Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: 8eGq2ewdgIXSH3sZMEgcHGBp3C5/bK/33GwkUuDtSaA=
Subject key identifier: E2:B8:89:43:D8:7C:7E:3E:0F:A3:DB:6A:B0:EA:A2:90:DA:AA:17:24
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 0199FA69F8F87616357D9A974D0553242445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 03:01:13 +0000
Manifest this update: Sun 19 Oct 2025 03:01:13 +0000
Manifest next update: Mon 20 Oct 2025 03:01:13 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: FT999P9SjKkbu3gE0aX+p/+2SWL9C0oOaPNxxVBCQok=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:f8:f8:76:16:35:7d:9a:97:4d:05:53:24:24:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Oct 19 03:01:13 2025 GMT
Not After : Oct 20 03:01:13 2025 GMT
Subject: CN=e2b88943d87c7e3e0fa3db6ab0eaa290daaa1724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:f5:ff:ee:10:a2:71:7d:7b:53:f4:f1:af:
54:53:7e:77:b9:f3:e2:6b:b9:bb:91:9a:54:04:3d:
42:47:73:29:dd:31:09:e8:3f:13:22:b8:f1:5b:b4:
af:dd:72:c7:b5:12:e5:cd:16:9d:4d:31:a6:38:c2:
c7:b4:85:6b:8d:31:a3:21:86:0a:fe:9c:b8:b9:1a:
fb:0d:ff:0a:aa:f5:55:d9:52:3a:9d:82:4b:5f:51:
cc:0d:12:38:fe:ac:12:4a:c0:bb:91:69:f4:67:3b:
60:6f:47:d8:40:22:46:be:ab:2d:4c:cf:90:2a:d5:
62:ba:3a:97:db:dd:4f:a1:32:6b:6b:bc:d7:01:0c:
29:a4:d3:ba:c3:08:f8:d9:d0:67:e7:ab:ee:71:3f:
5d:15:15:18:b0:58:49:32:b5:eb:53:c4:f8:e3:4c:
3d:17:bd:3a:b4:81:3a:e3:7e:f7:cd:2d:03:af:4a:
2f:8b:f7:52:80:9c:43:9b:34:24:1b:68:90:f8:8c:
53:b6:cb:41:04:c7:be:49:60:d9:5a:bc:0a:95:76:
5d:3c:d2:cf:2a:34:f3:9d:3f:55:b3:2d:45:3f:ff:
6a:10:d3:3e:2e:c0:fc:c0:a6:d5:f8:04:57:0e:83:
a0:9d:8a:88:60:84:ed:d7:00:45:76:c4:91:71:57:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B8:89:43:D8:7C:7E:3E:0F:A3:DB:6A:B0:EA:A2:90:DA:AA:17:24
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3a:9c:d0:5c:8c:e4:66:77:51:2b:9b:2f:ec:e3:cd:07:7d:
87:55:72:48:59:2f:60:58:fe:63:24:2c:59:ff:8f:80:bb:bc:
74:a5:a8:b8:f8:63:01:fd:5d:63:f2:a1:75:b0:f7:0f:ff:2c:
ad:d9:1b:74:21:16:be:cf:7a:a3:61:0a:31:8a:f3:ae:66:0e:
46:a9:e8:49:5a:34:ff:34:10:24:2d:fc:a6:8c:9b:15:0e:1f:
53:52:f4:65:2e:0f:47:23:a7:f7:32:28:cc:93:2d:1f:1b:29:
3a:50:a6:bc:75:15:95:e6:a8:b1:6a:c3:bc:ca:1a:6f:9d:ab:
bd:69:4e:31:b2:91:82:d0:a3:55:7a:28:91:2f:b1:79:89:3e:
10:f9:69:bc:6d:94:50:f0:ba:20:83:2f:3f:9e:06:72:56:da:
15:f7:9a:7b:5d:e8:1e:52:34:8b:bd:e5:6e:8c:61:53:aa:f2:
46:ee:e6:b6:2b:26:08:9c:95:9b:2f:75:63:95:0a:4c:79:60:
d2:2f:81:6c:37:9f:6a:0c:5f:b8:94:8e:50:e7:bf:5e:99:43:
74:9d:29:31:78:c2:fc:c9:50:15:5a:67:98:c5:a6:43:5e:49:
0e:c1:fd:db:59:36:9a:b8:89:83:a0:bc:94:70:a9:ee:ad:71:
1c:cd:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:29 2025 by rpki-client