Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier: +x79eE7RnfBTgDvc9vMU6kuSiPsmPEhs5I8R5YrQcNE=
Subject key identifier: 9E:1B:F1:E9:57:6F:EE:04:B5:76:97:30:46:9D:BE:04:3A:ED:16:8C
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 019A01115865E92AF3D648AA974D54021333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number: 1809
Signing time: Mon 20 Oct 2025 10:01:45 +0000
Manifest this update: Mon 20 Oct 2025 10:01:45 +0000
Manifest next update: Tue 21 Oct 2025 10:01:45 +0000
Files and hashes: 1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: fdj6xwMe8VkHKvsbDhGk1y+kw0OQb2jYW5WdVURf9As=)
2: KjLlUbsy5OhkLv0qFbrgPhCDVXc.roa (hash: Y7RFJziGNZvZmqC0fcM/IrDDZFezUSlFPJ8Z47Y2wSc=)
3: ir7-RH8I6LOM7faVYPUvWtPtBkc.roa (hash: c3S12HvLqchLUsT4f7tqk56b2aJYvGDiRT3Sw4rhzw0=)
4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:58:65:e9:2a:f3:d6:48:aa:97:4d:54:02:13:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Oct 20 10:01:45 2025 GMT
Not After : Oct 21 10:01:45 2025 GMT
Subject: CN=9e1bf1e9576fee04b5769730469dbe043aed168c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:2a:c0:75:ff:8e:74:cb:7e:45:ec:96:c0:
89:5c:83:10:fd:26:ee:ce:09:5e:31:46:b1:5c:10:
dd:b5:cd:11:c7:8c:e9:71:9f:2e:4e:e7:f9:90:b2:
eb:0d:86:24:77:75:f2:09:64:e8:b5:13:bd:d7:6f:
d4:40:e1:54:0d:fb:63:c9:0b:b0:2b:14:88:0b:65:
61:a1:4f:3d:3a:76:95:5e:fd:00:9c:19:70:ac:a1:
02:3e:e1:91:20:fa:2f:01:59:7b:31:b8:8f:bd:57:
a1:90:8c:ab:35:ec:9b:c2:f8:50:dd:0a:37:98:0d:
49:45:38:27:d3:12:81:0b:aa:0d:2b:bb:9e:1f:bf:
1d:98:db:d7:c0:c8:0e:50:aa:57:e6:f4:a3:eb:a0:
9a:99:e8:f4:fa:b6:ad:77:c8:fa:f3:aa:8b:5d:22:
c9:35:ca:55:db:0e:73:28:6e:4e:46:32:18:c6:40:
52:97:09:6c:cb:f2:9e:f8:f3:05:cd:ea:0e:c7:72:
cf:b3:8c:bb:ee:c0:3c:6c:6a:4c:7e:1b:04:71:37:
7c:bf:8e:e1:84:9d:e9:82:59:a6:92:e4:fc:18:c8:
20:77:a9:81:cc:73:31:09:e5:f3:a1:1e:9c:68:fc:
6c:5f:01:a9:cb:13:65:cf:af:a1:04:09:b9:54:ec:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:F1:E9:57:6F:EE:04:B5:76:97:30:46:9D:BE:04:3A:ED:16:8C
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c4:42:2f:a7:8b:c6:ad:5d:52:dc:1c:77:24:e6:94:04:f5:
e1:06:b7:9a:be:f4:83:b5:6e:95:de:7a:45:42:41:36:48:90:
c0:7d:1c:52:ad:72:ef:73:dc:f2:61:01:f7:e6:83:e7:57:ba:
1e:95:a3:b8:e2:2b:73:51:73:74:b5:6a:d3:f1:ca:aa:17:6c:
3d:86:28:9b:f9:a1:b8:a7:1a:b0:09:4a:9a:4a:71:d3:3f:d8:
3a:c7:3f:ba:16:a4:35:68:ee:ab:e1:79:07:21:d0:8b:55:6a:
22:06:2d:4a:42:c2:f3:4e:43:62:a7:ca:a7:02:7a:33:c4:1f:
07:0d:f6:b9:ad:3e:cb:78:2f:14:39:cd:5c:9f:86:d0:b8:97:
4d:3b:bc:b8:5e:68:db:c8:a2:41:58:a9:da:6f:27:03:2d:fc:
8a:29:65:8b:f5:b8:a4:0a:b3:38:85:17:35:1b:0e:f7:87:27:
7a:da:85:83:0a:2a:5d:77:4a:d3:17:01:8a:d1:53:c5:bf:4f:
7d:6c:f0:c4:dc:ad:a0:1f:d4:bd:8c:94:7b:a6:03:7b:cc:8d:
12:03:15:19:25:a6:1e:71:d8:0a:48:d7:f9:bd:d1:40:65:78:
01:a0:12:4f:55:56:6f:d7:63:dc:17:92:0c:db:05:36:11:e6:
8d:f2:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:32 2025 by rpki-client