Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: LbP0rUa6O/HjeV591sHVwUpzee3M55UwTKYMuuwYRCY=
Subject key identifier: 8E:2D:BF:F6:D2:76:19:01:32:86:AD:87:9E:A2:7C:87:83:1D:3A:F9
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 0199FDD9AE3736EA820A2740566D3EF80A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:05 +0000
Manifest this update: Sun 19 Oct 2025 19:02:05 +0000
Manifest next update: Mon 20 Oct 2025 19:02:05 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: ezBBlWo+8XmqoxhppARpVOaeLywqw7MX+ohu2qpRicc=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ae:37:36:ea:82:0a:27:40:56:6d:3e:f8:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Oct 19 19:02:05 2025 GMT
Not After : Oct 20 19:02:05 2025 GMT
Subject: CN=8e2dbff6d27619013286ad879ea27c87831d3af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:7f:af:93:a1:02:c6:de:44:a3:9b:fd:85:
60:f9:2a:75:22:ce:d0:7c:b7:ec:d6:51:96:da:0f:
77:c8:c7:59:f3:b7:dc:8d:59:fa:ca:5f:a8:99:b1:
71:7c:9d:84:09:e2:27:8a:ec:7f:af:a0:be:d7:dc:
20:bb:bf:b0:ae:ce:f8:a1:c8:f8:5f:7b:1a:63:5a:
fb:8a:9f:11:16:07:11:0f:f0:6f:41:bf:db:7a:25:
f1:43:b9:f3:cc:0c:91:a4:9d:34:81:04:b0:d7:36:
dc:38:78:4b:42:db:81:cb:57:ab:ef:7e:8a:d5:1f:
d0:96:67:13:96:96:6b:5f:76:1f:c4:94:10:2a:30:
48:41:86:97:da:25:39:8e:fd:8a:03:05:73:92:6f:
86:43:41:9f:19:92:ac:87:97:5e:0c:0d:03:4e:d4:
70:3c:b8:4f:6c:c2:6c:5c:83:79:2e:0d:b6:d6:58:
7a:f7:45:69:cd:ba:7f:82:2c:08:56:63:2f:85:cc:
6b:b7:c4:ce:a2:0a:34:e5:9a:80:5b:01:af:76:0e:
3d:0a:06:2c:42:b3:37:84:60:fb:24:9d:bd:49:c9:
2f:b9:60:29:2e:53:18:93:6b:33:b4:18:10:a5:ce:
d6:85:14:64:fb:fc:19:35:46:c7:9b:0d:c6:52:e9:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2D:BF:F6:D2:76:19:01:32:86:AD:87:9E:A2:7C:87:83:1D:3A:F9
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:82:d1:e1:e8:e2:b6:87:1d:11:cb:b6:72:97:71:fe:86:
20:d1:fa:41:64:e1:b5:47:4e:38:fc:00:d3:a9:02:4c:62:a3:
4e:a9:f5:9a:5e:1d:98:36:c6:72:ba:ca:58:0f:77:45:44:6b:
47:62:57:5c:1c:c5:08:4b:8b:11:26:58:b6:07:24:d7:4b:0a:
cd:41:9a:2c:c2:7a:9c:f4:25:91:d9:39:ad:6c:c3:97:bc:32:
a6:a4:0a:a9:96:a9:b7:8b:d6:8b:e4:b7:48:ab:58:16:1e:99:
a6:8f:b1:50:23:d5:59:ca:98:68:c0:1c:ea:60:59:f2:8f:be:
4a:d7:ec:04:9d:4f:d5:2f:68:61:c1:31:82:20:bb:17:95:b9:
74:8d:73:5e:f7:1e:f2:0e:de:ed:82:59:f8:40:f7:fd:fa:2a:
1f:14:a2:6f:d8:a9:36:c4:ad:1f:3b:f9:6a:0d:1a:94:b0:e0:
b9:bc:6b:0b:25:b6:53:a9:2e:b4:3c:d7:7b:da:27:7b:81:5b:
2f:ad:53:ba:c6:8d:0e:c6:c2:14:83:68:49:c1:a6:9a:7f:80:
81:1d:56:2c:5d:3f:c1:9b:81:65:78:f0:a2:48:ae:fc:01:0b:
f8:ce:20:3d:ff:27:55:7b:79:f3:3b:2d:45:9c:df:17:d5:bf:
60:f0:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:07 2025 by rpki-client