Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File: R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier: cAGeeCMt7EOiyVxqDpQhxN+19BoQNgs2qCtB5kZDRto=
Subject key identifier: 43:6A:0E:AA:B0:10:48:2C:0E:FF:CE:01:BA:9D:9F:EA:E0:1D:51:7E
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer: /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial: 019A0110F2C0FEA1DC2DD48A1680B898202A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 10:01:19 +0000
Manifest this update: Mon 20 Oct 2025 10:01:19 +0000
Manifest next update: Tue 21 Oct 2025 10:01:19 +0000
Files and hashes: 1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: ndIG66vbfig+WcrDgwVSQUShjiRZQyFkPx3CKZd8geo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:f2:c0:fe:a1:dc:2d:d4:8a:16:80:b8:98:20:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Validity
Not Before: Oct 20 10:01:19 2025 GMT
Not After : Oct 21 10:01:19 2025 GMT
Subject: CN=436a0eaab010482c0effce01ba9d9feae01d517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:73:3c:c6:d8:d5:27:d4:42:e7:dc:69:7a:
1f:05:11:33:c8:89:42:2b:f7:88:c4:f5:cc:8f:56:
ea:f7:34:64:27:40:b6:26:6d:a7:11:ca:22:ee:96:
fe:b0:14:f7:53:ed:f8:49:ab:14:6e:64:1c:2d:24:
cc:a4:b0:98:c5:48:af:77:63:d7:49:2d:a3:ad:12:
f8:bb:a5:de:d5:fd:98:81:15:34:6a:60:78:3d:d7:
06:5f:2a:30:e0:ce:22:f4:7c:3a:2d:d1:a4:49:1f:
fc:9b:53:aa:78:89:5c:c8:18:39:b2:6b:51:1e:e7:
e0:4d:1b:b3:de:4a:70:a5:10:92:2f:c5:a8:85:0a:
8c:60:a0:77:73:5b:b0:12:fa:b3:03:20:ab:aa:67:
16:8a:cc:70:c1:cd:f9:f7:b9:5a:2a:45:88:d6:64:
44:14:33:e7:55:13:77:42:72:10:70:42:1b:34:c0:
c5:af:ef:67:34:6e:ae:a7:ff:71:bf:b8:f2:a6:15:
de:59:61:17:13:3c:8b:f4:37:4c:4d:4b:27:7e:36:
cc:9f:5e:84:72:25:81:b2:22:12:18:b6:29:c0:58:
e0:0d:39:4c:ff:2d:5a:43:d9:ae:d8:ad:07:e9:1e:
00:7c:27:83:cc:75:a1:19:dd:df:43:f3:8c:24:ed:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:0E:AA:B0:10:48:2C:0E:FF:CE:01:BA:9D:9F:EA:E0:1D:51:7E
X509v3 Authority Key Identifier:
keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b9:31:e5:a1:aa:a3:fa:2f:5b:ae:22:aa:f8:79:d2:84:9a:
e7:51:7c:08:00:fa:d3:17:3a:28:e6:53:fe:ad:61:49:c6:b3:
70:28:10:98:50:d0:2b:84:99:33:8c:01:cd:5c:48:08:5f:ac:
64:3b:7f:37:30:9f:b0:b5:7c:95:b9:f3:89:a2:76:c0:bd:65:
3b:dc:26:74:39:ac:5c:82:3c:84:97:e6:d0:4c:fb:dd:27:de:
af:ee:33:bb:4f:3a:f2:08:df:7e:48:c1:0b:d3:d7:64:dd:bb:
ca:87:44:45:bb:c0:1a:89:81:7a:ec:7e:57:8b:3e:bf:1d:88:
04:55:6a:5e:16:83:5c:fa:19:33:48:82:4a:af:0e:26:2c:8d:
ec:cc:11:b7:bb:0a:cb:0b:e8:f8:57:bf:47:f5:d1:33:53:18:
a0:49:ed:4c:ec:50:c1:45:be:88:6f:79:8a:65:11:78:f3:51:
83:07:a2:e4:ff:af:29:66:cb:b0:88:e9:b9:41:9d:1c:63:b7:
fd:f5:38:0b:d0:e2:c6:53:57:66:1b:98:f6:95:8d:4c:0f:e6:
5c:e7:12:d1:3d:e0:7f:5b:8a:0f:66:86:b8:73:f2:ca:a4:34:
4b:b9:14:82:bb:91:6c:70:38:26:ea:f0:91:c2:ec:ab:de:90:
e3:b0:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:04 2025 by rpki-client