Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: D/J6Go0FQGwIyfwBFHpcN2gTOujBQEmLfVWSefeux74=
Subject key identifier: 21:95:DC:2F:D7:20:74:02:69:02:C8:A8:1A:6C:0C:99:1A:D9:82:73
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 0199FE46B60AACB9F16D0CF46A200EC118AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 116B
Signing time: Sun 19 Oct 2025 21:01:10 +0000
Manifest this update: Sun 19 Oct 2025 21:01:10 +0000
Manifest next update: Mon 20 Oct 2025 21:01:10 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: 33t/kZFzzNhKxFWDmISYVhshhN4S1LgY0HIou16bXFA=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b6:0a:ac:b9:f1:6d:0c:f4:6a:20:0e:c1:18:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Oct 19 21:01:10 2025 GMT
Not After : Oct 20 21:01:10 2025 GMT
Subject: CN=2195dc2fd72074026902c8a81a6c0c991ad98273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:de:aa:5f:61:4b:e5:89:dd:d9:78:95:cd:34:
43:1e:32:4c:77:bc:a6:a0:55:5d:ed:24:c7:57:02:
58:4d:7b:a9:1a:3d:dc:fc:ee:89:37:05:ef:b7:94:
43:c3:ef:0f:db:ee:65:5e:16:e3:9a:6b:09:c1:36:
6c:45:01:ad:3f:1c:d7:20:db:94:89:d6:9c:72:34:
cf:4b:a3:cb:43:cf:68:32:4b:c7:89:a8:28:20:a8:
d5:33:c6:e5:3f:ca:e4:d0:cb:86:97:8e:ab:f6:8a:
c8:41:e0:a4:a7:3c:85:54:18:a9:48:95:7e:6e:43:
f6:9a:87:3d:60:02:35:a1:b7:ef:bd:f7:48:d8:4a:
44:f2:ea:e8:3f:6a:a4:61:f4:c6:9d:cd:dc:39:da:
bf:95:5e:4c:91:b1:0d:b9:5d:a2:b2:c1:7f:f5:73:
23:19:24:fd:0c:ac:19:2d:b5:cb:ed:24:45:f1:5b:
e5:1f:ac:a5:49:1d:a1:e6:5c:48:a1:d0:fe:33:df:
a3:2f:f9:59:27:97:10:ac:b5:54:9a:b8:45:ec:f5:
0a:d5:dd:a5:63:64:66:03:4a:4c:73:25:d2:4e:9f:
d1:ce:17:1e:4d:15:05:dc:95:1f:68:a2:fa:df:d7:
2c:33:9c:d5:38:b2:db:f2:bd:33:42:87:76:44:7a:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:DC:2F:D7:20:74:02:69:02:C8:A8:1A:6C:0C:99:1A:D9:82:73
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:c5:4b:32:f8:e9:f5:ba:cc:85:28:a1:8b:bd:f2:38:01:
3e:fb:61:f1:87:c2:f2:b8:0e:c0:a8:d9:cb:9c:09:c4:4e:31:
0e:6c:51:52:0f:8f:d4:0e:a8:e5:68:12:c9:ac:b1:1a:32:e3:
40:9d:d5:b5:e7:d6:b2:a7:f8:3c:bf:a1:a1:85:25:d5:11:2e:
63:25:5c:e6:9f:f9:66:e0:df:84:95:53:86:a3:3f:a6:20:04:
03:30:65:7f:ef:bc:c7:61:84:36:2d:f7:22:e1:a6:4a:a2:6c:
48:b8:63:95:39:e9:60:50:e2:e8:66:c5:67:06:99:68:36:b4:
a6:bf:6d:3a:7b:00:f5:da:20:4c:ad:b6:50:40:3a:15:99:c8:
2a:1d:09:c8:bf:18:6f:11:e1:08:9d:8e:3c:d3:b7:02:eb:3e:
f2:a6:db:a0:11:6d:2a:fa:a2:3e:1d:df:a1:d1:2b:76:1c:d2:
12:b7:bf:c2:0d:29:f7:e6:69:70:30:b1:52:b3:8d:38:9d:b2:
39:af:8d:73:62:8a:16:68:f9:5a:8e:8a:5d:e7:92:5d:3c:c6:
64:52:a1:c7:dc:3f:b8:48:e6:8b:55:4c:54:4a:81:27:27:30:
b8:f9:59:23:d2:af:42:8d:6e:65:2e:cf:29:f0:ec:33:35:1d:
0c:30:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:51 2025 by rpki-client