Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: SqyfceJubHH5ZQntOKKKPdYzvXcgOOWQABGZ+/TdrvI=
Subject key identifier: 9C:7C:50:8E:0B:19:B9:47:13:81:29:01:10:11:43:85:0C:ED:B1:99
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 0199FBEC385E373A984CAF8A8C27F2E89D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 07CD
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: 9dbtvOKCsZu0y0oWdtRePKDG2Yd8y6PF3wFKU/FQxlc=)
2: 9BXUrv8yMotCa9wi2rTgBBgI1OA.roa (hash: 4WrQuplF7eXybB0cG6ut10OAMsEsYkXu1xsES1nQaEs=)
3: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:38:5e:37:3a:98:4c:af:8a:8c:27:f2:e8:9d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=9c7c508e0b19b94713812901101143850cedb199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:46:aa:72:d3:76:9b:71:ba:1c:65:40:98:
17:55:fb:ac:74:19:1b:4b:e8:09:d9:26:78:4c:85:
1c:75:24:2c:32:f3:fb:0c:46:33:13:ad:b5:3d:18:
cc:5e:91:c2:9d:d0:8f:1b:44:c3:86:b1:18:dc:e6:
d4:3d:73:55:d1:37:ab:2e:bc:7b:47:ca:3a:c3:36:
3e:07:0a:aa:ab:32:30:cc:c6:fe:dc:48:88:a5:49:
72:d4:8d:8b:47:ee:a5:ae:2c:d3:25:8b:1e:76:8b:
b7:e4:5b:08:c6:77:dc:14:74:a7:93:9c:3d:6a:a2:
b8:d3:d2:0c:c1:bd:9c:a9:a3:35:03:19:e5:bd:76:
74:fa:8d:83:dd:a8:fe:62:5b:a3:b9:06:d3:c6:bd:
c5:f9:43:3f:6b:16:1f:9b:e9:19:72:32:d2:c9:8b:
42:46:03:24:fa:a9:db:42:8f:18:7c:e8:1a:d7:35:
5b:5a:d6:1d:46:93:f5:92:69:a6:c8:98:2c:c1:67:
45:fe:0d:5d:0e:d4:73:df:71:df:ff:72:09:7d:6f:
eb:ee:46:8c:e5:c5:13:3f:e8:1b:af:b5:7b:63:94:
8b:05:b8:1e:27:84:c2:72:46:03:1c:58:d9:78:df:
60:a9:35:78:f9:ba:8d:77:25:f8:e7:49:d3:59:71:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7C:50:8E:0B:19:B9:47:13:81:29:01:10:11:43:85:0C:ED:B1:99
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ef:5a:66:be:25:78:cb:0e:20:b4:5b:4c:0c:8c:44:4b:0e:
a4:38:df:16:1c:be:05:60:a9:75:8a:aa:54:03:97:b1:06:21:
62:16:71:22:cd:e1:86:a6:d3:b2:9b:3d:66:ac:20:36:63:14:
08:95:6f:a2:12:df:ce:b3:da:52:b9:f7:fe:1c:f9:5e:5c:f8:
61:de:11:36:54:b4:b8:f9:58:15:a5:2a:a9:27:03:9f:04:53:
e9:7d:2d:b1:bb:c9:39:23:8c:bf:24:ba:9a:1f:ea:63:d0:6b:
cd:e7:22:27:59:65:98:26:a2:53:fd:de:1d:1f:96:ad:bf:e1:
3c:6e:1e:86:4b:0f:76:cd:f4:11:71:e4:ea:41:10:00:d1:d5:
86:52:21:f4:17:35:4c:c4:30:6a:54:f3:06:2c:83:00:2b:c5:
2a:ab:23:de:17:4e:29:4b:b1:db:2c:14:52:83:9c:c8:dc:c8:
80:af:70:30:bc:cc:09:e1:ae:22:ea:50:7b:bd:87:8b:65:55:
c6:c1:c6:2c:0d:2d:03:64:70:a0:0a:13:4a:7f:73:66:79:b2:
35:eb:98:55:dd:3d:53:b8:b7:44:cc:3b:35:37:cf:2e:26:d3:
ef:88:dd:ec:e7:48:7e:f9:db:13:b1:27:2b:97:b2:60:33:a5:
f7:4e:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:48 2025 by rpki-client