Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: pift5lbtRF/PxWIhoo61IxQfub02rlCGMRo4nxlzQPM=
Subject key identifier: 85:7C:19:59:0C:18:85:17:8A:C5:00:64:10:1E:D9:5B:F3:25:82:E6
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 0199FB45ED47FF2B347453C08B9815E9AD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 103B
Signing time: Sun 19 Oct 2025 07:01:27 +0000
Manifest this update: Sun 19 Oct 2025 07:01:27 +0000
Manifest next update: Mon 20 Oct 2025 07:01:27 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: 7YOUFC+IkzJ9Rpj8DGI3q37UIqEX80swqSbQXCETrsI=)
2: KFGuuWvhGKXdRFWCPjT6bIvxr90.roa (hash: 5mNeMpLOgDP2WV53iNWD9JlTcJDz19nCtSLYypdRdgA=)
3: NLn-NADuc0yAyX0f_4G1dKCqIP8.roa (hash: dkLXs7qu9ok1KeNheDJk9SO+sT7GSZT5TJ1FucBWHfg=)
4: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ed:47:ff:2b:34:74:53:c0:8b:98:15:e9:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Oct 19 07:01:27 2025 GMT
Not After : Oct 20 07:01:27 2025 GMT
Subject: CN=857c19590c1885178ac50064101ed95bf32582e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:a0:9f:c3:ab:fc:8f:6e:65:08:19:fa:f2:
82:4b:b9:7f:ca:5e:1d:a1:32:22:cc:99:4d:5b:2a:
cf:5f:2b:11:42:7a:bf:62:93:28:6e:bd:1e:ef:7c:
59:bb:32:5f:96:a8:e5:63:04:40:08:b9:91:1e:10:
df:93:c4:64:89:2d:92:5e:c8:50:62:6c:c5:cd:69:
f0:95:d4:71:6d:3e:52:9d:06:73:c6:a0:32:dc:09:
57:4a:45:b4:0f:7b:a3:c4:f3:4e:22:1f:9a:80:21:
8e:8b:85:18:a9:7b:d9:42:92:85:09:bb:4a:89:85:
34:26:78:7c:54:ab:88:9a:a8:10:27:31:f9:22:5a:
ac:01:0f:36:86:e3:62:c0:bc:a0:fc:a1:43:33:93:
80:df:ff:d5:74:ff:f4:d2:81:25:76:0a:d8:01:31:
cb:a6:46:45:9a:24:fc:d9:93:11:a9:39:e6:3f:38:
c1:18:c2:99:c0:b2:04:a9:f9:56:b1:1a:b0:01:86:
b6:2c:94:8b:31:ee:eb:cb:e9:cf:61:83:43:3b:9f:
14:8c:0a:03:01:13:8d:50:df:3a:ff:fc:3c:5c:bf:
e7:0d:de:79:9e:4d:74:e8:1c:bb:ed:02:c3:5a:19:
d9:b0:7f:1e:7f:6b:09:f0:86:2d:ba:96:eb:d0:13:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7C:19:59:0C:18:85:17:8A:C5:00:64:10:1E:D9:5B:F3:25:82:E6
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:16:c6:dd:4e:27:e1:d5:73:ac:2a:8c:33:60:8e:c0:b0:e1:
02:d9:62:14:44:01:bd:ba:a0:ad:94:bb:56:a4:c2:1f:78:67:
2b:a0:fd:6d:6b:c7:14:69:fb:88:cd:c5:ba:58:13:29:be:b6:
4c:68:22:a4:24:e5:b1:1b:27:17:dc:aa:cd:57:67:93:9d:7f:
63:de:ba:5e:5f:f6:ba:f3:94:5b:0f:09:7b:4b:e6:c1:fc:c4:
2a:cb:ee:52:ad:e3:e2:4a:fc:7c:a6:ed:9c:06:64:32:3a:5e:
0f:8c:dd:0a:4d:bb:d9:42:21:19:63:b1:d4:20:46:91:7c:97:
9a:d2:94:80:8a:d8:42:f9:d0:72:41:69:ba:2c:6d:c8:a9:3f:
8b:e3:66:70:cb:66:bb:26:77:4e:2d:12:e6:91:d5:2a:40:f8:
5c:ad:3d:70:f1:e6:e7:f7:7e:12:27:2a:97:83:9d:07:b1:68:
7f:1f:2b:d2:c1:8b:32:d9:f2:c1:ac:54:d7:7d:40:20:db:67:
5d:af:71:2a:ed:bc:0d:11:71:ec:ef:58:78:10:59:8a:64:bd:
d1:56:1a:61:a4:ff:d2:9c:8b:02:10:2c:eb:25:2d:e0:7e:6b:
e0:0e:50:ec:a5:fe:00:ff:aa:7f:92:83:d9:40:11:e9:d2:fc:
e2:a4:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:33 2025 by rpki-client