Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: B76P2jquTzxHqS4KgTAjlya1HDB/Ag55XHc5Ck+Vpdw=
Subject key identifier: B5:84:BF:6F:45:D5:16:EC:18:76:16:A7:36:63:64:71:E8:20:F4:1D
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 0199FD3439C50EA756D30AD7B89F90FF30C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: uCug/o1he0IPJWZTCCzDISfKfaf6g46gzDHqk0cmjDo=)
2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:39:c5:0e:a7:56:d3:0a:d7:b8:9f:90:ff:30:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=b584bf6f45d516ec187616a736636471e820f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:39:fb:58:ee:ce:dc:ab:33:95:b9:b0:2b:
46:de:cf:f9:28:84:3e:a0:50:20:eb:6d:b4:f9:25:
86:61:fa:17:a9:de:4c:29:6e:73:2a:de:bf:5b:70:
db:12:2c:29:2e:2f:05:a6:d1:a8:85:21:73:b8:88:
63:17:88:9f:17:16:c6:e2:df:0d:db:24:83:13:83:
58:60:80:98:f6:b2:f2:ce:07:ce:0c:22:f6:22:30:
18:e3:ac:96:ba:fd:fa:0a:8b:51:33:65:9f:0a:37:
1e:79:32:cd:c8:df:31:58:96:e7:18:b0:7c:75:81:
5c:86:06:63:1c:d9:72:8b:71:13:2b:e6:1d:b1:f4:
1d:89:e0:1a:6d:35:45:a9:8d:c4:ee:b9:1c:a5:9d:
bb:17:25:b1:b1:00:fc:e1:b5:2a:3f:54:c6:30:b2:
7b:4e:83:21:c9:84:2c:51:d6:57:25:16:8b:34:7b:
86:32:29:31:31:47:a6:2d:d5:d6:f4:c4:06:fe:80:
9b:1a:96:4a:5b:c2:e5:a0:b0:b6:bb:5f:aa:ff:1e:
93:f9:70:3a:a7:71:06:2c:0d:b5:6f:de:85:61:62:
b3:63:f8:8c:b8:08:cc:0b:7c:a2:48:bf:31:f3:22:
91:91:91:28:f0:5a:b2:2f:ab:2b:6c:5e:a0:2a:cb:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:BF:6F:45:D5:16:EC:18:76:16:A7:36:63:64:71:E8:20:F4:1D
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c5:26:f7:8e:cc:b7:2e:9a:27:73:8e:f0:81:fd:4b:d6:d9:
21:7f:80:6d:37:78:27:a6:b8:a4:c9:b2:3c:4f:22:be:cf:33:
99:72:e0:2c:14:93:58:7b:e9:ce:6f:f7:9a:51:a6:67:90:7c:
94:d2:f8:44:0d:d6:61:f5:66:ef:c5:d8:0e:1b:e1:23:04:7c:
2b:95:62:54:98:0c:87:98:61:75:d6:01:29:33:c5:0e:1d:30:
9b:4e:c3:45:8a:c5:44:c7:39:ba:8a:e9:93:d6:a2:19:8d:f3:
28:4f:72:c8:c4:39:5e:7a:24:c8:6f:db:a2:59:ac:cd:50:6f:
62:c1:2f:f5:d2:0c:a2:7b:ef:0c:cb:4a:81:bd:7d:e2:05:00:
9c:40:f8:89:dd:54:12:9c:5b:5b:19:2c:d6:8d:7e:5f:d7:6e:
5e:2d:fb:7b:36:3c:d9:43:8a:c2:66:9f:65:47:cd:40:57:2a:
9f:6b:8f:13:20:56:92:45:e0:b9:5d:b8:8e:88:f8:1f:49:51:
86:3e:a2:61:cb:ae:b6:5b:52:79:16:05:3d:34:07:8f:d4:4a:
e0:05:d6:7f:0c:47:70:49:23:4c:f3:10:22:c7:72:ce:65:ef:
78:9d:57:9b:8e:e3:d5:7d:9d:db:10:35:23:83:32:00:4b:4f:
b6:fa:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:14 2025 by rpki-client