Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: YfCt9WQKY/4XRmM8K5RGrLVKQu9dnBa32Eu2h+DQP4Y=
Subject key identifier: 01:8F:10:15:28:C6:7B:81:09:A1:D1:B8:EB:AC:29:4D:70:F6:33:4A
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 0199FBEB3C61A74AF689588D67A943B93FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: wfPnOzEKeNclqUWNAxsqIg0FK+Ib63SC7uP1jpqbfFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3c:61:a7:4a:f6:89:58:8d:67:a9:43:b9:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=018f101528c67b8109a1d1b8ebac294d70f6334a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:14:ab:11:3c:07:8e:76:a1:40:fb:c4:12:3e:
5f:30:69:f3:a2:12:91:aa:83:4e:c6:79:ac:fb:f2:
1e:13:a0:99:c8:83:8b:96:75:a3:54:b3:45:07:f4:
ec:50:a2:ed:cf:1e:20:b8:46:9d:15:b0:19:ec:11:
53:2f:1d:e7:bc:4e:a3:2d:a0:dd:0f:69:ae:13:f8:
47:94:74:fb:ba:e2:af:5d:f3:de:20:e9:b2:b8:64:
7b:09:47:06:e4:b7:54:c3:80:7b:60:da:82:55:0d:
a8:05:da:96:06:a5:a0:55:66:5b:a6:7d:d8:f5:3e:
e7:9b:1b:59:55:fa:c9:f7:c4:25:15:b3:3a:d6:6d:
c4:04:72:9c:51:c1:2a:18:a0:99:c8:b8:23:73:5a:
0c:bf:d4:55:ae:9f:a4:1c:ed:01:19:88:a0:b7:79:
57:1d:d8:ae:97:6d:9f:35:33:58:d5:32:3c:bf:9e:
ca:65:d1:19:cb:43:2a:3f:54:23:dd:e0:3f:30:60:
39:c0:3f:87:d7:5d:66:f8:b4:1f:ac:1d:ae:fc:39:
a7:51:2c:97:1a:87:21:78:15:1a:2d:ca:aa:92:37:
20:46:66:50:22:1d:43:ac:c8:1c:47:f0:9d:4f:c0:
19:b9:6d:ac:20:a6:8d:16:9d:24:a3:4c:1a:73:23:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8F:10:15:28:C6:7B:81:09:A1:D1:B8:EB:AC:29:4D:70:F6:33:4A
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:89:94:2e:73:80:bf:b6:b5:a1:4f:31:63:4b:61:bc:2c:b7:
de:c6:8f:e7:80:00:a3:32:03:df:48:61:af:e0:74:5b:e3:d4:
90:23:d1:b9:bc:97:95:35:60:15:69:1a:91:98:ef:23:e1:8d:
01:f6:78:56:68:df:92:8e:57:21:24:14:84:fd:4d:1e:bd:cb:
99:38:4c:bc:ce:0c:13:26:37:75:81:c1:43:cc:ef:0a:7b:fe:
d1:09:d3:7f:51:5d:e6:05:61:20:89:56:08:f0:4c:20:c5:f5:
16:d0:3c:b4:d0:0a:80:ee:f5:f5:97:5e:11:bf:0d:fb:20:87:
18:32:2b:c1:cc:8d:5c:83:f7:c7:f8:fa:ff:fe:dd:f4:b1:b6:
4c:1b:6c:6a:df:ed:f7:9b:9e:02:20:ae:46:51:dd:58:d7:ad:
d8:fc:ff:65:af:52:a7:0f:21:cc:20:9f:db:bb:d0:05:09:19:
cf:fa:f4:48:ef:51:af:f9:d8:5f:5f:28:21:c0:c5:e0:03:c4:
bd:88:53:0d:f4:ea:02:63:d2:28:22:76:58:29:b1:c1:9d:78:
41:05:e1:85:09:1e:e4:44:12:60:a4:7f:01:94:e5:8c:36:ce:
85:49:ce:9d:ac:41:31:46:67:07:fd:51:2f:ee:53:23:b2:99:
43:21:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:01 2025 by rpki-client