2025 08:01:30 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: HjetkQz8eoNt3ZS8KksdOyBbKsc/5JpRYt51Rydo0ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e6:e3:25:f1:65:51:17:20:a1:ca:06:e7:90:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Oct 19 08:01:30 2025 GMT
Not After : Oct 20 08:01:30 2025 GMT
Subject: CN=30bf6de3c40c857cf8c877d16d79c8ac3d5072bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:f7:7c:c8:4c:44:98:4e:02:09:cf:50:17:
fc:ee:e1:75:6e:06:8d:77:0e:20:b7:7c:1e:ae:d0:
3d:d1:26:73:3d:5d:bc:ba:14:f1:eb:90:5b:a3:c9:
6f:41:50:f6:bd:29:85:94:ad:fc:fb:23:a2:70:3e:
61:ce:58:1a:85:7b:66:a6:02:13:5e:10:63:2f:03:
b6:3a:4f:2a:df:b9:ae:43:5a:49:8f:1a:2c:8e:d1:
16:ad:87:6d:69:40:17:d5:62:92:ca:6d:45:05:97:
0a:b7:0c:4b:8d:56:60:4a:e2:46:b6:eb:e8:76:a5:
08:af:31:37:53:8b:ec:50:64:aa:75:b1:41:65:3e:
e0:c2:e1:21:e0:14:73:ec:36:b8:f6:26:e5:87:1d:
4e:16:be:1d:1e:77:51:5f:0c:8f:eb:47:36:bf:98:
85:a0:a0:30:16:6c:a2:ef:8a:cb:32:82:4e:2a:2f:
d1:c3:a9:f7:c9:79:10:85:cc:ee:62:d0:3c:35:36:
d8:6c:a6:9f:58:2b:62:e0:19:67:cc:6b:ba:a9:55:
04:8e:fe:f3:a3:0e:8d:a3:50:57:6f:ff:af:5f:2a:
e9:32:61:52:a4:b6:fb:c3:d5:05:4e:32:c6:18:f8:
8c:1c:db:55:0a:39:86:6e:7f:e2:bb:47:ec:af:79:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:6D:E3:C4:0C:85:7C:F8:C8:77:D1:6D:79:C8:AC:3D:50:72:BF
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:93:70:ae:24:6d:c4:ab:0b:64:64:15:8c:62:cb:2b:28:54:
17:99:46:c3:01:45:3a:71:be:28:70:d9:f1:14:e5:bb:92:ab:
a6:de:8c:4d:b8:97:6d:a0:2c:97:de:a9:61:e3:01:cd:65:a0:
eb:2a:89:07:c2:a1:fd:fb:89:bc:19:e1:51:49:16:f9:b1:aa:
93:c1:ca:5a:e0:28:00:48:70:df:28:1f:b3:b5:1c:b7:fd:cb:
03:76:de:12:98:3d:5b:4d:f5:7e:fb:fa:1e:37:2d:74:26:2c:
9b:09:86:24:8a:9a:e4:de:79:6c:27:af:3d:73:c6:1a:8c:cd:
9d:49:56:96:de:40:07:d3:1c:b3:44:c8:8e:9e:a5:93:79:91:
19:a2:77:97:10:fb:f6:8f:8a:93:76:70:e8:08:b5:2d:32:c4:
8c:1b:fd:10:17:cf:a5:f9:72:dd:98:ce:9d:f5:41:4d:ab:08:
64:91:a4:2f:68:45:28:ee:ca:c5:ac:1d:f1:41:86:a7:b4:f0:
1a:0e:e3:77:46:c5:ed:0e:0b:c9:d3:46:64:7a:52:f6:e4:74:
26:21:26:78:fb:21:3c:c8:2f:76:53:57:3b:8b:c2:23:c1:c7:
d1:40:a3:6b:ff:1c:d6:8a:5d:bd:c8:42:57:77:ec:47:ee:40:
10:f0:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:44 2025 by rpki-client