Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: uPzSDBwL1AndYAV+MDSVeSBaeggAmig6bHHJ+K3mH3M=
Subject key identifier: 40:84:CF:5A:8F:E7:17:2D:63:90:B2:CF:00:BC:8D:77:0B:45:AF:02
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 0199FCC6989E4C9952D06BA5FBD51D291F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: d2fNYBisnoTRi2FvDbl+R9VxP9keoGAv1Y3Jhgrx7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:98:9e:4c:99:52:d0:6b:a5:fb:d5:1d:29:1f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=4084cf5a8fe7172d6390b2cf00bc8d770b45af02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:02:59:1d:96:68:da:90:94:89:2f:88:f4:
26:8f:7a:74:db:91:70:fd:7b:d6:17:0f:73:93:da:
1f:16:89:61:84:83:43:dc:54:1e:4b:08:1e:89:93:
73:f7:e9:b3:ab:a5:1c:55:5d:9c:42:39:8f:2e:83:
d9:f6:1e:35:f0:52:cb:00:2d:99:49:68:5b:ec:be:
69:b0:5a:0b:79:21:02:bf:76:bf:dc:5c:76:a5:4f:
03:fb:4d:0e:cb:47:58:0a:99:9d:e1:b1:66:79:1f:
69:f1:ff:23:33:31:42:ad:b2:e7:7d:4a:6e:07:a7:
ab:78:9f:38:89:b6:94:ac:ca:83:9e:70:a8:85:c5:
75:33:f8:67:81:7f:ca:34:e8:fe:a0:40:c5:83:52:
3d:95:0e:7a:16:f2:13:b4:45:d3:b0:a0:b7:bf:ba:
30:75:43:ff:81:f3:15:4c:59:f7:f6:d5:10:7e:0c:
d6:94:09:93:1d:7e:44:71:47:ba:da:25:35:35:05:
d3:60:76:fd:dd:d7:4c:89:6f:6b:8f:32:54:3d:99:
c8:c8:c0:4a:0f:2a:83:da:00:ff:2d:d6:f8:b1:2a:
3e:a8:9c:39:4d:89:db:47:01:f9:4a:60:0b:46:4a:
4c:9f:16:54:7e:20:8b:8b:72:83:3f:02:f6:13:de:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:CF:5A:8F:E7:17:2D:63:90:B2:CF:00:BC:8D:77:0B:45:AF:02
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0a:ad:cd:66:e3:d6:56:24:a2:ec:77:37:f8:41:01:4a:6a:
e5:54:2a:a0:c0:29:a7:a9:97:27:42:ce:95:d3:7e:ad:36:f6:
0f:f8:e9:94:35:6d:8a:e7:bf:ef:ae:c0:9d:28:2b:83:f6:cb:
45:bb:42:a6:4a:86:f7:cb:a1:bb:9d:1d:f5:97:e8:cf:6d:40:
09:60:19:be:71:92:47:03:da:07:a4:5a:eb:11:ce:1f:3e:59:
13:1a:d6:8b:4b:b6:05:5e:03:d8:8c:90:14:6c:55:5c:93:1c:
22:74:cf:48:34:10:6b:e1:62:06:e2:8a:3c:69:c4:17:b2:ee:
00:1e:e3:e5:2a:11:ba:1f:a9:65:e2:29:86:44:93:c0:4e:ea:
45:a8:ae:c4:dc:df:fa:50:66:e4:2b:04:d6:95:07:83:f9:b7:
a5:d2:1c:df:a9:fc:06:9c:bd:76:b2:28:94:23:c6:df:bb:a3:
3e:27:90:a7:c8:7a:32:f5:02:3f:d8:23:46:b8:b6:0f:d0:98:
62:7b:c4:7b:68:d8:2c:b9:f0:5b:8a:9b:0b:c8:1a:0c:23:3b:
a9:d8:40:57:15:19:84:b5:95:36:78:47:79:ac:b9:f9:70:c1:
56:bc:76:86:1b:f6:49:21:00:62:db:94:7b:81:89:1d:2c:3f:
c7:88:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:28 2025 by rpki-client