Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: JQP7N6fXWhn1PppgjJIkD6ANWVIXWmt3wUIRKxb7EkM=
Subject key identifier: 99:EC:B8:92:2F:D3:D3:DC:04:0B:DB:5E:33:23:B6:DF:60:C5:E3:78
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 0199FBEA82A26BE23BDC98531C6032167515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: +WvdvjPgjGEr0u+dl+pIPpqlov8lZCuvtQSWH7Co+T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:82:a2:6b:e2:3b:dc:98:53:1c:60:32:16:75:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=99ecb8922fd3d3dc040bdb5e3323b6df60c5e378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:86:4d:38:64:2f:6f:b3:ca:d0:0b:c4:40:
3c:a4:98:4f:9c:a5:3a:04:4f:dd:f3:12:ec:ea:81:
cc:27:80:e1:12:62:5c:1f:eb:9d:e2:51:0d:e2:17:
12:e4:ce:c8:b1:b5:78:4d:09:a2:c3:b1:00:8f:24:
08:bb:7b:e3:b0:46:d7:61:08:b1:a1:8b:f5:03:9a:
93:42:e2:e4:26:ff:3f:18:f9:3f:33:e1:5f:17:e9:
f7:98:4d:26:1f:92:4f:5f:d4:a6:ae:69:cc:66:1d:
cc:e0:c4:a6:6e:6c:df:46:bf:f8:07:39:72:45:8a:
28:fb:2e:07:10:bb:17:9e:75:03:e1:bd:7f:06:31:
de:92:c4:b5:9c:34:ee:10:5a:4c:db:39:f2:1a:51:
d5:8e:ba:9e:ef:be:ad:30:ca:e3:03:86:26:87:b2:
d4:49:24:27:a0:7d:d7:6d:83:4c:74:ab:cf:5c:7f:
f0:8f:e2:e1:98:8e:d6:8f:29:de:d7:9e:b0:d8:29:
3d:b9:f1:b5:de:c3:2e:ad:e6:ff:ee:ef:9e:6b:60:
b1:8c:99:94:0f:6a:1b:8b:63:ef:01:e5:e5:7b:68:
37:cb:19:ee:f0:c2:b4:3b:d6:4f:e3:77:2b:c6:e3:
5d:a5:99:8e:ee:0d:bf:b9:4f:4b:0e:6f:76:f9:75:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:B8:92:2F:D3:D3:DC:04:0B:DB:5E:33:23:B6:DF:60:C5:E3:78
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:97:3e:af:d1:c6:57:e3:b0:53:16:56:c1:e5:9f:72:2e:b6:
d7:2a:cb:91:f5:f7:a7:57:2b:6e:2c:b8:7a:7d:b5:c8:8b:f6:
f8:03:8a:82:e9:82:d0:34:2c:32:2f:b9:e0:c9:da:5d:bb:2f:
30:ae:fe:aa:d9:1e:67:dc:86:88:bb:92:38:25:98:82:50:7f:
f6:81:74:58:48:7e:69:c1:fb:8c:eb:42:a4:8a:0f:75:43:5e:
c1:5d:76:9c:d2:d0:46:95:d7:d5:b5:21:90:a5:eb:32:19:7c:
f2:cb:96:9e:f5:64:ad:75:0a:55:14:e8:56:38:52:c8:b7:f2:
5d:52:2e:e5:72:41:a5:d3:e5:2f:b0:62:17:fc:f8:38:d7:9a:
c9:44:0f:92:72:de:cb:e2:fe:47:68:4f:78:65:ed:6c:88:cf:
f4:a6:3c:69:c0:86:f7:63:8d:08:ca:0f:77:d7:2d:83:e6:c4:
87:69:ed:1f:9a:4d:d6:ad:3e:0f:ca:85:80:e4:7d:a4:1d:bd:
01:36:19:de:10:94:3e:c9:2e:b0:f7:89:70:24:6d:45:d7:89:
16:cb:cf:59:b4:b2:03:1f:ca:94:90:47:39:ae:11:aa:b0:71:
fb:ab:06:fd:fd:f0:f9:f5:20:dd:9c:57:d5:65:79:9e:9a:1f:
08:27:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:33 2025 by rpki-client