Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: dH637FkRBlModS5va1k5fWVfITlCmHkAWcm48F4LzaY=
Subject key identifier: 17:01:07:CC:20:82:21:97:75:0F:2C:FF:EB:73:72:EC:25:BD:E5:6E
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 019A01115BD02A5A90C7F48C1F78CBD75D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 08E4
Signing time: Mon 20 Oct 2025 10:01:46 +0000
Manifest this update: Mon 20 Oct 2025 10:01:46 +0000
Manifest next update: Tue 21 Oct 2025 10:01:46 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: n0bYh9hsVUGSKPv/Xb6Ln9ToZh8Z8CgnRn+hv14ynac=)
2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:5b:d0:2a:5a:90:c7:f4:8c:1f:78:cb:d7:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Oct 20 10:01:46 2025 GMT
Not After : Oct 21 10:01:46 2025 GMT
Subject: CN=170107cc20822197750f2cffeb7372ec25bde56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:fd:19:77:9f:85:bc:c5:3e:aa:03:0f:f5:
09:eb:77:f7:e9:c4:b1:cd:0d:0d:a9:26:19:8d:42:
cd:1f:13:1f:b8:4b:07:b3:72:bf:64:f4:30:4c:88:
ad:f2:ce:fb:1e:af:4f:9e:f3:e9:86:e2:44:f9:5e:
80:1c:e8:8b:0b:e2:65:1e:39:3d:cc:62:4c:11:80:
89:57:10:15:7a:4b:be:74:8d:7f:98:92:38:ee:ef:
d1:68:b4:f5:3f:90:28:11:9a:f5:0f:2d:ee:29:cc:
db:e4:1d:74:2d:e2:e4:eb:c6:f0:b2:8b:92:41:33:
62:96:75:1c:82:d5:3b:44:74:ac:70:9e:05:18:72:
d0:89:8b:01:01:9f:7c:c1:ca:94:c3:f5:66:3a:9d:
d1:09:df:bf:df:4f:1e:9e:bd:1f:60:9d:83:59:56:
4e:f2:d3:25:23:79:78:6b:7d:b0:75:e5:0a:6e:e2:
0d:c7:34:b1:d7:b1:47:b4:98:08:dd:30:53:f3:8f:
73:2c:16:4e:c4:98:e2:7c:49:28:81:3b:6c:2d:9b:
80:a8:5b:fd:a7:1c:1c:31:47:c4:f6:6c:64:b4:89:
30:97:6b:bb:36:08:82:e9:06:57:ff:4c:9f:b6:a2:
1d:37:19:3d:8e:07:c9:ea:60:48:f1:70:66:55:b6:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:07:CC:20:82:21:97:75:0F:2C:FF:EB:73:72:EC:25:BD:E5:6E
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:67:2b:e0:0b:fd:b1:53:c7:2e:1f:70:0d:f4:e0:46:63:46:
21:2e:a0:8a:c5:01:59:a4:d3:e4:a9:0d:57:9e:59:ef:39:0a:
0d:2b:e5:84:09:d2:23:82:6e:72:50:af:18:a9:5c:b4:1e:9f:
df:cd:6d:32:af:e1:b4:63:72:fa:d3:5f:f1:81:25:86:ac:cb:
8f:c3:1f:31:7a:2a:ba:ef:23:cf:b4:47:eb:4c:1f:e1:21:3f:
32:7a:a9:ca:2e:49:45:b1:71:df:8d:59:3d:e2:3d:b1:86:cd:
f4:a4:bd:95:ae:cf:e9:81:eb:03:cb:91:08:ed:50:e3:99:34:
79:2a:11:d0:b8:e5:91:78:55:43:37:b9:48:5f:39:60:60:f4:
c6:1f:06:25:17:08:75:78:8d:56:76:74:3f:84:27:fa:7b:dc:
61:6e:9b:1a:e6:62:92:1d:a8:14:f0:ed:b6:45:df:ac:ae:bf:
09:6b:24:12:d8:cf:7a:55:7e:34:91:57:32:5e:d8:23:c8:c7:
d1:93:eb:7d:3e:86:95:80:b1:c9:8e:39:f3:1d:e6:2d:eb:12:
f3:dd:18:2e:b8:cd:1e:57:52:98:f7:e6:93:11:ee:ba:bf:8e:
a1:de:e3:03:24:40:27:83:cf:7e:f7:d6:45:de:a7:35:be:2c:
c8:64:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:47 2025 by rpki-client