Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: PSoS1Ra+uu7kgLdZCdqfgGcSzSHJR0pqKGiT8OEfi6M=
Subject key identifier: D1:BB:D4:5A:CD:90:42:B8:6F:C6:99:EA:0D:7C:1F:89:DB:0A:58:03
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 0199FC21A02CEF45FA3FD32BCB38DB9D76C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: tNamQsIkOul/sE/L1aWtyq5biaZKlc0mHfxDSYmaF18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a0:2c:ef:45:fa:3f:d3:2b:cb:38:db:9d:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=d1bbd45acd9042b86fc699ea0d7c1f89db0a5803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:78:de:97:10:d5:2e:2a:3d:3d:05:fc:85:
de:e9:0c:9d:36:c1:67:f4:a7:8f:bb:0c:6f:b5:7b:
ba:54:98:73:3b:4b:0b:93:75:7d:6e:85:bb:d8:18:
70:b3:a8:7c:8c:97:ae:47:b0:8e:9d:b8:3c:06:08:
ff:32:de:5e:04:ef:f4:a6:49:56:9f:28:f3:e3:15:
e0:8d:b6:37:e9:6f:a5:08:ac:ea:a5:21:2b:81:5e:
00:a5:fd:9f:34:06:21:9f:77:20:76:4d:dd:55:17:
56:84:00:9c:2d:9c:ea:a0:a3:98:2b:3e:3e:02:ec:
96:39:4c:3d:36:d4:3e:f9:79:4e:7e:75:06:66:84:
25:bd:5f:9b:fc:e5:cb:eb:95:16:b4:da:6b:f5:e5:
77:72:c8:77:ba:59:43:83:95:dc:21:0b:10:b7:eb:
ab:9c:d9:b2:bb:b6:a9:4a:31:5d:b2:dc:37:89:2e:
37:b9:e5:9b:b6:6e:9c:4f:f4:b8:73:e6:fc:a2:d5:
fc:e9:75:05:c9:4a:2a:95:a1:1d:cd:96:86:a6:0e:
8c:3e:9b:2f:c5:9b:46:1e:9f:0e:ff:ce:ed:54:2c:
ec:28:ea:a5:75:3f:e2:f6:ee:d7:d9:f2:1b:05:62:
e0:d8:33:64:be:df:f5:50:56:87:43:f6:93:21:b0:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:D4:5A:CD:90:42:B8:6F:C6:99:EA:0D:7C:1F:89:DB:0A:58:03
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:de:c8:29:b6:89:0e:06:e3:74:08:1d:10:76:39:35:04:0a:
4a:87:61:cc:88:33:20:67:6c:a2:8b:57:17:97:fa:94:db:0d:
67:a7:a5:d7:90:ad:67:d7:04:ad:b0:ea:96:33:27:7a:d1:69:
29:82:48:a5:70:f0:97:c9:96:ca:f8:02:52:d9:c4:fb:26:8e:
31:1f:99:76:fb:2f:af:de:82:49:5f:51:26:02:9e:d5:a1:69:
5f:d6:8f:12:49:bb:53:20:1c:cb:da:b7:8e:25:56:b7:84:72:
48:16:3e:6a:f4:d2:5e:8a:57:99:23:6e:60:4c:f6:eb:aa:1e:
fa:0f:ea:cd:92:99:de:d4:98:c0:1c:ad:d2:dc:50:ab:73:2c:
29:24:86:6c:4e:dc:4b:49:73:7c:71:66:1b:c5:91:87:43:e8:
e3:7a:36:3f:c2:08:fd:db:73:a4:1d:1b:b6:5b:8c:b2:b7:f5:
a9:f0:2d:19:59:5b:65:3b:b6:2c:40:69:59:70:39:f8:e9:74:
6b:32:e9:8a:d3:f9:65:fa:2c:db:e6:a2:9f:3c:5d:e9:82:2b:
26:ca:40:b1:93:75:74:1d:16:c3:28:18:34:e6:64:e0:a2:d8:
38:b8:f6:bd:c2:15:13:1e:e4:b9:91:2c:f3:e9:05:12:40:f9:
5e:a7:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:59 2025 by rpki-client