Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: 8hxH93Si6GZsyA0Q7Pwd0ppWPKEEsNiqNu+TF9na12M=
Subject key identifier: 70:DC:31:3D:9F:6B:BD:B8:77:C2:73:E6:7D:F5:C4:3C:1A:90:20:A9
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 0199FC8F5114D1F81EFD8A91C517C322BCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 06C5
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: e5zxz7UBX+vr16QV87FX/riKCAXFB3lnh5+SjcnVX3Y=)
2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:51:14:d1:f8:1e:fd:8a:91:c5:17:c3:22:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=70dc313d9f6bbdb877c273e67df5c43c1a9020a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:e6:8f:02:b4:16:35:ba:fc:74:27:62:e9:
85:2e:69:48:5c:75:01:17:d9:8b:73:71:46:e0:62:
7d:a7:db:20:e9:86:5c:5f:2e:51:03:b7:bf:dd:f7:
7a:66:b2:0b:90:bd:c3:86:ee:1c:3d:bb:5d:fe:51:
13:60:f4:34:07:40:38:bc:d6:6e:4a:ef:99:b6:aa:
ef:45:07:00:1c:24:4e:8a:b1:70:a9:30:4a:c4:3f:
52:6b:c2:f4:8e:ba:50:76:42:6a:e4:07:bb:52:c3:
50:a7:64:45:19:5c:5f:f9:63:0f:d6:4d:16:ef:dd:
09:63:c8:ab:ae:b8:39:24:19:93:81:18:7a:62:29:
19:d3:45:8e:e9:9f:e2:98:46:a3:ea:51:99:0a:59:
90:c7:78:36:6f:5b:ec:f9:ec:c8:f4:61:ae:51:c2:
ea:14:2f:bc:d0:d3:77:33:60:c8:e5:74:a0:36:30:
0b:0a:83:f2:04:f3:c3:2d:22:29:1e:0f:f3:ef:6d:
70:d4:19:62:0a:ae:c4:6a:2a:9c:a2:54:d4:4b:1c:
c8:3a:bf:4a:86:14:76:9c:af:1d:04:ff:0f:11:f3:
d2:fa:4f:32:33:9f:ca:12:5d:1e:a5:58:dc:3f:c5:
88:ba:e4:d3:55:a9:9d:94:e8:00:22:6b:42:0b:3a:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DC:31:3D:9F:6B:BD:B8:77:C2:73:E6:7D:F5:C4:3C:1A:90:20:A9
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8f:94:d2:6d:df:d5:db:58:3b:7a:e6:a8:b7:de:19:6e:ff:
ba:48:c0:52:e3:a6:0a:6a:b1:5b:a6:23:87:73:44:ab:78:28:
32:08:4a:84:41:0e:60:c7:e3:15:18:03:29:57:a6:c5:fb:31:
cf:56:07:c4:ca:a8:83:ff:3c:46:46:32:69:5a:7c:be:de:27:
83:c4:e4:df:38:f4:5e:3a:4d:2d:c5:57:69:1e:c3:39:73:d4:
4b:50:7a:e1:8a:62:d9:e1:e6:c7:ef:ae:05:3a:9d:62:bd:07:
bf:9c:64:80:1c:67:b9:2d:5d:cd:d0:a4:45:6d:da:4d:2b:c4:
3a:e8:af:d4:ae:d7:47:5a:85:44:c7:e3:c6:41:98:17:64:b7:
1c:a8:68:88:69:31:67:3c:eb:13:17:eb:7a:c5:0e:d1:da:e1:
a0:a6:63:5e:93:e0:73:bc:d4:1a:49:2f:43:ee:90:99:4a:d1:
d7:a4:4e:c8:09:ec:39:cf:28:f5:99:d9:65:3e:84:c3:8e:80:
34:c0:e1:96:ee:52:e2:bd:f7:9c:36:b6:7e:f8:31:2c:0e:7b:
3d:30:5c:9f:a4:47:d6:c3:d4:c5:91:3a:3c:37:cc:6c:e1:f5:
e4:e0:55:9e:00:71:bf:59:dc:5b:c2:29:6c:1d:14:de:92:87:
d9:2e:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:36 2025 by rpki-client