Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: 1jXrCx2jREiOTVZqjQ6LhPfrc8tOreqDm+Xrsl1VSZI=
Subject key identifier: B4:E5:F7:E1:76:6B:51:61:9B:19:CA:42:F8:91:56:A1:CD:FE:D7:90
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 0199FE103170EF900960D18FE202E772FB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:38 +0000
Manifest this update: Sun 19 Oct 2025 20:01:38 +0000
Manifest next update: Mon 20 Oct 2025 20:01:38 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: kc+cRY+g5hcwbqNfSBZo4Re06NicbLZ0PVZmP/wwfNQ=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:31:70:ef:90:09:60:d1:8f:e2:02:e7:72:fb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Oct 19 20:01:38 2025 GMT
Not After : Oct 20 20:01:38 2025 GMT
Subject: CN=b4e5f7e1766b51619b19ca42f89156a1cdfed790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:f3:37:40:94:7c:d2:3f:fd:a7:fb:a8:f8:
90:b9:34:46:ff:e4:cc:89:bf:90:1e:21:18:9a:33:
01:0a:27:2c:23:f9:ac:26:a8:6b:e0:a5:f7:fa:29:
ec:b2:f8:17:b4:94:78:89:c1:14:31:95:51:96:2b:
9a:c7:10:65:7b:28:c8:ef:3d:ae:48:84:2f:71:23:
f2:d1:47:10:7b:4a:7c:d0:19:2b:25:5a:03:af:e0:
b3:ab:0c:ea:f4:48:79:66:08:73:52:07:0d:98:ca:
fc:90:4d:8f:88:87:a4:12:e9:ed:3b:c6:bf:8a:82:
99:c1:74:3d:ed:a2:17:ff:fa:8b:88:62:6c:95:c5:
c3:0f:d8:8f:dd:78:09:9d:9a:c6:6c:c6:46:93:f7:
24:a7:12:9c:e5:51:21:52:6d:82:f0:43:5e:91:93:
d5:25:99:d7:74:79:c6:fa:8b:c8:a5:ac:aa:d9:b4:
f0:d4:49:ae:77:23:2f:cf:f2:41:5e:26:8e:9e:5a:
6a:25:bb:2d:a9:87:fd:37:d6:20:8b:ef:cf:a8:56:
e0:41:5e:7f:a7:1f:f9:54:93:d4:92:b9:2a:90:d9:
5f:da:16:23:c9:ab:c6:5f:f6:4a:56:f6:a6:19:d7:
60:04:53:5d:68:c7:9a:f0:66:9b:84:34:fb:e5:a0:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:F7:E1:76:6B:51:61:9B:19:CA:42:F8:91:56:A1:CD:FE:D7:90
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:73:f7:25:86:10:a9:e8:c7:b6:43:09:71:f5:39:7b:24:4f:
b0:af:82:15:5c:59:18:c8:3d:59:25:a6:b2:73:cd:53:ef:34:
d8:a6:5e:15:ae:6e:0f:e4:b5:f4:66:be:fd:e6:6b:70:c7:74:
db:2a:7b:5d:61:73:12:84:53:3e:03:63:7f:43:a4:75:0a:05:
3a:1c:f0:dc:82:e8:de:c5:e9:61:e9:88:fe:0d:b4:62:0f:1a:
58:ab:43:d0:3d:43:a1:40:a9:78:62:4e:c2:6e:62:fc:a4:5a:
25:ba:de:22:ed:bb:9f:33:fb:26:0b:48:75:d1:fe:2f:b0:33:
71:d9:db:22:09:9e:48:bc:7a:02:df:82:c5:61:4f:4e:d4:5b:
e8:ac:3c:40:2d:42:4f:c2:ea:32:83:1d:07:3d:bf:7a:1c:28:
24:39:65:3e:a6:e9:69:e7:5b:b1:37:bd:72:47:17:d4:a0:28:
f7:b9:30:17:0a:41:ad:f8:58:59:18:b7:f1:e6:e4:ba:b5:8a:
9a:8c:e8:9c:5f:ed:64:ae:48:75:ea:b9:98:7b:cf:31:d6:4d:
18:64:f3:85:64:76:4d:9e:55:99:37:9e:4a:bc:b2:b6:4c:db:
d4:24:36:62:7c:27:84:b8:ce:f1:d2:14:7d:70:a9:d3:c7:62:
61:bf:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:51 2025 by rpki-client