Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: +cSZasKhCZ5rCzeKr9ZBaOA9KNyr2OPNUa3Givl0Mhc=
Subject key identifier: 6E:E1:46:21:CB:2A:D7:B3:26:81:9D:97:D9:94:11:C2:AC:F0:81:F0
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 0199FFC7E4BBB07CBDFAA721C57C4BAEF07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:01:54 +0000
Manifest this update: Mon 20 Oct 2025 04:01:54 +0000
Manifest next update: Tue 21 Oct 2025 04:01:54 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: quZnU6uKD4CCsV8zIt9FIGwr6BkusC+BKRJ1CwWA230=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:e4:bb:b0:7c:bd:fa:a7:21:c5:7c:4b:ae:f0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Oct 20 04:01:54 2025 GMT
Not After : Oct 21 04:01:54 2025 GMT
Subject: CN=6ee14621cb2ad7b326819d97d99411c2acf081f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:b9:ee:5e:71:05:88:66:51:d4:57:fc:bc:
f7:b7:bd:82:13:6e:66:25:91:3d:64:dd:55:9c:bd:
1a:81:df:3f:c6:82:eb:0c:4c:db:60:1b:ac:39:ae:
87:d8:9b:b9:61:ed:ab:dc:06:65:7b:26:bd:49:d9:
0b:dc:1d:88:f2:94:9d:9c:b1:0f:e0:3f:4a:c2:6d:
05:fa:a9:e9:86:38:66:97:b1:dc:76:a9:b5:89:c9:
68:5d:66:60:68:44:92:09:9f:0e:0d:8f:6f:bb:c8:
2b:ed:46:8a:d0:c4:7b:bc:fe:ec:73:76:0a:6b:d6:
6d:e3:9e:30:4b:74:a4:f3:61:65:8c:fc:94:a6:1a:
26:77:1c:4f:d4:06:37:fb:9d:56:68:b7:11:90:ae:
39:c4:32:13:3e:b8:70:bc:6a:c2:5c:cf:c4:18:f5:
cd:19:6a:36:5f:e5:fc:c4:48:31:8a:af:1a:fc:9e:
21:8c:98:1e:27:03:86:09:67:f2:82:ac:0f:84:69:
57:11:65:46:44:18:01:1d:69:66:0d:88:8e:ed:e0:
fa:f1:48:fc:0d:a6:35:3b:f3:76:93:20:74:4d:7b:
7a:0b:78:d0:9e:6c:82:e1:3a:ef:1f:68:4f:c0:20:
76:e8:8f:f3:20:a8:f9:ec:97:25:f8:4f:d5:86:9c:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E1:46:21:CB:2A:D7:B3:26:81:9D:97:D9:94:11:C2:AC:F0:81:F0
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:ac:62:4b:ec:93:16:48:34:b8:dd:f2:60:0c:86:98:8a:
f7:a8:d0:b4:aa:b7:8d:a9:8e:07:ee:0a:53:7b:cb:d9:57:54:
a3:0a:0c:d4:f3:f1:98:94:0e:3d:06:a7:5d:73:a3:74:9d:5b:
34:f7:c5:68:12:8c:e0:38:f4:6a:24:da:b5:aa:1f:3f:e5:83:
11:a0:f9:19:e0:62:ed:0b:82:54:71:78:da:3e:13:a5:75:df:
37:6d:b1:14:7b:2a:46:17:9b:bb:9e:b8:82:0e:d1:33:59:51:
62:ee:e3:34:db:89:bf:11:58:ac:ad:f9:3f:9f:60:b2:89:12:
00:1d:71:96:e5:bc:2a:54:9e:be:9f:58:f4:83:a1:11:43:95:
c1:d6:75:83:1e:d2:c8:c3:4f:c8:9c:9b:c2:e7:d3:dd:ca:30:
28:6d:08:23:d3:e4:23:74:f6:4c:7a:1f:29:62:c0:c8:8c:00:
7d:e9:b1:67:bb:2c:a4:d9:dd:85:a3:fc:f4:b5:e1:77:4b:4c:
e1:ad:d8:01:a9:3d:93:82:c6:6f:d0:b6:58:cf:70:29:82:93:
65:a5:b2:70:d0:8c:15:4e:6d:13:55:fd:e8:cb:f4:9b:aa:ef:
16:50:dd:d5:41:a6:0e:1f:89:01:1d:2f:53:1f:dc:62:2c:e8:
40:67:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:57 2025 by rpki-client