Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: k6f8zPiT3mNDas0wXy1Km+oQB0Ze0QNv16VoxdPpth4=
Subject key identifier: BB:32:84:D7:86:A3:2A:F3:5A:DD:14:12:31:C6:F8:30:AF:38:20:A4
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 0199FDD9031D615E6DD0527E62C00DA8E26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 03CC
Signing time: Sun 19 Oct 2025 19:01:21 +0000
Manifest this update: Sun 19 Oct 2025 19:01:21 +0000
Manifest next update: Mon 20 Oct 2025 19:01:21 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: MeBWpSUee599302SNb4Q8ukk0VorJi3/J5GYrVfq4Cw=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:03:1d:61:5e:6d:d0:52:7e:62:c0:0d:a8:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Oct 19 19:01:21 2025 GMT
Not After : Oct 20 19:01:21 2025 GMT
Subject: CN=bb3284d786a32af35add141231c6f830af3820a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:6d:20:10:1e:63:d1:59:9a:aa:77:ea:80:
e9:1a:b9:8c:42:6b:ba:a3:cb:25:d0:4b:54:12:57:
3d:b3:87:14:6a:49:bd:c4:6a:aa:ee:ad:04:87:46:
b1:43:88:7a:e8:8c:93:bf:b7:4c:ac:ee:00:a8:85:
ae:d0:f9:f2:40:f9:87:8d:c6:5b:59:38:bc:5c:0c:
42:d4:66:80:d2:db:6d:d3:f3:10:4d:cd:57:9a:0d:
42:86:96:8b:fa:b7:3e:07:2d:43:04:56:52:be:2b:
52:e6:7d:0d:ee:87:a7:7b:e9:10:86:d4:9f:0b:cf:
a7:f9:97:35:a7:04:53:ff:f3:a1:bd:16:c1:2a:b6:
e8:ca:f6:0d:56:99:dd:26:f3:d9:7c:5d:5d:69:e8:
b1:6d:35:42:d0:5b:16:ce:52:94:f9:0e:83:d5:06:
fb:95:c6:25:e6:81:84:d5:e1:79:fc:07:d5:34:4e:
94:4c:94:5a:b6:dc:5f:e5:31:f2:69:e8:59:85:a1:
3a:0b:13:8c:62:54:b1:f4:c8:5d:a3:21:f1:b8:43:
bb:31:0a:09:62:02:15:72:9a:85:20:ff:00:60:19:
5d:42:32:1e:de:a2:f6:a1:e4:20:0d:92:4c:07:a3:
74:4f:0f:59:97:73:38:30:9d:57:78:b1:1c:ba:ee:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:84:D7:86:A3:2A:F3:5A:DD:14:12:31:C6:F8:30:AF:38:20:A4
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1d:97:bd:b3:9f:dd:18:77:cb:9f:96:6f:b3:ba:54:e3:7b:
63:df:2d:61:14:37:b9:7c:dd:c6:e7:13:67:fd:16:80:36:66:
6c:01:6a:73:b7:55:9e:b1:9e:90:88:91:d9:40:eb:b9:ce:ea:
3d:58:ed:d0:0b:82:91:3a:b0:7c:87:47:29:9f:4b:cb:4c:7e:
e5:2b:84:aa:c6:d4:d3:3e:9f:31:bb:8e:a5:7f:34:59:bc:87:
bc:da:07:36:e6:ac:3d:9e:bd:e1:a7:cd:70:ce:4b:97:3a:58:
98:5f:dd:f5:41:5c:b3:b8:12:34:e6:40:d3:39:cb:20:4a:8d:
1e:6e:91:81:a1:c1:7d:23:61:cf:cf:e7:f9:49:ef:89:d1:be:
df:e1:f6:d4:ba:3e:59:6f:e3:4d:f2:53:38:71:41:29:b7:5d:
40:59:ed:e8:01:27:8e:81:ba:c2:f7:44:f1:d3:f0:9a:39:f6:
07:c9:90:6a:4d:73:49:c9:8e:84:da:dc:e0:c7:2d:27:3b:2a:
f1:83:6c:a9:de:2a:87:01:09:8a:a2:28:01:79:03:d2:e1:06:
55:c3:76:54:e7:f4:ac:22:3d:15:c2:f7:0e:37:c8:65:c2:f9:
91:39:38:3d:a6:8f:88:9a:d8:1d:41:f3:a1:41:78:c4:81:c8:
bf:f3:41:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:04 2025 by rpki-client