
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json)
Hash identifier: FseIumKU/DOZ2Hmg1cvKMOHQKblYR5L48oox3ZqjPJU=
Subject key identifier: AA:E3:30:EB:A1:D6:0C:8E:0F:4B:29:C6:A2:5A:56:25:5B:E3:28:B5
Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426
Certificate serial: 0199FBEBDC41D69FB809481EA0A52D8E56D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
Manifest number: 01F3
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: FhtAmj338gMTH0kkgfC8e5jgA/6RbueIrYipv0nIU98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dc:41:d6:9f:b8:09:48:1e:a0:a5:2d:8e:56:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=aae330eba1d60c8e0f4b29c6a25a56255be328b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:dd:d9:c7:a5:da:15:ad:98:7c:1a:77:ff:
7c:3d:d4:9e:16:94:c1:32:44:38:3e:35:03:ec:b5:
51:23:b1:93:29:f0:37:0a:f4:99:cd:54:c8:bf:32:
3a:f5:80:bd:2b:d5:f6:06:04:17:68:4c:75:5e:b2:
ee:7f:81:ec:a3:9f:4a:35:b5:a4:fb:01:f0:ab:ac:
85:6e:c9:64:61:58:72:ee:56:88:23:4a:c2:4f:97:
b1:97:f1:37:e4:97:e7:63:1d:72:b5:c9:a4:97:3e:
91:3b:92:31:9b:6b:9a:29:6e:bb:bc:97:35:bc:35:
47:2e:6d:0b:5e:4c:54:24:a6:76:83:2a:bc:ea:1a:
c9:7a:68:1d:91:23:64:10:89:a0:d8:58:db:2d:30:
b2:c6:90:ca:8c:c1:99:72:17:ae:41:1c:63:ed:ac:
60:0c:cf:eb:a5:14:78:64:f4:89:49:50:cb:79:e1:
21:33:cb:cb:bc:fd:09:6a:4f:b2:e5:b0:c9:50:d9:
a7:9f:7c:cc:92:d1:13:e7:d2:9b:e9:63:4c:4e:06:
e2:dd:8a:a6:4c:69:c7:a9:ae:fa:79:fb:76:c6:8d:
c5:16:bc:a6:89:51:ea:da:75:a8:1d:7b:c7:25:de:
30:c5:34:eb:b8:39:f8:d3:74:64:c0:64:ed:d7:04:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:30:EB:A1:D6:0C:8E:0F:4B:29:C6:A2:5A:56:25:5B:E3:28:B5
X509v3 Authority Key Identifier:
keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:31:a5:48:72:c3:93:21:88:f9:f3:68:eb:58:63:5f:4c:bc:
4f:10:72:fd:95:6f:b9:fd:f3:59:c8:94:a4:70:d4:51:9c:b3:
b6:06:24:8e:02:c5:c7:45:cb:9a:08:2e:4c:d0:39:c9:96:31:
a2:8f:46:93:f9:5a:c4:c8:ba:21:4b:66:c2:74:57:07:43:a9:
74:fa:fe:7a:28:e7:3a:6b:8e:12:f6:88:a0:2a:ff:b9:49:f5:
05:2d:4a:54:5e:75:7b:ff:51:91:ab:f2:5d:14:b1:9e:18:f9:
89:f1:96:f2:0f:32:ce:1f:4d:c0:01:31:3a:4b:99:aa:be:ce:
37:6d:79:d1:0d:30:77:a0:bb:3d:5d:37:d9:75:a1:b0:60:c3:
a1:33:47:39:f9:4c:5e:d9:7a:88:d8:f1:a9:9d:56:21:9b:bf:
db:a8:9c:72:ed:e0:f0:dc:dd:00:b2:24:27:88:bd:a0:fa:6d:
eb:cd:29:fe:8d:24:f9:47:c4:cc:57:20:ba:aa:11:ca:cb:98:
f3:e6:93:d1:35:83:47:7c:3c:48:35:de:75:5b:91:57:fa:b0:
d8:82:d8:bd:ff:90:2e:af:a6:2f:32:08:42:5c:ae:15:75:66:
db:f7:62:fe:72:82:88:55:8f:42:b6:05:42:fb:6e:df:c1:4d:
b3:dd:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:33 2025 by rpki-client