Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
File: 8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json)
Hash identifier: EmISPQ8iJ7HOz98BgebBAtnmyGNCxjt0NBUU396C60w=
Subject key identifier: 65:7D:2F:86:AA:30:0E:F6:3B:0D:86:F1:91:4A:FB:F1:E7:E5:57:B1
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial: 0199FD33E019D3DF4FFFA8BA1AC3DF1382F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
Manifest number: 0F58
Signing time: Sun 19 Oct 2025 16:00:59 +0000
Manifest this update: Sun 19 Oct 2025 16:00:59 +0000
Manifest next update: Mon 20 Oct 2025 16:00:59 +0000
Files and hashes: 1: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: uJxsDfOonKwT2mlCLl3m4l+srwxWAEOVmnYzPuGK6QU=)
2: G1CMU250DLNf-oup7Q0hOPQNrZw.roa (hash: 0pwKFn2zlhCRBk1YacOr41wGcqVSw2Yno4Qxh/muNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e0:19:d3:df:4f:ff:a8:ba:1a:c3:df:13:82:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Validity
Not Before: Oct 19 16:00:59 2025 GMT
Not After : Oct 20 16:00:59 2025 GMT
Subject: CN=657d2f86aa300ef63b0d86f1914afbf1e7e557b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:87:87:4a:79:0b:91:a6:3a:a9:5e:30:27:
43:f4:d2:9c:ef:ac:9a:bc:a5:f9:f4:cf:89:70:e9:
fc:bb:3f:d4:1d:13:3a:15:67:45:a3:05:d1:07:cd:
62:cb:3b:9b:48:7b:f5:08:f3:9b:c7:94:d1:96:fe:
31:be:f5:c7:a5:44:2e:fd:17:34:1e:10:1c:02:c1:
a8:b8:a5:44:cd:a4:f4:f9:fb:17:17:45:dd:6d:a1:
24:22:c1:98:0e:44:7e:58:76:3f:c9:db:71:fc:74:
f3:84:29:b2:05:c7:29:1e:a1:3a:b3:6b:81:e6:74:
54:21:73:9d:9a:50:6a:d0:f2:71:93:cf:08:95:58:
98:a9:37:18:b4:1a:28:70:91:ca:83:1e:19:51:25:
7c:9f:a6:fc:c1:b4:3e:88:b2:5e:cd:5e:71:7f:28:
73:76:2b:b3:84:89:94:fc:41:8b:60:94:c2:94:7e:
78:e5:31:e6:e4:71:f3:3b:6c:43:66:71:45:52:aa:
25:64:fe:5e:ea:61:6c:20:79:91:df:45:cb:7b:56:
34:b6:81:1a:c3:eb:b4:ed:6e:6f:09:3b:18:42:de:
3f:48:97:8d:62:3d:9e:f3:97:f3:fb:66:a1:49:3d:
c2:63:db:31:9f:65:57:8c:97:fd:03:02:09:e0:28:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:2F:86:AA:30:0E:F6:3B:0D:86:F1:91:4A:FB:F1:E7:E5:57:B1
X509v3 Authority Key Identifier:
keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9d:5e:de:1b:db:7f:32:a9:9b:cc:91:ea:95:0d:b2:91:7a:
49:31:00:08:62:f0:8a:f2:f7:37:eb:86:c3:d0:b8:33:b8:74:
35:2e:28:46:3e:a0:41:7a:7f:55:b4:a5:47:03:7c:44:df:45:
68:c2:65:76:51:4b:8b:80:7b:24:36:b0:b6:1d:30:f0:8e:78:
c7:3b:cb:99:f0:3c:3c:b9:25:28:ae:20:c9:e2:99:ca:d9:78:
36:ee:59:3c:d8:58:54:09:37:33:98:ac:94:a9:37:da:4c:2a:
96:aa:01:9b:ac:22:2c:3e:3d:64:f2:d9:d9:7a:d9:16:6b:0d:
13:51:2b:28:b7:d2:79:a6:6f:22:44:53:91:ff:9d:67:ad:b0:
0d:3c:ab:25:10:e3:62:39:f9:04:ec:27:7c:1a:22:bb:6e:6f:
a0:cd:11:e8:82:59:b4:6c:c2:d7:f0:9d:59:05:e1:95:d8:9c:
3b:cf:c1:94:00:0e:6a:a3:62:b9:d9:61:95:38:d3:7e:89:45:
51:37:2d:c8:33:8f:c8:2c:40:ce:06:61:07:d7:78:34:aa:0d:
41:58:f8:35:0b:2a:38:19:e5:32:2c:dd:bc:d8:a2:ff:a8:d9:
f2:07:e3:e6:ae:59:40:4c:4e:7e:47:ce:9b:ca:9e:c1:67:25:
c6:d7:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:29 2025 by rpki-client