Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: SUO+3kRCsUDnn1x1W0izJOJr8O33iTOAwes61xWd150=
Subject key identifier: 3E:10:40:E1:A6:28:C9:3A:35:07:94:C6:2E:2B:08:2B:2A:D2:FE:68
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 0199FDD916599AAB7AE6C7E115E7B6F2BDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 15CF
Signing time: Sun 19 Oct 2025 19:01:26 +0000
Manifest this update: Sun 19 Oct 2025 19:01:26 +0000
Manifest next update: Mon 20 Oct 2025 19:01:26 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: flrED7AXv2VyOGY337rPsiO18s+WAIwjLNftrnIOgv4=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:16:59:9a:ab:7a:e6:c7:e1:15:e7:b6:f2:bd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Oct 19 19:01:26 2025 GMT
Not After : Oct 20 19:01:26 2025 GMT
Subject: CN=3e1040e1a628c93a350794c62e2b082b2ad2fe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:33:b3:8d:cb:bf:c2:09:09:52:d3:e7:fc:
5a:3b:9f:77:f3:63:ef:8a:15:6b:26:e3:fd:73:d9:
a2:d3:67:1b:ee:88:13:9d:40:da:d1:8d:45:2f:b1:
d2:d2:8d:7f:98:e5:64:24:7d:2b:09:19:c8:92:71:
db:9a:4a:26:e3:80:c1:8b:4e:e7:0a:51:af:82:03:
d5:87:86:19:86:b0:bb:e6:9e:1b:8f:1b:41:89:f9:
4f:ea:7f:5d:57:e4:d9:bb:03:ac:4c:3e:b5:3e:94:
09:f4:2b:8a:37:55:cc:8b:04:4e:56:5b:00:5d:b2:
ef:c6:d2:c8:e0:91:be:28:8d:d6:8a:66:3e:f0:f4:
52:79:82:db:ca:c5:c9:17:ff:14:84:da:40:61:12:
30:a7:3f:38:8c:69:b5:88:80:ce:45:2d:4a:be:74:
7c:1f:77:df:3e:8d:f1:71:9f:e0:7c:c0:5a:10:eb:
f4:44:e4:55:dc:92:02:ed:3d:b3:7d:9c:4d:03:78:
ee:c3:45:ac:bd:24:02:51:65:fd:79:33:87:80:ba:
63:3b:b4:f3:1d:26:2b:de:8d:06:cb:a7:a4:78:78:
bc:2b:6f:b0:55:b3:26:35:64:b0:e7:33:e8:c3:1c:
26:18:11:56:25:09:86:ff:f7:fa:bf:95:4d:97:01:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:40:E1:A6:28:C9:3A:35:07:94:C6:2E:2B:08:2B:2A:D2:FE:68
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:73:2b:b6:62:ac:5a:b7:87:86:4e:ac:70:8c:89:2e:58:be:
a0:c9:c6:7f:38:ea:cd:d7:73:c5:4c:fe:30:55:66:2e:dc:52:
a6:54:f6:e9:fe:a0:d5:69:41:20:86:09:6d:f0:ad:b9:86:7b:
ad:5e:49:f4:3a:55:83:d6:38:f5:08:3d:c0:f7:23:a5:7e:cb:
36:e7:b7:18:df:ac:28:ec:08:8f:bc:c3:92:84:69:ff:c4:a6:
f0:93:10:ac:94:e3:b5:5a:43:62:49:5f:a6:45:d2:b9:93:90:
fd:6f:ea:75:80:a8:31:6f:ff:ee:d9:9c:26:ca:da:74:a3:f9:
7f:1d:85:e6:98:db:3c:83:a9:81:56:d5:d9:72:52:f8:ef:81:
ea:28:9b:3b:17:ca:1d:b4:de:05:cf:7c:d1:22:f9:e9:12:43:
50:f6:15:d1:64:33:9f:5d:7f:04:ee:eb:87:f7:77:60:cc:b0:
03:b2:26:ca:29:77:c3:34:75:b4:ff:33:b1:bb:fb:70:66:cc:
f4:09:ff:e2:d2:db:5d:81:05:db:f9:4f:f0:cf:18:d4:e4:1c:
94:71:a7:6f:e4:13:de:71:7c:0b:92:a0:b2:c6:ce:42:bb:16:
b4:03:58:29:79:a7:cf:f6:69:58:81:d3:3d:42:e5:d1:79:ac:
79:82:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:06:11 2025 by rpki-client