Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: hES7RT3b+oWeHyDVV80ogYJK9aZZxY0US55X/WSE3HM=
Subject key identifier: 1C:7E:06:21:9D:FA:6F:16:98:01:6F:54:91:96:50:00:02:05:BC:05
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 0199FD3453A9A60AA0A3F9B60C78AC5344AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: XIshlYShjRBf47hW8/WViJ+SR5+ltn06L7Wic4xFNao=)
2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:53:a9:a6:0a:a0:a3:f9:b6:0c:78:ac:53:44:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=1c7e06219dfa6f1698016f54919650000205bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:84:b9:15:bf:c6:ba:58:97:c1:85:2f:c4:
1c:db:26:40:45:8e:65:01:24:97:b2:2d:3e:dd:3e:
f4:1b:95:94:41:b9:11:84:ec:9e:b7:31:17:d4:ea:
6e:a2:29:42:c3:83:46:41:58:bb:91:71:ad:6e:ed:
14:c6:ea:f1:b1:03:71:79:cd:2f:ec:28:3f:e4:c2:
3b:2f:54:c3:ad:ce:2f:53:0b:ce:71:56:0d:e5:52:
5e:dd:e3:84:3d:ca:b4:a6:1b:52:88:7e:e3:00:59:
2b:07:2a:e8:a7:fa:78:4b:73:83:3d:0e:00:50:7c:
63:3d:40:9b:37:45:b8:cb:25:ed:8c:30:d2:16:c3:
25:f9:8f:0b:2a:5a:c6:09:4c:e2:18:e4:46:90:48:
71:2e:83:6c:a6:12:22:ee:db:64:4d:82:6d:3c:ad:
14:b0:0c:3c:b8:22:ea:a4:9e:0d:6f:7c:3c:c3:ea:
71:9a:91:e3:f3:dc:ba:56:69:02:72:86:28:66:e8:
a1:07:c5:dc:f5:9f:12:04:8e:89:ae:90:13:1e:d0:
0d:ba:75:4f:1d:0d:62:8d:9e:cf:82:be:80:75:0d:
b5:87:9c:35:1f:cc:bb:4a:12:69:1f:c7:82:02:71:
35:d8:69:f4:b6:16:ff:93:55:d0:c0:f9:30:98:40:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:06:21:9D:FA:6F:16:98:01:6F:54:91:96:50:00:02:05:BC:05
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2a:48:38:58:3a:53:7e:e8:49:29:ee:34:99:d5:e4:3a:53:
5c:d5:aa:8c:a6:e7:71:18:a8:af:b6:5f:ea:62:ba:37:ab:3a:
2d:85:ee:ca:0d:10:77:91:a8:0c:32:8f:fd:50:ef:29:da:47:
25:07:87:bc:94:8d:de:b4:5c:1a:34:0e:67:02:54:d3:44:e2:
1e:f2:55:6b:52:f6:ee:36:79:a4:ff:44:56:79:7c:5e:bb:2e:
0c:2c:dc:9f:b7:13:e7:f2:68:42:07:b8:06:10:93:a9:e4:96:
16:6e:7e:75:e6:33:fd:5f:b0:b8:d9:c3:85:55:76:67:1a:b0:
85:f2:73:d3:d8:e1:f4:f5:31:0a:e6:73:b4:bb:e3:79:bc:8d:
64:ce:11:76:fa:19:ea:c2:4c:7e:99:9e:da:c8:5d:31:97:89:
68:88:26:cb:3e:e4:8a:86:e8:9f:7d:8d:78:fa:e3:c2:b9:83:
72:8f:75:43:71:9d:10:a3:39:32:07:83:e4:ed:68:5b:e4:ff:
a0:46:62:e1:6c:11:3c:1a:f5:8c:c1:38:7e:c3:e8:4b:57:0f:
3f:5c:34:40:ac:9e:32:d0:8d:e8:72:4b:58:90:80:0a:c0:0d:
d5:23:3a:96:e4:d8:20:8a:a5:f9:24:96:87:ee:27:23:5f:61:
02:a2:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:55 2025 by rpki-client