Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: sjUOcF0xO9XArYA0efWYAu81d+Ia90ABioK0TBMFLNc=
Subject key identifier: A1:6C:EF:42:6F:A0:21:56:69:12:07:8A:89:81:65:84:1C:46:CD:92
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 0199FB45C60D2ACAA66BAA98E455DBEFE859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 1163
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: +ZWQLo3WtgNiN7jfg/YSrTtfJw9XSSTPyJAnxlSuvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c6:0d:2a:ca:a6:6b:aa:98:e4:55:db:ef:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=a16cef426fa021566912078a898165841c46cd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:42:01:75:de:0d:e2:17:d2:24:4f:92:60:
5a:85:76:42:5f:5e:63:70:ac:59:95:df:c0:d6:f3:
9c:42:94:2d:9e:ac:c9:58:16:5d:5d:ec:e6:5a:41:
3a:c3:7b:fb:4f:48:fd:73:08:d1:6a:f0:a9:a3:da:
a1:ee:c4:f6:ad:1a:94:b6:37:f3:4d:21:c8:dd:24:
81:13:aa:b8:94:0f:6a:1c:a8:a1:bf:c5:8b:55:f4:
37:4f:23:03:e9:52:0b:dd:a4:86:80:19:66:6f:0a:
ab:3a:7d:c3:da:f1:ef:67:af:fe:67:b8:41:e6:5e:
f3:e8:c9:f2:ed:8c:6f:e6:3e:fd:02:af:d2:35:6e:
57:30:b0:7d:99:7c:ad:ba:d5:12:38:e5:cb:44:76:
be:2e:13:97:5c:91:0f:99:21:2b:a8:95:f3:c1:e8:
d0:b1:6c:08:a9:dd:91:d1:76:a5:43:98:d3:f8:fc:
15:d7:32:3c:17:64:7b:08:f8:77:2a:ce:0c:82:e2:
e6:37:14:bf:5f:ad:fc:23:ab:c6:3f:5b:78:5c:68:
a5:bf:e2:49:05:d3:10:20:0a:bc:cf:69:b1:8e:4c:
90:38:b7:a7:aa:16:cf:3e:44:b7:98:25:fd:1c:d0:
03:e3:ef:67:9b:c8:b7:6f:00:51:0c:b5:aa:38:5a:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6C:EF:42:6F:A0:21:56:69:12:07:8A:89:81:65:84:1C:46:CD:92
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3b:c4:33:08:a4:79:c1:b3:04:f2:00:da:c0:bd:f9:a5:4e:
32:20:70:21:6e:99:b5:5c:98:cc:d3:56:75:21:cd:47:0a:28:
98:da:b8:9d:2b:d3:7c:34:67:25:e9:82:76:a5:9c:aa:4c:bd:
7a:66:16:de:6b:d6:b8:fb:9c:42:d0:ef:0f:b9:35:0f:88:99:
23:1d:ff:1b:3c:62:43:f8:25:25:04:04:72:01:d5:5d:a2:bb:
d7:ab:6b:19:a7:3a:96:21:a9:17:bc:2a:52:e5:0f:7d:bc:ea:
b9:14:3c:19:f1:3e:95:7d:ca:b8:56:9c:9d:cb:b3:8e:b6:8c:
20:9b:20:1e:67:50:aa:e6:ac:9a:ff:39:2e:7a:d6:e8:97:64:
85:01:b4:b3:96:50:54:06:78:20:c4:f7:e8:52:77:b9:79:05:
b5:34:88:6a:44:d8:0b:29:39:43:7a:8a:67:e7:2f:10:0a:14:
bc:5a:11:f6:90:2b:ac:4e:9e:da:d5:d1:ed:1b:d9:81:c2:36:
39:3a:c4:35:2b:63:97:bb:c6:24:3c:b0:18:8d:88:56:29:91:
49:a6:85:18:71:f9:a9:89:2d:36:49:1e:8f:c3:9c:e8:f5:24:
c6:c5:1f:3e:5b:23:24:49:0a:3b:f1:00:06:dc:cc:b1:03:4f:
d8:22:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:15 2025 by rpki-client