Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: k6nE00gHCLFMWs/k8ZTQzBe8MG2jQ3bBltdFS43U8Zw=
Subject key identifier: FB:00:BF:55:17:74:A2:5F:AA:9E:CC:B3:39:EC:DA:F7:15:73:A8:48
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 0199FF22E5C796E324980B7F29EDF62E9F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 0663
Signing time: Mon 20 Oct 2025 01:01:41 +0000
Manifest this update: Mon 20 Oct 2025 01:01:41 +0000
Manifest next update: Tue 21 Oct 2025 01:01:41 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: bAWDwCllb8QiVB4F73oFHcwH0T8Huem6W8jg7+bB9zw=)
2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e5:c7:96:e3:24:98:0b:7f:29:ed:f6:2e:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: Oct 20 01:01:41 2025 GMT
Not After : Oct 21 01:01:41 2025 GMT
Subject: CN=fb00bf551774a25faa9eccb339ecdaf71573a848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:5a:97:e2:f3:ad:7b:df:84:3a:30:f5:80:
8c:ab:66:b6:0f:8d:e4:9c:99:4c:7c:47:cc:7a:7d:
00:29:06:af:7e:38:b4:b9:6f:9a:54:97:77:95:de:
0c:36:49:6e:dd:4b:60:19:4c:42:c8:db:50:71:35:
66:0b:a5:9a:17:81:50:d2:a5:fa:d0:66:38:fd:96:
d3:cf:cb:23:98:a5:ef:7c:ba:aa:dc:bd:75:eb:30:
57:ab:c4:37:df:4e:90:6e:b5:1a:6d:0c:97:2c:3f:
5a:79:59:c6:13:cd:74:5f:b3:1d:70:9a:cc:83:e1:
4e:3c:05:78:d4:f1:ba:11:76:a8:c8:7f:24:a3:1b:
7c:9e:60:31:80:08:f1:c3:35:45:b4:08:a9:86:ea:
e7:64:a3:0d:40:75:90:bf:26:53:60:34:9a:a6:75:
8b:59:ff:87:32:1d:a6:2c:80:51:4c:ae:a6:b8:26:
f4:ec:07:27:58:f6:2a:ad:b1:9a:dc:aa:9c:77:63:
6d:08:a1:ae:cc:a0:99:6e:bd:35:50:92:58:13:76:
99:5f:2d:cf:3e:b1:e5:bc:b4:a2:ca:29:91:95:fa:
9b:c8:36:f9:19:d4:53:e8:de:cc:ef:89:a8:31:e4:
06:8e:96:65:a0:cc:ee:3f:97:ad:21:ba:97:fe:73:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:BF:55:17:74:A2:5F:AA:9E:CC:B3:39:EC:DA:F7:15:73:A8:48
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d0:e8:75:62:8c:16:23:5f:06:30:c1:ea:00:24:4d:e2:4e:
ff:4a:e2:3d:e0:08:4f:67:45:0f:ed:ef:af:30:e1:47:1a:38:
bd:48:13:1d:26:be:cf:41:c1:4b:1b:57:bd:66:08:60:a5:30:
9f:b0:21:fe:a9:fa:ff:74:5c:f8:6b:68:ef:c2:cd:ea:0c:8d:
c2:36:b3:5e:1b:e5:9a:dc:6f:f8:4f:bc:7f:03:0c:69:ee:3a:
2d:f3:1c:cb:e5:33:62:57:e8:ce:83:70:1c:39:05:9f:98:60:
b7:12:65:07:3a:ce:eb:3f:3f:9b:74:a2:c3:24:5d:9b:16:5c:
46:59:62:0f:f1:a4:47:64:74:78:d4:42:27:7c:71:68:53:8f:
19:de:8c:bb:29:c6:ab:95:41:fa:fa:0c:9e:2e:d9:80:37:07:
e5:75:2c:97:30:98:24:47:a7:f3:b4:2e:d0:2b:ed:0e:2c:28:
af:85:9c:29:65:00:51:16:47:26:98:b5:6d:39:88:35:dd:f3:
45:08:99:e1:f2:10:5b:3b:7b:59:e3:db:35:d3:41:da:c7:5b:
1f:d9:bd:df:52:35:37:6e:4c:aa:cf:7f:66:70:dc:0e:6a:0d:
13:f0:81:46:d1:6e:7a:d0:5e:61:ac:9d:6b:79:77:8f:83:7a:
21:df:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:39 2025 by rpki-client