Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier: PJgmiXJjgjv7UTY8UtMEgqgb5I8RpwQIh7kqzhLC/Kk=
Subject key identifier: 29:5C:DA:1E:52:1A:AC:08:44:18:3E:1A:BA:7B:22:30:0E:BB:66:71
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial: 0199FD344879ACF2C1467697337838451E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: HJBw5RshHZ1fzLGHYX6+qiV3a5Sk6cZ7rznaraC1LW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:48:79:ac:f2:c1:46:76:97:33:78:38:45:1e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=295cda1e521aac0844183e1aba7b22300ebb6671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:5f:23:6c:98:e0:77:b3:a5:cc:91:c6:9a:
1d:59:2e:ba:88:cb:71:78:08:9c:b5:bf:60:8d:28:
3f:a6:8a:28:83:ab:11:9c:9d:10:a0:26:fd:9a:54:
cf:c8:a6:a9:f6:43:39:49:9d:f0:6c:b7:cb:ae:1d:
05:08:4b:94:78:4d:61:06:78:5c:71:4d:ef:d8:44:
d5:10:1a:f8:91:02:96:73:01:f2:13:6c:e7:6c:19:
49:86:65:32:46:6c:15:0f:f4:a3:d7:a0:dc:19:4d:
4e:99:40:2a:9c:cf:4f:27:7a:67:2c:e7:49:b4:de:
c0:c6:e8:f0:1e:e1:50:ee:72:fe:8a:da:b9:70:d1:
04:61:ee:81:6a:47:25:77:33:f7:a2:5e:95:88:71:
f9:98:c6:4a:16:b6:39:24:01:9e:ac:71:00:c4:0c:
d7:8c:b6:c4:d9:39:80:29:89:d3:9d:66:2d:31:57:
6a:c3:05:23:8b:16:f0:47:c5:90:e1:73:57:e2:d5:
e5:86:5e:e4:2b:6a:bf:7f:ad:33:56:f4:fe:0f:51:
1a:9c:2c:b6:8d:d2:0e:66:28:1d:86:56:d9:ab:6c:
5c:a3:cd:66:22:e5:92:de:59:60:16:a3:cd:6f:e4:
23:51:df:2f:5d:f1:07:11:d7:ad:5f:80:66:eb:7a:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:DA:1E:52:1A:AC:08:44:18:3E:1A:BA:7B:22:30:0E:BB:66:71
X509v3 Authority Key Identifier:
keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:09:16:18:c7:18:0c:52:c5:a7:e1:7f:9a:f2:f5:71:81:
24:59:02:f7:9b:45:d9:14:17:4f:66:ef:9f:40:b3:79:c4:28:
68:2d:72:f9:fb:72:b9:5f:ba:99:e8:4b:d7:76:03:2c:4e:0b:
5e:ae:ae:b5:bf:f9:ea:98:2e:78:70:fa:90:83:f7:5d:d3:a6:
bd:50:df:e8:dd:9c:db:4c:a6:53:9e:5c:43:9c:45:90:59:c5:
7b:5d:01:5d:2c:e3:4f:9e:20:ea:0a:74:11:91:45:08:ee:a1:
fe:94:c9:11:e3:bd:05:d0:0e:c5:9f:e0:6a:9a:7e:58:13:4d:
dc:7c:63:f4:56:f6:28:62:54:e1:23:95:6c:8b:57:7d:51:e6:
ac:e4:f8:f8:71:88:93:6c:4a:f8:fe:b8:6e:f8:a9:47:c2:57:
63:dc:50:5a:61:13:62:1c:59:8b:34:ac:99:74:2c:b7:7e:97:
dd:59:48:44:83:52:fd:e6:fb:dc:23:67:79:57:96:7e:54:e9:
de:9d:33:ec:32:c5:a2:91:0e:78:d7:ac:1c:d2:14:cf:eb:23:
45:1d:cd:bb:d0:32:47:bc:8b:01:bf:41:77:54:46:ea:42:ee:
7a:f7:df:84:7e:6c:79:54:03:19:83:08:c8:36:65:ee:76:49:
ab:64:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:01 2025 by rpki-client