Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier: 3Y8Gj0fVgePQPYvBgCFUvQCZG9Nf/C+mvP5+mXsMsis=
Subject key identifier: 0E:D3:BC:87:07:69:36:E7:2D:3C:9E:11:0C:2A:0F:DF:0E:DF:6F:3D
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 0199FD6AED1F50AF382D8279BC1121ECC036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:07 +0000
Manifest this update: Sun 19 Oct 2025 17:01:07 +0000
Manifest next update: Mon 20 Oct 2025 17:01:07 +0000
Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: C6BWCVKnq1qGqNr9p7due7Ee0o+gArJ1l35lF5j1EF0=)
2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ed:1f:50:af:38:2d:82:79:bc:11:21:ec:c0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Oct 19 17:01:07 2025 GMT
Not After : Oct 20 17:01:07 2025 GMT
Subject: CN=0ed3bc87076936e72d3c9e110c2a0fdf0edf6f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:27:7d:3c:de:a0:52:69:ee:37:68:f2:2e:
02:d5:9e:cf:b9:ee:21:de:fb:9f:49:4c:a9:b8:4d:
59:39:7b:2e:8a:fa:21:4d:3e:51:78:eb:09:e2:f5:
a8:f6:d1:1c:34:0f:40:c1:c7:69:2d:7b:8b:1e:bd:
b8:28:3b:45:d4:8e:4b:d2:fe:05:cf:98:65:44:9b:
bb:b5:65:f7:18:96:e8:00:2e:ca:22:9f:82:9b:a0:
ed:72:43:a8:f1:4d:b3:d9:97:62:ce:bb:9f:28:11:
df:25:bf:c2:78:b3:d9:9f:b4:78:e4:20:23:a9:17:
e0:08:13:5a:9f:7c:b8:ac:00:b8:e3:ce:7b:25:1d:
05:04:18:18:bc:25:46:63:53:e4:1b:4b:48:fe:69:
91:18:6e:a6:b2:07:2f:2e:f3:20:0b:0e:62:2a:8e:
23:66:9d:b9:9b:b1:b8:2c:28:62:fa:67:76:5b:29:
8a:98:1b:97:2c:9d:d0:ad:9d:cc:75:26:91:63:79:
ff:dd:72:00:75:22:83:94:83:be:54:09:7c:c0:5b:
6a:c9:55:95:93:cb:1b:56:33:42:34:79:a0:06:21:
19:f6:8d:7d:33:ef:59:63:b6:ba:98:45:38:23:37:
44:69:6c:90:fc:ba:18:dd:1a:8b:94:c9:6b:33:8e:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:BC:87:07:69:36:E7:2D:3C:9E:11:0C:2A:0F:DF:0E:DF:6F:3D
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ca:7f:21:42:09:44:5d:0d:f9:cf:8c:a5:23:d2:ef:92:8c:
75:df:fe:24:88:91:46:fe:b9:82:96:ee:90:91:83:4b:9f:9c:
e7:22:b6:55:ee:b2:9d:4d:40:b4:ff:71:0f:b7:6b:8f:fd:d0:
3d:c3:6d:49:58:9d:ba:6a:4d:b7:f3:3f:09:28:06:cc:77:65:
67:c0:ef:10:b4:75:e6:a9:3c:e6:55:81:bb:a5:ec:c8:b1:a1:
c8:fc:33:92:b6:65:7b:bb:7a:17:bc:c8:14:82:4e:ad:6b:c8:
fe:aa:0e:28:69:1f:3b:ff:03:48:c9:71:57:a2:4b:e1:08:97:
c4:5b:78:15:bd:1f:12:2a:61:0c:6c:43:07:8d:b3:d8:21:64:
76:cb:0c:74:02:7f:e9:f6:c8:10:9d:a9:a2:90:41:9c:16:de:
1d:bb:75:92:94:af:33:72:d3:50:d2:08:76:80:d2:45:dc:87:
d7:3f:8f:b6:74:6b:a8:7a:c2:f8:22:b7:75:4a:d2:36:58:5a:
5e:e5:b0:ee:2d:2e:35:62:68:5c:8d:a0:72:f9:e3:b7:12:5e:
3e:68:a4:6a:e4:30:5b:25:07:f4:22:17:c7:da:67:f6:a7:0b:
17:ef:45:fb:ae:86:27:e6:fd:05:06:76:64:70:36:34:41:0f:
16:d0:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:40 2025 by rpki-client