Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: 0k9OcoYdsyONFBBpDebqOfOSBMf332OAfq/dful8nWQ=
Subject key identifier: C2:66:13:65:FF:8C:F4:BD:9C:37:41:CD:52:62:42:70:C7:B2:31:7A
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 0199FAD7AA82AEDB524E1B4E6ABAA43CDDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 06E2
Signing time: Sun 19 Oct 2025 05:01:01 +0000
Manifest this update: Sun 19 Oct 2025 05:01:01 +0000
Manifest next update: Mon 20 Oct 2025 05:01:01 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: 3Y7QGqurZ5x+1KTQNgr7v98XoY3Y5Z1jpN7mPb/utzE=)
2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:aa:82:ae:db:52:4e:1b:4e:6a:ba:a4:3c:dd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Oct 19 05:01:01 2025 GMT
Not After : Oct 20 05:01:01 2025 GMT
Subject: CN=c2661365ff8cf4bd9c3741cd52624270c7b2317a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:33:92:5c:8e:da:59:43:a0:90:46:2f:83:
14:3b:b5:81:e9:5d:bc:b9:ee:ad:b2:a8:ef:53:62:
85:4e:5f:1b:89:76:fe:5b:44:3f:05:6b:da:0c:a4:
07:93:62:d9:d4:6e:ec:e0:98:1f:03:20:4b:c4:18:
3b:76:4b:41:8b:43:2f:7e:0b:0a:91:43:78:7a:15:
69:5a:55:ab:0e:26:75:cb:1c:6d:b9:1a:73:bd:36:
c4:a3:4f:fb:6e:6c:15:d5:5f:46:10:2e:7e:84:87:
dd:c0:d9:54:46:14:c4:00:9c:43:92:79:7b:d9:55:
f5:60:95:47:40:8e:f8:33:31:6a:7c:12:d7:fb:de:
8a:73:29:8b:df:6a:d8:9e:83:1c:57:9f:ef:f8:99:
f3:78:99:05:f8:52:c1:af:9d:27:a6:56:67:a7:5f:
47:65:b0:85:1b:80:a5:a9:1b:0d:b3:ec:3b:fe:5c:
7e:f4:bc:1a:2b:70:97:5a:23:07:37:28:53:11:f1:
2b:09:54:f7:b0:02:05:27:67:be:35:b3:3c:94:00:
a6:2a:cb:05:b0:58:b5:f6:ef:1f:d5:5b:e4:47:1e:
9e:e9:b7:41:be:25:6b:76:e6:cf:13:23:95:33:f8:
dd:e6:07:c4:83:5c:76:39:ed:03:5f:b3:c6:df:49:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:66:13:65:FF:8C:F4:BD:9C:37:41:CD:52:62:42:70:C7:B2:31:7A
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:05:92:81:bb:a4:d4:89:72:06:9a:17:ec:c0:90:23:8c:b2:
d6:f2:37:ec:54:0b:34:1a:ca:76:b7:61:33:ef:e3:5c:e0:ee:
bd:27:95:73:60:b8:c9:37:82:46:cd:4d:40:28:dd:17:9f:1a:
7f:04:47:2c:f3:b5:af:15:b3:37:b7:1c:b1:5b:ce:20:33:f8:
0e:ec:de:54:33:fd:a6:c7:29:38:5a:0f:63:e4:f7:50:97:6e:
c4:bc:67:70:06:a8:16:97:9e:e7:bd:ed:80:79:75:eb:6b:11:
32:66:a2:83:19:78:46:22:87:83:a4:d0:39:e3:2f:5d:27:ec:
ea:fc:0c:86:97:70:f6:cd:70:7e:05:a6:1a:81:96:66:a4:85:
b5:40:da:41:19:21:ee:43:44:21:e9:97:26:94:a8:c4:f4:3c:
92:b4:69:9c:00:c1:6d:f5:1a:3f:4f:c4:31:81:48:86:cb:cb:
46:3e:4e:31:99:42:59:00:fb:0c:52:c8:7a:a0:df:bb:20:df:
1b:48:b5:fa:a9:b2:07:2a:5b:ce:2a:98:b0:d9:f2:aa:0c:b8:
10:51:4b:be:94:b1:9a:ae:7e:5b:b6:3c:46:27:59:ef:d4:c7:
aa:d3:d5:a1:57:37:2d:0e:f6:c0:54:70:2f:a9:92:9d:0d:29:
1f:da:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:33 2025 by rpki-client