Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: ncAMcAmxoigOZPngFpEAdWrPxXZZL9OYCpHor/++ktg=
Subject key identifier: A6:57:CE:61:DB:C1:34:53:32:9E:C1:07:18:44:24:BB:81:FC:AA:B6
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019A059338B060CB9BF76A072FC29A1103E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0866
Signing time: Tue 21 Oct 2025 07:02:05 +0000
Manifest this update: Tue 21 Oct 2025 07:02:05 +0000
Manifest next update: Wed 22 Oct 2025 07:02:05 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: 6jTiXfQPEu09rMkvnwClb52g4Oab9AjB19DrqwxIFUY=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:93:38:b0:60:cb:9b:f7:6a:07:2f:c2:9a:11:03:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Oct 21 07:02:05 2025 GMT
Not After : Oct 22 07:02:05 2025 GMT
Subject: CN=a657ce61dbc13453329ec107184424bb81fcaab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:21:7b:c5:57:74:b3:af:44:c0:5d:4a:a2:
f7:78:21:80:cd:17:8f:2c:6a:b6:e4:1e:2d:95:e3:
b1:15:54:af:62:be:5e:68:c4:6f:0a:ae:bc:23:0f:
b3:a4:82:fe:1f:08:64:c4:b0:cb:ba:8a:6d:c0:14:
18:81:e1:51:56:19:41:67:b4:fb:b1:34:fc:74:3c:
06:14:67:d8:3b:24:7f:c3:ad:b9:5e:1a:c2:78:0f:
91:23:8d:b3:8f:72:4a:dc:dc:94:f0:e8:e7:41:7f:
af:14:a1:21:5e:c3:04:61:39:d3:01:75:cb:d3:a9:
66:3f:8d:1e:72:39:ba:b5:98:16:44:09:c7:1a:db:
7b:3c:83:f6:69:cf:02:dd:f0:c8:6a:70:ca:91:12:
f5:ac:a7:91:27:7c:fa:9e:f0:fb:5b:ce:07:8b:5c:
7c:8e:41:24:df:04:f5:59:e9:8f:28:57:f9:fd:4a:
a5:63:00:0f:11:6b:85:76:28:c0:72:3f:64:fe:18:
24:f6:e7:e5:ce:13:29:d6:4b:61:dd:d8:8b:2e:6b:
64:2f:cf:6e:22:fb:f5:f8:0d:e0:36:b1:c2:b1:6d:
6f:a5:24:86:d6:6f:4a:28:f5:e8:6d:9d:5b:2c:0c:
d6:de:91:c4:ae:c6:8e:86:94:f1:9c:1f:0a:12:24:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:57:CE:61:DB:C1:34:53:32:9E:C1:07:18:44:24:BB:81:FC:AA:B6
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:21:64:52:0d:9b:99:bc:6b:b5:65:d5:f5:bc:dc:2a:82:52:
e4:80:6f:0d:2f:4c:5e:95:f8:2b:1e:ba:31:0c:3b:eb:ac:af:
6d:0b:8c:c7:ab:67:1b:d8:7c:01:3b:bb:5b:55:fd:cc:3f:f7:
d8:46:f7:f6:69:f1:b5:fa:3f:77:fa:67:09:8e:e0:ad:7b:fe:
29:aa:f5:9c:54:88:16:f2:e1:8e:22:9d:50:f0:7d:2c:ca:2f:
85:cd:6b:eb:9c:5c:3f:4a:4b:28:f9:ba:be:9f:0e:74:23:63:
86:86:68:ed:0f:16:f5:f4:92:71:6e:12:22:5f:bd:e7:a7:ba:
01:6c:d7:84:09:d4:82:79:00:ca:3b:35:0c:20:b4:6c:48:f8:
27:dc:f1:21:59:35:80:1e:d2:fe:d9:29:3c:d1:af:e0:95:1a:
01:ef:aa:d3:4e:47:2e:3f:fe:21:00:3d:d5:78:6e:bb:76:7e:
50:a7:4d:92:10:8c:fd:09:ba:4f:d2:83:4a:33:72:b5:05:dc:
87:9f:00:f7:3f:61:c9:68:64:9c:6a:cd:52:e8:d3:9b:17:11:
7b:e2:f0:0b:94:92:4a:43:9a:df:e4:21:ea:22:f6:9d:01:c8:
ea:e6:24:b2:70:18:08:e5:df:d1:74:3d:bb:f3:97:ca:15:bb:
87:b5:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:57:02 2025 by rpki-client