Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
File: 8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json)
Hash identifier: 985vf4TB8EaJCWmUifj1c1Yz8GbUvZ6riZuPXKYO+m4=
Subject key identifier: 97:E0:4A:F6:6F:E3:5A:E7:74:0D:D4:5A:66:31:47:43:1A:AB:8B:2A
Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
Certificate issuer: /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Certificate serial: 0199FC8F46EED5A5F26A1CCE2A248C0A3E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
Manifest number: 047F
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: wr8lcv+ChATevZLuf+fxhybDCrf+QZLlY3fkCVRJDkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:46:ee:d5:a5:f2:6a:1c:ce:2a:24:8c:0a:3e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=97e04af66fe35ae7740dd45a663147431aab8b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:85:c7:65:5e:c9:2d:34:e9:38:32:81:82:
4d:c7:f6:ad:43:10:92:c8:22:c4:fb:f9:80:17:7d:
82:7a:61:42:b1:bd:a2:47:31:fb:26:a1:12:62:2a:
ec:e6:65:94:73:ee:7b:31:96:fe:6b:bb:18:07:6a:
d4:63:50:9e:8b:7b:1c:ad:91:22:71:21:cd:0f:ec:
72:28:28:d6:a3:4a:9a:e7:ee:18:86:f8:b3:fc:2b:
af:a6:7b:85:6d:d2:35:9d:bc:1d:dd:0b:d4:14:ff:
2a:f0:41:58:55:6c:a3:0b:4d:8b:aa:c1:93:07:3d:
08:39:8d:f0:13:dd:c0:02:ff:40:7d:6b:99:9f:2b:
e5:6c:f9:64:d1:ec:f6:af:b7:35:43:a3:5d:b7:39:
dc:3a:8b:cb:89:8f:c4:eb:c8:6a:c0:0b:5f:27:29:
80:a1:8e:4d:1b:48:ae:1c:d0:24:bb:e2:79:35:a4:
6d:43:36:0b:aa:47:af:4c:94:b1:cf:da:31:52:df:
c5:88:49:5e:14:3e:e4:1a:d1:51:bc:5a:ec:9d:85:
5f:fb:08:f5:d2:a9:fd:56:77:48:08:8c:d1:f3:59:
0a:ea:45:61:03:02:d4:d6:79:66:c7:77:a1:45:6d:
0d:46:c6:f8:25:34:ff:71:ad:78:43:15:4c:fe:ef:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E0:4A:F6:6F:E3:5A:E7:74:0D:D4:5A:66:31:47:43:1A:AB:8B:2A
X509v3 Authority Key Identifier:
keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:73:6b:6b:8c:d0:29:ec:b9:a8:fd:2f:3a:68:c3:d1:86:76:
0e:6e:0e:03:59:01:4f:79:12:a2:55:1e:8c:dd:f8:fa:25:bf:
b4:4d:92:d9:b0:cd:79:e7:d4:ca:5c:01:00:4f:8f:49:64:d6:
bc:b1:d4:0c:cf:5c:7e:cb:4a:1c:e4:af:07:4d:82:85:84:55:
15:29:8b:fa:6e:7f:67:9e:51:c7:71:a9:9a:74:5f:5c:0f:ef:
7f:76:01:ab:45:d9:49:a7:d5:1a:52:5c:4d:cb:e3:2f:f8:e3:
89:0a:33:db:34:e7:f4:45:d8:06:11:df:a9:de:24:7d:2c:75:
c5:a6:6e:98:a7:fc:bc:d0:d3:52:4f:85:84:77:30:0d:b0:2d:
e9:45:51:c0:61:8e:67:94:56:10:93:8f:70:50:5f:a0:3b:9c:
74:7c:11:64:bf:3e:8f:5d:ec:cb:6f:33:e5:14:89:2a:2a:aa:
36:ab:f3:8c:ae:89:d8:26:50:3e:ef:d6:6c:7b:da:c0:11:84:
85:0f:d3:8e:b4:eb:e4:bc:93:2c:7a:94:38:23:f0:af:b1:dc:
0b:fd:d6:da:8a:58:65:48:2e:ab:4e:84:5c:25:2d:85:49:55:
e7:07:4d:de:fb:a8:38:59:28:77:2a:e6:6f:a0:57:8f:01:48:
c6:99:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:16 2025 by rpki-client