Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: ncEJINHNodwmoH8O3H22hg0EWYLB4mdvWrMaTISoC8Y=
Subject key identifier: 6C:A2:1A:0C:DA:3B:76:D1:98:D5:D0:06:DB:CD:AB:A7:11:C9:99:6A
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 0199FDDA25210CC7A177EC58DC3276D33946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:35 +0000
Manifest this update: Sun 19 Oct 2025 19:02:35 +0000
Manifest next update: Mon 20 Oct 2025 19:02:35 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: vtpdkr5jZevUepIvHPj1Duvq8y+/8uCbI8ASo6y7k8Y=)
2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:25:21:0c:c7:a1:77:ec:58:dc:32:76:d3:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Oct 19 19:02:35 2025 GMT
Not After : Oct 20 19:02:35 2025 GMT
Subject: CN=6ca21a0cda3b76d198d5d006dbcdaba711c9996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:84:4f:91:49:fd:53:3a:87:f8:32:52:95:
7b:47:67:52:e7:1d:5a:93:5e:6d:31:18:56:35:b7:
35:63:15:06:6c:25:45:e6:61:67:7e:eb:2f:2c:c3:
c3:ea:f7:76:75:4b:c1:39:c9:40:3b:7b:fd:2f:e2:
a8:d3:42:4e:f7:e9:c2:78:a4:6d:4b:98:d3:1f:b4:
07:33:09:5e:08:28:a7:f2:01:15:57:93:06:57:f5:
ce:cc:65:c4:ed:d6:4b:8f:6e:0d:04:a8:f7:c2:a4:
6a:17:fa:16:48:bb:ba:09:94:82:0a:2f:f8:72:e4:
62:e3:d5:c5:eb:9a:99:f6:af:3a:7a:ee:fa:05:5a:
88:47:03:fc:0f:6d:9f:75:dc:38:89:bb:95:1b:e8:
fb:18:1f:77:03:e1:31:db:f3:f9:8a:fe:22:21:5b:
00:90:2a:80:b8:eb:af:df:f0:b9:84:f3:90:8e:48:
c9:18:64:1b:80:db:56:e1:67:4d:39:13:d1:ac:e2:
80:b3:1b:a2:8c:ed:6b:3a:1e:03:9d:4b:bb:3e:4f:
37:02:a4:49:fd:53:99:d5:a9:60:b8:3c:9a:93:d5:
ac:6a:34:01:ae:17:d9:fd:44:b4:0f:d0:66:85:00:
3d:4e:3f:e1:c8:fb:36:a3:32:87:ef:b7:e1:8b:b7:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:1A:0C:DA:3B:76:D1:98:D5:D0:06:DB:CD:AB:A7:11:C9:99:6A
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c4:0f:23:a6:7f:5d:30:e6:70:c5:a1:a5:47:eb:86:dd:c8:
7b:3b:27:d7:da:ae:d8:a4:1d:29:3e:b5:0c:18:73:a4:51:0d:
10:6c:9e:27:ef:70:ea:ac:dd:39:e2:a5:67:25:ed:df:fe:08:
a7:d1:98:bf:22:be:21:de:ca:9f:b3:d2:18:df:e9:e4:53:de:
49:4f:fd:9f:e6:dd:4b:30:45:00:85:b7:e9:a9:6a:b4:c6:6d:
91:98:db:db:e3:96:af:91:36:2f:2e:23:cb:9a:8a:f1:69:6e:
55:16:e0:fa:3a:1e:a3:f2:f7:8d:82:b2:9d:ad:6f:2c:e0:41:
4a:d0:75:1b:aa:f4:fb:74:e4:bb:b8:25:cb:a1:5c:42:2f:46:
e6:bb:64:2e:7b:05:c0:0a:0f:93:81:2d:7a:cd:0a:9c:b9:92:
c7:ff:81:5f:59:c3:d3:f4:f6:00:f3:96:62:c3:d5:d0:19:c8:
80:77:4f:60:29:a5:4d:cf:6b:35:b7:26:68:c6:aa:1b:6e:a7:
25:e6:ae:05:a6:79:b0:a2:c2:6a:6e:56:0d:1d:59:1c:b0:11:
1c:70:b0:ad:20:21:48:f1:62:29:f9:28:e0:e5:1c:c7:9e:cc:
9c:22:d8:06:f4:06:6e:28:03:f2:af:66:30:80:c5:14:3b:18:
d9:95:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:20 2025 by rpki-client