Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: SR4xpE7DC8ofsf+UMIJ+vAKJ5vvqClDNVsgg0zaWvx8=
Subject key identifier: AC:C7:04:BE:D6:76:DC:D1:ED:98:1E:07:B4:46:24:4A:1D:21:EF:DA
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 0199FB457DED215448881310363823562529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:00:59 +0000
Manifest this update: Sun 19 Oct 2025 07:00:59 +0000
Manifest next update: Mon 20 Oct 2025 07:00:59 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: P/HZLMMw02SkaQsdyWKisFMp/7zsIoDg9IdKEBnwRG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:7d:ed:21:54:48:88:13:10:36:38:23:56:25:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Oct 19 07:00:59 2025 GMT
Not After : Oct 20 07:00:59 2025 GMT
Subject: CN=acc704bed676dcd1ed981e07b446244a1d21efda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:e0:90:5b:07:51:67:1a:a4:f0:d0:36:a5:
f8:56:c1:49:67:d4:fa:b0:6b:1d:2f:cd:b4:56:54:
bb:9b:ed:8b:6c:57:57:76:ed:0a:3c:ae:c4:ea:41:
91:c9:11:30:f3:e7:29:45:bb:de:52:92:99:cf:be:
e3:27:bc:4e:bf:64:2f:77:4b:71:45:8e:4b:e9:ee:
9b:38:d0:4b:f7:ed:f6:1f:89:d9:3e:ec:d1:45:38:
cb:ac:17:7a:e0:89:c7:e2:81:99:b4:4d:1a:c4:5f:
f2:4e:33:dc:93:5a:52:ad:9c:c4:df:21:79:de:d1:
54:33:98:15:b2:b9:27:ba:2d:4a:25:e7:6a:b6:92:
b2:e7:81:aa:93:c6:67:c6:60:bd:0e:fa:45:fa:2c:
f5:de:c0:00:82:ac:00:31:d3:b2:7d:18:31:7b:1e:
48:63:2e:54:67:ec:5d:51:de:37:5d:49:99:44:00:
e9:e8:26:02:c3:58:8e:35:f2:0e:2f:19:f6:b8:61:
72:ff:ad:d7:44:e5:e9:df:17:0e:5b:d6:8c:c5:9e:
a0:37:55:2b:e5:ad:91:6b:ba:6c:0f:72:0c:1b:f9:
df:1b:3c:3d:7f:50:59:c4:c3:97:ab:c3:a5:f6:86:
6a:6d:16:83:74:14:f8:cb:d6:23:9a:1a:6c:87:bf:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:04:BE:D6:76:DC:D1:ED:98:1E:07:B4:46:24:4A:1D:21:EF:DA
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:85:c5:60:29:0a:f3:59:7e:19:0d:ac:59:8b:c3:14:a9:83:
7b:52:d0:31:27:b2:45:e0:5a:43:1f:b9:45:01:72:dd:fd:32:
26:8f:3e:db:48:68:91:0d:52:49:b0:79:94:eb:b0:fe:0f:18:
ef:50:40:cb:3a:35:78:ad:d4:86:4d:6f:84:17:b1:8b:14:f1:
08:e7:f8:b5:ba:3f:fc:49:b5:11:e0:08:e2:51:43:68:d2:43:
8a:80:75:9c:f9:cc:48:ca:93:0e:a4:81:cc:a9:5e:a0:c9:99:
bd:51:28:2f:b8:c2:4a:19:04:a7:04:0c:16:11:d3:9d:0a:af:
b5:8d:3c:78:3b:a5:03:61:c5:1f:20:d5:dc:fa:ec:d3:08:fa:
61:e5:52:04:3d:c1:2e:ff:32:da:38:bb:0f:c7:81:7d:b9:0e:
49:8a:c3:ca:0b:19:6c:56:15:f0:36:1f:08:33:c3:85:9e:df:
b5:db:fc:a0:4e:dc:b7:f5:65:a9:06:83:f7:e8:88:d1:d3:42:
62:05:fb:a9:ee:59:bb:7a:75:c9:ed:98:68:34:5b:85:4e:19:
89:e1:de:42:68:e2:c4:6c:91:dd:e7:b1:a4:03:03:e5:1e:3f:
78:f3:0a:9a:10:91:b9:9f:58:6b:e2:8d:a8:aa:e2:52:ba:40:
2e:40:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:18 2025 by rpki-client