Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: jXgt5qkg7tElioDETv2dfGsTWxV31Wyh0M/HMWccsW8=
Subject key identifier: 4D:20:09:48:39:3A:FC:11:90:3D:FB:16:18:94:CB:81:2B:80:77:E2
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 0199FDD9E9E36B3228107F002BF803A0980C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:20 +0000
Manifest this update: Sun 19 Oct 2025 19:02:20 +0000
Manifest next update: Mon 20 Oct 2025 19:02:20 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: pM/aGG9nfJz2LcvUHFLhSymFZ49KqDjGZRdcgu2ackg=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e9:e3:6b:32:28:10:7f:00:2b:f8:03:a0:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Oct 19 19:02:20 2025 GMT
Not After : Oct 20 19:02:20 2025 GMT
Subject: CN=4d200948393afc11903dfb161894cb812b8077e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:da:e9:e7:3e:3a:ac:c6:d2:32:28:7c:29:f6:
3c:b7:b2:76:96:67:5b:81:4f:fc:9f:00:74:f7:91:
48:90:3c:9e:9b:a0:52:1f:c3:cd:a1:58:0e:ec:22:
42:9a:9c:44:36:3b:ba:ef:91:1e:f1:42:fe:75:0b:
23:4c:47:5a:bf:72:d8:08:f4:df:80:53:79:f3:ef:
1d:d4:00:0c:ff:59:a8:b1:d6:06:fe:b7:e9:e4:41:
5b:d3:dd:5d:b1:b4:db:e3:e6:7c:4e:c1:53:3e:4d:
bb:97:2a:6e:b0:b8:3b:dc:11:67:37:1f:2c:8d:66:
a8:79:7a:2c:e8:e5:11:c4:b6:ac:c8:33:54:ca:dd:
7d:d4:4d:82:b7:8a:2a:b8:b3:63:f9:13:20:c2:45:
8a:a4:d2:0a:bc:25:55:45:ad:e7:ee:e8:c6:2d:da:
39:42:2c:ad:8c:52:0c:ad:2e:1d:aa:65:9e:2f:2b:
e4:29:cb:8b:04:ae:d0:50:b0:26:22:36:a6:09:c7:
e6:bd:8a:9a:25:66:1e:c1:fb:06:3a:b9:b4:d6:2b:
eb:2c:98:88:a7:2c:a2:3f:ab:74:20:33:25:d8:4b:
3c:26:6c:ad:5e:79:16:11:68:8e:15:92:5c:94:ec:
cc:af:c3:73:39:13:ad:bd:37:c7:84:99:ab:e1:18:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:09:48:39:3A:FC:11:90:3D:FB:16:18:94:CB:81:2B:80:77:E2
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9b:7b:cc:88:1d:92:eb:98:2e:b5:63:f0:aa:24:06:91:79:
4a:ca:de:bd:d9:e7:5c:9e:a1:5b:a6:79:6a:16:01:81:45:fa:
18:60:ec:a6:4a:44:78:95:dc:65:80:5f:1b:b2:46:9c:36:61:
b4:20:4e:a3:76:95:aa:41:56:d6:7c:5d:2d:18:6d:dd:a0:c0:
de:f0:05:70:cf:be:20:71:92:d7:4d:b3:70:77:51:5d:97:5d:
fa:23:cc:4e:4a:f5:ca:17:e4:02:5a:88:65:3b:4b:67:14:2a:
67:c1:fe:d9:4d:32:15:0c:ca:4e:d8:21:de:56:b1:47:e9:bc:
99:11:18:83:96:cc:b4:42:e9:5b:6d:f0:cd:d4:20:5a:d1:7c:
12:10:da:8b:3b:ef:f8:8e:3d:7f:08:20:3e:e4:32:8a:87:ec:
86:13:d9:35:88:07:a4:8c:f3:d9:74:69:3b:39:1b:f8:bf:5c:
e4:2b:88:bc:6e:f2:0d:de:1e:fd:e3:b9:8a:3b:56:82:20:ed:
87:13:32:70:4d:ed:0a:1d:28:f9:4b:bf:69:57:26:d3:0c:20:
4c:17:a9:b7:57:d7:98:24:58:01:b7:2e:2c:fe:e7:4a:84:1c:
0a:0b:25:0f:22:bc:c8:09:4f:fa:1b:9d:88:62:bb:66:08:9f:
7d:5d:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:45 2025 by rpki-client