Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: +qedYFID9kXTlokhhTtwr4a+ja8crmUgPvXmZUq7LYQ=
Subject key identifier: BA:75:54:68:CD:08:CA:2E:D8:9A:B2:F4:F1:F3:37:00:BC:B7:E2:23
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 0199FD6AF3837C4D6CB543D5CF245621180A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: WeREIjm0fmkX1sjg0gmrN5+B6U+vGDmVYVnRoW8p7h0=)
2: yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa (hash: LgnuacZQDPP2J60/EcJiQNzEwvS+wm94uYSyH+Ocir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f3:83:7c:4d:6c:b5:43:d5:cf:24:56:21:18:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=ba755468cd08ca2ed89ab2f4f1f33700bcb7e223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:dc:12:d4:aa:b9:bf:63:22:4a:83:5d:1c:
4e:ab:1e:e7:37:17:9b:ce:39:3e:8b:86:da:fe:72:
76:6e:4d:14:76:4e:de:30:fd:9d:16:a6:f5:75:32:
e2:b4:64:e3:fa:3f:cd:24:4d:ba:ba:d4:a6:0e:f9:
8f:5f:c7:88:0d:87:5e:ba:36:a2:7c:97:25:6a:f9:
f0:37:74:f5:ed:1d:9f:74:5d:d6:71:71:d1:df:ad:
12:f4:44:fa:1b:6e:aa:69:8e:0c:b6:54:b7:59:96:
b3:c2:ad:20:d7:2b:b5:38:bd:5b:1f:14:89:ad:fd:
03:9f:9e:f9:05:4e:c8:29:ad:62:2b:37:31:5e:d2:
fb:99:2d:2a:6d:39:a5:cc:4a:5f:1f:71:1d:a7:fb:
a4:e9:86:03:78:c0:24:55:38:f5:da:d3:65:6d:be:
12:bb:ed:b2:84:02:04:ef:c6:a4:a7:a6:17:48:01:
33:3c:c7:17:0d:51:14:5a:fd:41:15:bd:86:51:a8:
d4:bf:1f:6e:1d:df:fa:c6:73:c2:05:75:6c:32:e1:
87:bb:c3:a8:b5:7c:60:45:e1:b6:56:b0:8d:dd:43:
c5:cf:95:cf:f2:b1:e9:8e:82:ac:a5:1b:26:94:fc:
19:0b:94:db:9d:61:f5:ab:dd:08:7c:7b:31:a1:c9:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:75:54:68:CD:08:CA:2E:D8:9A:B2:F4:F1:F3:37:00:BC:B7:E2:23
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:78:58:5f:d3:23:51:27:9b:f5:58:42:6b:1d:95:0b:b6:c8:
7a:76:8c:e4:5a:00:fc:39:4c:c8:90:32:5b:fe:73:fc:78:08:
c3:e3:ba:49:c3:0c:e3:73:79:79:65:b5:47:55:57:96:ed:51:
be:33:08:0a:48:40:2c:ad:21:49:c5:8a:84:a9:d7:44:df:6d:
4d:f3:b3:4e:7d:9a:ad:c3:17:f5:48:5b:7d:1a:0f:51:8e:67:
a3:55:9d:63:6f:f0:d7:a6:2d:fb:4a:b8:f1:6c:a4:60:dd:ee:
43:74:3c:ac:a6:4a:67:c6:69:b7:b7:e6:bf:d1:4a:cf:78:8a:
6e:9e:23:e8:f4:7f:17:c3:d0:99:17:15:b9:5b:2c:7e:60:d3:
2c:b3:e7:45:25:be:26:de:94:b5:57:27:14:3a:4d:d6:79:ae:
19:91:b6:16:bd:80:7e:12:36:10:9b:f3:fe:a9:13:53:e9:48:
c7:e5:89:80:82:f5:04:0f:51:33:b0:a6:3e:cc:c6:46:48:42:
7e:f1:f1:04:15:e0:4f:f9:d0:e6:5e:56:a2:9b:3a:e2:af:be:
c8:67:7d:cc:16:e7:bf:65:ae:31:57:3c:fc:98:91:8a:39:1a:
0e:23:68:e2:5c:c8:0d:22:a3:53:91:24:15:6b:77:5d:32:21:
55:da:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:08 2025 by rpki-client