Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier: yrCHs5z4U5ix22g+sVKATgLnA77tksRqFrul99Rj7YU=
Subject key identifier: FD:63:48:FD:60:1E:6F:2D:13:41:1A:87:E4:61:45:28:3B:F2:07:CC
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 0199FE10263E7A27A7174F6C370E5EE02993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number: 0D00
Signing time: Sun 19 Oct 2025 20:01:35 +0000
Manifest this update: Sun 19 Oct 2025 20:01:35 +0000
Manifest next update: Mon 20 Oct 2025 20:01:35 +0000
Files and hashes: 1: 9SHpbhL3XuwxiKnoCroL_5tpXVo.roa (hash: xPrIpxk+JNMXsVLk++89joWnIkf6ad6w3ouFrsF8d/w=)
2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: LsqscucmsDeeJp+aoNPdbiQ3ChiGMDKHch+utj4M9Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:26:3e:7a:27:a7:17:4f:6c:37:0e:5e:e0:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Oct 19 20:01:35 2025 GMT
Not After : Oct 20 20:01:35 2025 GMT
Subject: CN=fd6348fd601e6f2d13411a87e46145283bf207cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:04:fb:f3:51:fd:75:ce:06:1f:95:c0:cd:
58:c0:72:99:59:74:24:b6:8b:b3:fe:8b:44:79:3c:
03:5d:10:25:7f:1b:8e:b4:61:e4:e5:40:88:c4:c3:
ab:00:26:b5:64:b7:fb:43:f2:43:9c:66:a2:83:21:
0f:d0:cd:a4:1b:85:de:3d:f8:a9:72:62:64:f5:8b:
37:00:3a:c7:68:4e:10:96:23:fc:eb:79:53:28:d2:
46:11:91:e2:d4:b2:80:e3:2c:72:66:25:35:03:7f:
82:aa:7c:e4:6a:ff:db:75:5a:bb:a1:6d:26:b5:9e:
1b:ec:bd:0e:e7:5a:ca:a3:b2:6d:97:78:89:89:58:
1a:4a:b2:14:17:81:b1:d8:5e:ad:77:f1:09:fa:48:
15:b7:d6:27:13:b9:70:9a:94:9c:fb:f7:00:22:c4:
12:10:f6:3b:72:6a:4e:75:78:6a:5a:b1:da:90:f7:
dc:e0:1e:3f:f8:5b:0c:54:bd:ca:26:1e:7e:b1:93:
6f:63:8f:9f:d8:e1:ea:91:0a:03:86:ba:41:f4:89:
30:82:7f:75:ca:e6:77:b8:2b:35:dd:37:b6:90:25:
04:01:06:ba:ba:c7:9c:83:56:6d:1b:5a:32:3a:8c:
16:e8:29:63:35:f3:e0:71:2c:8d:ba:e1:84:99:a4:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:63:48:FD:60:1E:6F:2D:13:41:1A:87:E4:61:45:28:3B:F2:07:CC
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7e:db:6d:28:b2:d0:32:c7:82:a8:58:64:13:7c:29:de:e5:
b2:58:e2:c9:51:5a:c6:7e:1f:45:4c:f6:c5:c8:a8:a8:37:97:
94:52:22:48:c6:45:2b:ff:a6:71:63:f0:b4:46:dc:3b:62:d4:
8f:14:4d:0a:a0:eb:4b:11:0e:e9:d4:0a:7b:5c:f7:e6:21:db:
c3:fb:c7:e5:11:8e:ee:6d:ad:d2:9c:97:3d:33:d3:6f:e9:62:
eb:bd:41:ff:bf:00:6f:18:9f:e7:b3:93:de:1e:c8:4f:a5:4f:
81:fc:12:c6:9e:66:10:02:86:88:dc:b6:6a:18:68:7e:47:e4:
96:bc:26:0f:89:06:94:35:25:5d:bf:f2:ec:a0:df:00:88:ea:
9e:7b:63:4e:62:d9:3a:2e:97:8a:f6:b9:bb:c5:de:a7:51:cf:
4b:c9:bf:04:2d:ae:bc:92:bd:05:d4:8c:1a:a3:7a:2e:2d:03:
b8:85:cb:6f:d6:f2:63:c3:b9:ee:69:9c:5b:8e:de:c4:73:01:
59:3e:b1:99:ca:f4:e2:ab:76:f3:e7:c4:46:22:25:49:2d:18:
9b:51:18:47:1e:a7:58:5d:75:a2:05:1a:98:9b:33:b8:8e:b8:
1d:a3:d4:b1:27:0e:28:0f:24:db:70:5b:da:4d:93:57:98:b3:
06:7d:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:18 2025 by rpki-client