Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: pRkEJalfFoWnVfUTbtGW0bUTuCPWjb/r3mPlIJgK6BI=
Subject key identifier: FF:73:D6:D3:F1:83:80:D3:C0:3D:35:D6:CA:32:A5:3F:84:C7:F8:1D
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 0199FC21B3F27D7F8D9FE0931265D81E3DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 15CC
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: jKpESOkgyMz12dAOt8AXPVHLbhFGkbnL4jgVdosqkHU=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b3:f2:7d:7f:8d:9f:e0:93:12:65:d8:1e:3d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=ff73d6d3f18380d3c03d35d6ca32a53f84c7f81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:11:bf:42:91:09:44:e4:2b:5f:9d:80:8b:
3b:c9:80:0e:28:ec:bf:7b:5c:a1:0f:9d:45:7f:0d:
0d:d6:72:0e:7c:fb:15:e3:6f:a7:44:8c:c7:8e:07:
70:92:75:bc:c7:c1:bf:41:57:b7:36:c8:ae:1a:73:
4b:e1:63:72:5f:f7:bd:32:61:84:22:63:6a:1f:39:
92:23:59:ec:9a:25:d3:bd:12:93:4d:e8:08:0f:37:
ca:b1:5d:96:27:a0:df:48:dc:e0:70:8b:3c:1b:ee:
b2:34:fa:9a:5b:43:9f:1f:14:68:2a:f8:d1:14:63:
e0:7a:df:c6:92:41:58:65:45:49:cc:a9:13:b9:a7:
bb:37:9c:2c:26:58:1c:7e:ae:ea:bc:c0:82:cf:77:
7c:69:13:6d:dc:f8:28:46:3a:7f:e2:6e:5e:44:4e:
bd:28:03:25:30:92:b7:6c:d8:02:eb:62:63:c9:4d:
97:d8:79:00:85:88:c6:85:be:c1:39:ad:4c:3d:d4:
d0:eb:e0:c7:61:65:2f:30:6e:51:82:64:a8:53:4c:
b8:32:f8:05:78:8a:47:4a:26:6d:00:7e:89:e7:1e:
e8:c4:ef:44:54:1f:4e:f9:b8:6c:b5:60:74:b2:1d:
b0:21:d2:24:89:c9:a7:36:d0:05:a1:fc:05:48:22:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:D6:D3:F1:83:80:D3:C0:3D:35:D6:CA:32:A5:3F:84:C7:F8:1D
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a6:7e:fb:d3:b1:10:ac:3b:68:4d:aa:64:fb:37:67:b6:32:
9f:e5:36:76:cb:92:b6:b8:70:d2:32:4f:b2:b7:48:a3:db:7c:
d1:1f:36:5e:78:35:08:b9:41:20:00:87:8e:89:82:a1:0b:e8:
04:48:c5:f5:bf:2e:8f:1e:e9:23:cc:3a:49:2f:cb:a2:d3:79:
a9:07:15:cf:32:69:a6:d1:ba:eb:fd:ac:a7:a1:d4:57:c1:9e:
02:3c:51:d0:56:a7:06:3c:fb:f2:c0:d1:67:d5:01:5b:77:7a:
e5:ea:aa:73:86:e9:78:24:89:55:f4:c0:61:6b:41:ca:0e:6f:
0d:75:74:17:1d:e0:e5:b2:de:59:28:de:7f:c1:29:c2:60:31:
38:80:29:36:96:a0:1a:04:8d:66:ac:dc:26:30:c2:ef:8d:ed:
65:cf:29:b2:93:79:30:39:1b:c9:76:25:52:76:5b:50:fd:84:
44:bd:32:94:01:66:b0:e4:2d:3f:bf:7d:ae:54:29:38:41:d3:
dd:b6:37:0e:7e:41:c5:3a:9f:eb:a3:d4:f6:64:0f:1e:fd:d6:
2e:17:75:b0:95:50:ca:5e:c5:f4:40:b8:7d:bc:d3:14:87:63:
6f:a4:41:ac:f8:f9:ff:bf:90:45:55:16:f0:9c:53:21:04:56:
16:bd:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:09 2025 by rpki-client