Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: LZ++ofKZSEfiL96caiGJtbboCmoLE9Y1tOlBLCBqIWY=
Subject key identifier: 12:7D:F2:29:8D:B0:B5:92:04:10:AA:7A:C7:CD:D2:AA:52:3A:4F:02
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 0199FBEB58BF9401CEA53FCF39D81DF85211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: xN9n2/jcwILuIyPqqnp2Ru8854povJFIxQGWodq4XC4=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:58:bf:94:01:ce:a5:3f:cf:39:d8:1d:f8:52:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=127df2298db0b5920410aa7ac7cdd2aa523a4f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:76:d5:30:88:77:17:2b:ae:92:34:c6:fe:
82:19:9d:b0:3f:b9:2a:04:51:8e:5f:54:6a:b4:62:
b3:9b:17:8c:b7:98:dd:88:dd:bf:76:99:cf:3a:2a:
11:60:2b:69:bd:30:3c:ce:a5:8d:15:9a:8b:bf:3c:
03:20:d3:25:98:2f:90:ca:75:c7:58:20:49:17:15:
43:5b:4d:b5:39:d4:06:6a:28:db:0e:b4:d7:95:d0:
d4:a8:e9:16:53:93:35:0b:52:ec:42:32:da:09:e7:
b5:81:b3:c4:4c:51:17:6f:52:d4:be:bf:f9:cb:03:
bc:15:1e:d5:e8:dd:28:0a:4b:65:72:24:60:83:49:
57:9f:88:c0:7e:bc:89:80:a7:7d:2e:58:dd:fb:c8:
1e:2d:ea:30:5e:66:d0:0d:be:e9:34:62:25:c4:4d:
62:7d:c0:79:8f:f3:09:17:39:e7:cd:5f:ce:52:5c:
5b:92:cd:7f:35:95:88:b2:91:cb:9c:79:cf:01:21:
69:54:b6:f3:4f:01:1f:51:f7:59:4f:db:19:e6:9b:
c7:0a:3d:76:27:b4:b7:d8:e2:c5:50:a9:5e:75:0f:
47:a6:b8:82:b3:21:ff:99:dc:62:68:56:c3:41:d6:
31:94:91:b3:e9:a7:15:46:24:a0:98:d4:bd:2c:d5:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:F2:29:8D:B0:B5:92:04:10:AA:7A:C7:CD:D2:AA:52:3A:4F:02
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:55:7d:73:0f:22:24:da:94:78:d6:18:04:c9:8d:cd:27:ee:
a7:9a:3d:b1:1f:79:d9:27:16:29:64:a6:6c:33:8d:f9:fe:59:
90:be:c2:a5:1c:ed:90:a6:db:41:86:d1:33:0d:a4:b1:61:4f:
79:52:11:5c:fb:e2:fb:15:e3:8c:72:a0:25:7c:b6:dd:21:03:
82:ec:95:8a:4e:78:ad:0a:8d:d4:25:ea:63:1f:ae:b5:b2:47:
7b:9d:b1:5f:3e:38:46:97:a4:0d:56:65:4f:8b:28:31:9b:7e:
8e:13:80:37:d5:77:b2:26:e3:26:fd:a1:dd:33:a6:58:31:21:
f2:37:d2:1a:bb:70:15:27:7a:69:95:d1:35:de:ac:10:6e:41:
52:25:e2:70:9a:a1:d6:0f:c8:0a:31:0d:9d:e8:06:22:cc:eb:
2a:cf:5c:cc:95:b8:41:8e:c4:a2:ab:e4:d9:ee:ae:eb:cd:93:
8d:cb:5d:94:0c:da:48:42:96:5b:af:fc:0f:bd:af:93:57:d4:
ab:6b:60:88:ab:06:ac:8a:fa:3c:a3:47:98:5c:f0:03:57:aa:
3a:3f:cb:96:71:cf:94:c9:41:d8:77:78:d3:25:15:60:d1:e3:
8a:6e:ff:1a:56:5e:f3:5e:f9:6d:a8:02:c2:2a:d0:a2:7d:77:
6b:cd:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:30 2025 by rpki-client