Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: HJLeOEkKnR7NSEXI4tcAOi29Vrnymst4dqlQYvRHZqo=
Subject key identifier: 62:80:71:29:2C:DC:0F:46:18:86:AF:77:5A:5D:72:F2:B2:32:49:B8
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 0199FCFDA465090310353C4D75F537BFC6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:44 +0000
Manifest this update: Sun 19 Oct 2025 15:01:44 +0000
Manifest next update: Mon 20 Oct 2025 15:01:44 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: eU7DvMOyGcwbZEiEibmh8Codoz2HqN2McSdakDqXRRE=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a4:65:09:03:10:35:3c:4d:75:f5:37:bf:c6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Oct 19 15:01:44 2025 GMT
Not After : Oct 20 15:01:44 2025 GMT
Subject: CN=628071292cdc0f461886af775a5d72f2b23249b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:2e:88:50:37:0b:2c:30:ff:c1:c1:fa:a2:
d0:33:28:0c:64:14:51:f3:72:6f:f5:ea:60:fc:37:
35:90:be:da:15:4d:06:44:91:db:4b:43:b3:ce:da:
a1:5d:c0:a4:6d:c0:31:fa:67:1f:cb:e0:13:66:ce:
a4:85:c0:d4:50:c1:7f:4c:33:4d:95:80:cb:61:cd:
2e:4e:1b:60:0a:b0:05:37:1c:d0:95:71:70:9e:cb:
c8:d8:0a:71:62:17:17:47:d8:b0:eb:fa:11:f2:d1:
85:18:56:6f:34:d1:ca:8b:4a:e6:8f:3a:24:75:94:
3e:f3:29:d0:af:fe:c5:02:5f:5e:48:b3:a9:4b:21:
4d:fe:c5:92:dc:b0:1c:da:1d:55:92:27:da:fe:42:
8d:f3:fc:6f:c4:9e:fa:10:36:92:d9:76:29:57:27:
d1:d4:68:ee:55:9e:db:f5:8c:13:2d:ce:e6:7e:81:
06:15:18:11:70:8d:95:1b:e1:42:bf:1b:af:11:d7:
95:3a:cc:ce:e1:9a:29:55:09:d1:7c:c4:ff:2e:80:
48:8b:75:bd:91:a5:38:1a:88:a6:8b:b8:8b:c8:d0:
1c:9b:fc:62:f3:1b:d4:9a:45:c2:70:bf:33:b1:89:
ea:fa:b5:4e:aa:51:a0:69:32:ba:ad:ff:01:18:b1:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:71:29:2C:DC:0F:46:18:86:AF:77:5A:5D:72:F2:B2:32:49:B8
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:de:c2:2f:69:2a:79:64:6b:3f:c3:10:c3:76:13:d8:46:43:
44:c4:11:f4:6c:37:a6:1d:ce:78:13:10:f6:8b:e5:c3:5f:fe:
bc:16:62:c7:1b:d6:0d:f9:e6:0a:b9:e3:3e:8c:b2:52:41:6b:
2e:af:2e:fa:9d:fc:ae:96:76:0c:58:4e:48:49:5f:3a:85:cc:
12:60:01:a5:d5:bb:6a:c2:83:1f:a0:1f:e6:2c:4c:53:35:9e:
c3:f5:c8:7c:b5:8f:b4:85:59:dc:67:74:ff:e2:78:63:1c:90:
3b:ad:3f:0f:51:bc:d1:a9:3d:37:8d:02:08:5c:e2:1b:95:9f:
dd:fd:93:a4:cb:a3:e3:51:55:23:3c:93:e8:05:6e:69:f8:a2:
4b:56:ae:aa:22:b2:d7:92:2d:b7:3b:ff:dc:a8:21:09:30:6b:
94:44:36:e7:be:5b:71:dd:88:cf:38:df:5f:ea:8f:98:8b:a8:
5c:bc:46:d5:79:55:d1:e7:01:93:ba:fb:c3:a6:b3:8b:bb:f7:
11:1e:17:8f:76:ac:ce:d3:09:e1:d3:7a:f4:9e:37:e0:c1:0e:
f0:d5:b2:bf:29:30:ac:f8:b7:aa:ae:fa:6d:49:60:c5:70:f6:
80:dd:c5:5f:60:2a:0d:af:fb:9b:d5:bd:c7:15:85:c1:d3:85:
27:c9:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:50 2025 by rpki-client