Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: Ew+cd/wMkYtD4XZ+HLhSefArNtaJiVy3fkbVsmSOraI=
Subject key identifier: 49:BE:C5:01:0E:E9:62:53:04:C9:0C:44:F2:DC:24:1C:7D:09:55:D0
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 0199FCFD390266533FA85FA4056FF943445A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0D3E
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: eFs6r7gRPRHUDhmjW8CP/v08skcUjL38JoaJJLdmX4k=)
3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:39:02:66:53:3f:a8:5f:a4:05:6f:f9:43:44:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=49bec5010ee9625304c90c44f2dc241c7d0955d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:b2:6e:4b:bb:ad:5f:98:2a:d0:f6:42:74:
49:49:a5:1f:45:ef:39:fe:cb:a4:f2:ad:76:e3:fa:
4b:c5:84:fe:d6:cb:30:2f:c5:9b:b8:aa:89:20:b6:
d3:9f:6a:03:87:17:fb:99:fc:82:c8:f6:bc:97:97:
6e:04:04:a0:90:eb:06:9f:cf:8f:8f:d4:41:7a:a5:
08:61:27:60:5f:19:4a:a1:ab:a4:c9:a6:8c:46:42:
bc:41:e8:f6:e8:fb:32:f5:64:59:e3:2a:27:29:c3:
98:9a:64:11:68:d2:69:21:7b:81:c1:c8:b5:0a:30:
a5:11:0e:45:bc:50:48:49:22:14:3a:2b:0d:a8:08:
24:eb:36:c7:e0:f9:5e:79:d1:1d:87:41:a4:e5:93:
3f:00:1f:98:a8:32:5d:bd:fe:76:34:52:b6:89:f0:
bf:20:f0:b5:57:55:bd:28:e0:31:33:5b:84:26:f1:
24:4d:c9:5f:26:eb:eb:08:6a:24:af:38:ef:74:4c:
3e:33:51:12:a1:cb:13:ad:f0:ce:80:2a:14:6b:09:
18:08:b5:d8:67:25:c8:76:24:f4:0d:47:c4:51:96:
73:c8:2c:60:b0:a1:07:43:0b:bb:b6:2f:a4:e6:5d:
22:0a:37:6a:f0:95:a7:6c:5b:02:68:e3:e3:ab:95:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BE:C5:01:0E:E9:62:53:04:C9:0C:44:F2:DC:24:1C:7D:09:55:D0
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9b:99:ea:b3:ae:9f:73:8f:fc:4d:76:f5:5e:4c:75:b2:4f:
fd:bf:66:bf:16:12:fe:37:89:28:95:a9:fa:9f:3e:43:50:08:
28:e2:49:38:0b:ad:ac:7c:c5:af:0d:3f:73:73:18:83:2b:3e:
09:f1:bc:a7:f8:af:5a:4a:bf:0b:91:9b:3b:94:ca:5f:ee:b5:
eb:7a:3e:c0:0d:8c:59:b1:61:9a:5a:d6:c7:af:3a:98:e6:4d:
b4:f5:e8:8b:36:2d:27:10:39:29:f9:8f:1a:bc:f3:38:af:c0:
3e:be:a3:0c:67:18:fc:40:1b:00:5d:07:8f:12:b2:36:92:d8:
72:04:94:ca:8a:59:fe:51:16:40:a1:4e:6f:70:bc:2c:2f:3b:
b2:27:16:11:65:b7:9f:e8:c5:23:da:f9:e0:16:2a:20:16:d0:
ca:7a:f4:59:bf:a9:2e:80:bb:f5:44:8e:74:34:87:f5:68:ab:
4f:05:1a:ca:c3:15:39:86:a3:30:2e:7d:69:5a:df:53:b3:9f:
18:c6:84:81:40:fc:35:71:9d:d1:0b:35:4a:fa:a8:6e:1f:70:
29:ba:62:d0:31:b4:ef:6b:f7:8e:ba:c8:f1:63:66:8b:85:bf:
92:61:f2:ed:8a:82:ea:f0:ea:2d:11:a6:43:8e:04:c7:64:7e:
43:68:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:09 2025 by rpki-client