Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier: /JHsaz1hL8UM6olfH4rMoeRZNmBlCpsj0sfiZtHZzJg=
Subject key identifier: DB:0C:57:CA:5E:CD:86:AA:71:99:A1:8A:9B:AF:46:10:B3:98:82:28
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 019A0147D225B1D43C091F4DE3D4E80E75B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number: 15E5
Signing time: Mon 20 Oct 2025 11:01:15 +0000
Manifest this update: Mon 20 Oct 2025 11:01:15 +0000
Manifest next update: Tue 21 Oct 2025 11:01:15 +0000
Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: LruX6gf4ldy6Zg8Cp4JtsHZ0xqSHdLcFRwNfxqwwiYk=)
2: d2hoUpvor7BPW8nmpz4xnZjE2u4.roa (hash: hIY/GtYHLCsuos0GvnTm5ot49GmbZ9W7yYzcGZgrlOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:d2:25:b1:d4:3c:09:1f:4d:e3:d4:e8:0e:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: Oct 20 11:01:15 2025 GMT
Not After : Oct 21 11:01:15 2025 GMT
Subject: CN=db0c57ca5ecd86aa7199a18a9baf4610b3988228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:d7:c9:3d:99:89:9e:49:8d:34:b1:5c:05:
75:ee:c2:ef:7d:e6:83:00:e5:cd:b6:33:e9:6d:41:
bf:ad:5b:35:e9:50:f4:18:7f:bc:65:2d:65:02:5d:
d5:ad:d9:b6:47:21:7c:5e:3f:42:9f:3c:81:47:40:
ff:f3:a0:bb:ca:40:a4:40:f3:3e:2e:05:75:d0:ec:
97:02:36:80:98:1d:1b:bc:ad:a4:75:cf:c3:a3:39:
62:1d:b5:6f:58:b5:70:53:c5:30:63:ae:4b:5d:ce:
aa:84:fd:d9:a6:f6:23:8a:61:4d:cc:64:3b:15:b2:
7d:9c:cf:3e:00:4a:48:f7:f0:86:5d:cf:1b:e7:91:
68:1f:7e:7f:69:05:52:28:33:a7:46:86:eb:cc:de:
c2:8f:5c:9b:18:14:10:3a:0e:e6:55:35:81:41:d7:
93:01:4b:10:62:6a:63:3d:d5:74:ff:d1:dc:9a:65:
a5:fe:1f:f0:05:27:0b:9a:ee:06:bc:68:30:32:4c:
3b:a9:78:c1:51:90:ea:06:ae:5a:8a:90:6d:8f:85:
07:cd:13:53:cc:b8:6a:fe:f4:18:fe:18:21:22:2c:
bf:e5:fa:cc:a5:01:9c:8a:23:ef:9c:90:8d:af:0e:
61:fd:73:6c:b0:eb:c6:2a:a1:ad:e9:7d:4c:74:9f:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0C:57:CA:5E:CD:86:AA:71:99:A1:8A:9B:AF:46:10:B3:98:82:28
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:62:cb:be:e1:fc:0b:21:3f:fe:61:44:8d:1b:41:5d:46:70:
11:5d:15:68:a5:40:95:7b:bd:3b:05:52:0a:41:99:11:dc:b6:
66:84:c2:d3:14:b7:41:d4:20:56:3f:29:50:3c:0d:04:41:bb:
e2:fe:88:0a:01:45:8f:37:27:f2:cf:a4:ce:ca:9b:40:12:cb:
c8:44:ea:97:a9:50:81:ba:2c:18:7b:2c:e0:7a:14:11:47:6a:
8f:23:1a:cf:b9:61:81:0a:79:04:06:3f:76:ea:d6:5c:79:18:
a0:64:24:e0:aa:25:95:c8:3a:e1:38:df:40:17:bf:79:96:90:
29:68:04:24:c4:b3:06:2b:8f:8a:05:1e:42:4f:4e:52:05:0a:
8e:42:f6:c0:fe:85:84:45:48:40:f4:2a:aa:81:21:2c:b1:2c:
b6:6c:ce:cc:1a:fb:1c:6b:11:62:cd:e1:02:62:0e:c1:10:e5:
ae:e9:21:2a:b0:24:95:64:cc:b6:80:56:5e:c6:de:01:58:98:
17:f8:af:38:2e:19:2f:96:78:91:32:58:b6:5b:ee:3a:99:7d:
d1:37:8d:9b:77:0e:a2:eb:a3:23:8f:10:2e:07:ea:b0:41:21:
4e:08:fb:8b:7e:af:7e:55:91:e9:4c:22:ed:14:43:3f:0e:59:
c3:bc:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:51 2025 by rpki-client