
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: DErROxDRfxRs8NEhq6XwJetDcXktIQB9ZSwz50BCUeE=
Subject key identifier: 84:32:23:B2:6A:22:29:B2:04:DF:A4:62:61:A6:E7:00:11:1B:4D:B7
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 0199FBEB493B138C444078EF55D678E887B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: MtAbfvsHf+lGVZ4Vvi2xYcAPF3RSbEuOrw/O+ZTxVyc=)
2: N4NsUcZuS_9XiBDgAfw6eryV7HU.roa (hash: tpgeA/zfOVEAg9H115FFWM358l26uFQNlABFRgvWlU4=)
3: yV4dNy3NsBZVUNWCmHTLsnrsaLM.roa (hash: HeRl5vH7gTSirrF3z1irtqiGbkDXqM3OvljtYndKLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:49:3b:13:8c:44:40:78:ef:55:d6:78:e8:87:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=843223b26a2229b204dfa46261a6e700111b4db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:74:3a:6d:2e:04:c7:ab:70:4b:e9:35:ac:
be:ef:0d:fd:05:9d:e9:50:4b:80:92:f1:4e:80:e0:
49:f9:d4:42:89:d1:58:78:cb:aa:4a:c6:21:24:c8:
3f:89:20:0d:6b:21:80:f8:14:d3:8f:3d:ce:89:0b:
7e:a8:3d:7b:6e:f0:3d:60:d0:0a:a4:8f:35:b1:c0:
40:9d:ce:06:43:fd:7e:a5:7c:14:11:d2:53:05:c6:
88:5a:40:23:98:05:86:b7:1c:2d:75:5a:77:3f:9f:
71:d9:d2:93:30:be:98:bd:5c:fd:9f:86:d6:74:72:
85:37:26:ca:27:3f:91:c6:1f:8d:0e:82:96:54:5d:
78:04:8f:20:2f:26:1f:6d:30:f3:40:5d:e9:a4:d1:
b5:8e:fc:22:74:67:db:55:4d:1b:84:b5:ce:93:12:
80:1d:23:1e:0b:a8:d1:a0:22:ec:d5:cd:19:b8:87:
4f:0f:0a:df:21:d7:66:42:ee:3b:0d:4f:76:2d:4e:
2d:18:ac:30:54:e5:7b:8a:f8:e8:06:81:89:50:24:
29:b9:fa:22:e2:55:14:89:e3:dd:79:70:f3:b4:a3:
ed:42:ae:4b:30:20:9d:2a:f9:a3:80:42:19:9b:3b:
9f:4b:3f:40:b2:e2:13:5c:25:4c:80:15:c8:83:49:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:23:B2:6A:22:29:B2:04:DF:A4:62:61:A6:E7:00:11:1B:4D:B7
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:ca:b6:a1:e8:cc:df:15:ed:a6:68:59:7a:64:b3:cb:10:
32:b0:73:30:e2:23:58:17:aa:ff:2f:cf:7d:d5:d9:75:d8:b8:
ad:05:37:25:2d:cf:f6:04:08:8b:6c:dc:7a:a8:9d:41:53:2e:
e0:ca:d0:e7:51:a7:12:02:dc:ba:e1:e5:e9:28:d6:07:7d:78:
7e:db:73:87:49:fb:5d:e1:25:24:69:11:48:b6:70:c8:22:ca:
60:8c:03:39:1d:4a:70:ea:fb:98:4c:96:a0:e2:cc:62:16:9f:
b1:73:9f:01:f8:1a:a4:72:2c:37:6e:27:08:46:2f:9e:62:6c:
2e:55:cb:57:6d:ff:01:ab:0a:04:ee:dc:2b:dd:90:c0:59:1a:
93:44:48:f2:6b:53:90:36:d3:2c:68:26:e6:e6:98:c0:0d:4d:
20:99:ef:07:51:ac:60:d1:32:ff:af:03:d8:82:f3:91:66:56:
28:26:e1:bd:b1:2a:62:e3:c2:cc:cd:6d:1f:c3:72:3d:15:4b:
b2:e7:42:c1:11:11:86:aa:5d:e7:dd:01:42:47:b4:0b:f7:09:
ce:3a:e9:7e:56:18:36:e8:06:4f:06:53:2a:0b:12:40:94:ff:
a7:7c:fc:ae:a2:ad:ca:de:fa:d6:03:40:6f:a9:79:2e:de:98:
05:ef:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:09 2025 by rpki-client