Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: qoiKgLJrK+sA0URQRx2VXh3XQWaiKLF2NDFCKd+0RDw=
Subject key identifier: 6D:9F:42:8A:A0:34:7A:48:42:A4:0D:07:DC:A1:D5:DB:FF:EE:05:EC
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 0199FDD9D163DEA99AF42AF6AD0800DA605F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 091F
Signing time: Sun 19 Oct 2025 19:02:14 +0000
Manifest this update: Sun 19 Oct 2025 19:02:14 +0000
Manifest next update: Mon 20 Oct 2025 19:02:14 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: /aIuW0KYk9GaS/sTj8jhoiYKE9IOLvx9neFQWz2FBjI=)
2: nTEco9mT1eULi7_9dIxqABgskB8.roa (hash: yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d1:63:de:a9:9a:f4:2a:f6:ad:08:00:da:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Oct 19 19:02:14 2025 GMT
Not After : Oct 20 19:02:14 2025 GMT
Subject: CN=6d9f428aa0347a4842a40d07dca1d5dbffee05ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:16:aa:de:b9:9f:5b:22:48:fd:85:42:25:
1a:d1:9d:bb:1d:2b:46:e7:15:46:45:5c:29:9e:e5:
b9:a8:82:4f:76:8d:2a:70:ad:9a:39:2b:97:c6:a3:
88:4a:66:6d:7e:5f:62:31:46:82:ad:4e:75:61:40:
bf:0b:06:6c:26:ec:cf:9f:60:b7:72:4f:e2:92:eb:
62:e5:c6:be:b5:43:ea:ae:04:f9:fe:72:5a:73:48:
80:e6:23:6e:e8:ea:fe:82:6f:26:20:47:5d:89:bc:
f2:14:d2:04:f5:61:98:a1:5b:c1:b3:1a:de:ed:3c:
9a:c8:8c:18:db:34:b0:95:9e:ba:0a:5d:8e:eb:ce:
2d:4c:27:4f:eb:bb:f8:5b:eb:a8:33:62:b1:98:91:
00:30:22:7c:b8:39:04:5e:30:e4:23:b1:ba:a9:29:
9c:56:b3:80:44:49:f2:fc:4c:35:28:7c:94:7c:12:
20:1b:8c:02:d9:26:1b:b3:93:f4:d6:e5:94:5e:23:
a8:5b:34:30:d5:6c:7a:7a:60:47:d3:66:20:a8:e5:
79:d1:06:c3:e5:a5:01:b1:93:00:88:ef:82:ad:5b:
e8:ed:1b:56:43:72:12:90:57:dd:b2:dd:78:05:61:
60:9e:9c:bb:25:04:65:f4:8d:10:5d:93:aa:31:7d:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9F:42:8A:A0:34:7A:48:42:A4:0D:07:DC:A1:D5:DB:FF:EE:05:EC
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:90:fc:de:e5:9d:63:99:46:4d:10:5c:d7:d2:6f:57:b4:c8:
7f:e7:25:a2:7c:cf:e4:49:f3:2e:d4:e7:94:7a:51:02:55:9d:
2f:0e:e6:73:51:98:8d:36:0d:45:a7:1b:1a:10:30:92:24:d3:
27:82:77:9f:f7:46:f1:d0:d5:4b:e8:01:9d:60:bf:ff:5c:5d:
d3:ce:6c:3e:ed:11:f8:8f:94:c6:e6:ee:bd:17:a3:4a:f3:e9:
4b:9b:8c:4a:d0:f7:0c:35:3e:55:62:78:68:2a:84:40:65:16:
4b:8c:99:b8:11:80:38:91:a6:95:95:81:b3:a8:38:f5:34:20:
20:7c:ac:3c:4e:a3:2b:f3:d4:00:4e:81:26:77:66:d4:d9:e5:
40:d4:5f:76:20:7a:b5:e1:38:3b:ad:8d:0c:fe:cf:28:2a:e2:
f2:51:b9:c0:cd:cb:1d:09:05:0c:e3:3c:b9:00:19:a3:56:15:
78:d7:79:db:0a:be:e7:6f:3f:1a:0e:3b:ed:81:39:1e:eb:bd:
f9:af:82:6b:f9:14:58:b6:ca:08:7a:05:32:ca:01:2c:77:15:
0b:d2:1a:84:bf:91:39:81:18:6c:63:6e:ca:86:d2:97:72:bc:
70:98:1d:a1:31:60:05:94:b5:d4:fa:a5:9c:24:a9:fd:ca:48:
b4:83:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:10 2025 by rpki-client