Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: bp67CEsTFwBE+n8WHJjNCbHI6d1dErf3Z57S0lxOvMQ=
Subject key identifier: 9B:7E:3F:0E:59:5B:5C:60:83:B8:75:5A:DF:5F:EC:CD:81:1D:39:F9
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 0199FDDA24764DF68639AE449C0D15340304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0BDD
Signing time: Sun 19 Oct 2025 19:02:35 +0000
Manifest this update: Sun 19 Oct 2025 19:02:35 +0000
Manifest next update: Mon 20 Oct 2025 19:02:35 +0000
Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: msfV3WT2PZmqZYcQqa/7rw8n8tVbaFyr1gifKYI3Rls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:24:76:4d:f6:86:39:ae:44:9c:0d:15:34:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Oct 19 19:02:35 2025 GMT
Not After : Oct 20 19:02:35 2025 GMT
Subject: CN=9b7e3f0e595b5c6083b8755adf5feccd811d39f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:2c:52:ab:3f:a9:8b:46:e9:ba:4a:19:78:
e1:0d:3c:d9:75:2a:d0:b0:f7:9c:de:16:77:14:8d:
fc:ce:69:c5:25:3a:ff:20:c5:d6:d4:f4:b7:69:28:
6c:48:21:23:34:f3:24:96:5d:19:50:e1:b3:74:cd:
72:23:36:29:1f:a9:37:06:39:00:a3:08:ce:7c:76:
d4:c0:ce:69:90:ea:13:79:db:3d:7a:cc:91:32:fc:
15:a3:f5:0e:a6:67:7b:a7:8d:04:9a:37:f1:17:ce:
43:2d:ac:ec:62:20:4b:d6:24:0f:30:c3:df:3d:69:
39:4a:e6:a8:2f:9b:f5:83:b8:85:46:ba:f8:f8:9d:
da:d5:61:dd:e1:94:bc:0f:fd:14:48:03:1a:83:78:
2d:a9:67:01:77:55:92:73:5e:e8:da:0a:29:8e:ae:
b8:41:5c:21:4d:4c:03:6d:1b:7a:dc:bc:a1:c6:df:
8d:57:14:6d:7d:e9:21:cd:f4:c3:50:5c:87:46:16:
df:f1:88:9c:c1:4f:6a:bc:72:84:80:d1:35:9f:8e:
03:52:57:72:78:20:95:67:9d:a2:2c:4e:e8:76:13:
d9:76:b1:3a:6a:d9:55:24:bb:f3:d1:8c:12:d9:d4:
02:6e:76:0a:d8:d0:80:82:58:9d:0f:f6:c1:57:d9:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:3F:0E:59:5B:5C:60:83:B8:75:5A:DF:5F:EC:CD:81:1D:39:F9
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:1f:d2:87:04:66:fd:92:21:97:52:c3:7f:86:05:c1:d9:
cd:39:a6:9a:a7:94:35:17:1d:a7:78:f6:b7:e5:5f:66:e6:25:
26:54:42:03:bf:7c:38:52:26:4b:88:c1:2e:1a:df:37:2a:1e:
b8:2f:40:41:93:36:f3:c5:87:e8:bf:dd:10:a6:a5:a3:1f:96:
bb:59:b3:a4:9b:0f:e8:19:ea:51:54:39:eb:b2:27:87:b2:7d:
24:f9:82:ec:56:5d:f9:c4:1f:8d:cc:5c:6a:81:47:cc:99:64:
c9:29:15:3c:de:53:1f:15:e0:11:61:4f:30:da:6b:01:67:34:
a5:a4:46:55:4d:34:19:8e:8b:9a:15:c3:35:53:9c:94:b8:f3:
5d:87:82:6c:87:9b:81:58:bb:b4:21:34:c0:80:01:18:92:2d:
a2:e0:78:fd:0f:4e:5c:0b:7f:f6:35:78:c4:3a:94:90:03:03:
b0:02:4a:95:3e:f3:3c:98:e5:93:0b:0f:e3:c0:ac:f5:57:e1:
a6:0e:6f:e0:a8:e2:06:8e:1b:6f:6b:d0:9b:60:f1:46:7c:bb:
9d:1f:03:45:a3:43:24:01:21:17:1d:83:57:12:b0:75:1f:fb:
45:1b:e6:f5:84:8a:c5:a1:d1:7f:24:39:3c:7f:5c:60:42:df:
44:31:e7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:50:04 2025 by rpki-client