Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: WlsPJF2/kWT0zIJdGbUz8/YKbo9b3Aezxwy8Zb5J6ME=
Subject key identifier: CB:8C:DC:EF:4E:90:BB:73:FF:C1:4E:93:0C:DA:CA:9C:4D:9A:73:95
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 0199FC2140E51745B9B223D7F5099BD57402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 12D4
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: 5voaUuD81Cf8ZOINpOKqKAzs2VJpvxrj3dgac8ORcBQ=)
2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:40:e5:17:45:b9:b2:23:d7:f5:09:9b:d5:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=cb8cdcef4e90bb73ffc14e930cdaca9c4d9a7395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:ce:ff:02:76:e0:98:48:44:52:e0:05:3f:
eb:c1:1c:1b:b1:41:4f:d0:ec:17:0e:f7:86:90:40:
73:26:6b:14:70:ba:35:a1:57:79:b6:b9:69:70:f3:
dc:50:e1:81:ac:03:96:07:11:d8:7e:de:99:ea:eb:
e7:f9:50:1c:e2:d1:de:99:8c:3f:44:b3:a3:d1:5a:
f9:a5:be:2c:46:32:d6:7c:d5:00:e5:fb:86:28:ca:
25:9f:a8:9f:35:b9:88:33:2e:ec:af:71:4c:f2:e6:
4c:b5:a8:50:31:d3:8b:5f:d6:91:f0:e1:c2:da:17:
a0:39:bd:0a:39:ed:96:1f:90:42:73:63:f1:c0:b8:
c6:10:5d:dc:a9:a2:83:d5:49:c3:c0:68:ca:df:47:
9e:92:8f:a0:c9:b1:cc:f7:bb:1c:86:11:91:f9:8d:
f0:ae:73:48:f1:b9:be:1d:c3:d9:3e:35:ee:8d:e9:
54:cb:40:8d:9c:61:b7:cc:6c:7d:87:bf:5e:6c:a8:
94:10:d9:ea:19:b1:97:0b:57:5b:fe:82:62:2d:72:
65:26:d8:4f:c3:b6:18:37:06:af:ba:48:fd:a5:a7:
b0:12:b1:5d:7a:21:06:2c:2c:4a:33:dc:f7:1e:27:
d2:5c:48:2e:44:f9:48:4c:8a:58:e0:82:34:b3:f5:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8C:DC:EF:4E:90:BB:73:FF:C1:4E:93:0C:DA:CA:9C:4D:9A:73:95
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:01:a2:fa:2e:10:46:28:3f:54:d9:a3:f8:82:19:7a:84:f8:
b1:aa:2b:91:83:cb:de:71:fa:5f:75:71:18:d3:48:7e:80:cd:
26:6f:52:53:f4:aa:da:fd:7a:67:6a:87:b5:0a:a6:e1:8f:0a:
44:70:8b:5c:d4:6e:f0:b1:f9:02:ef:04:77:97:23:e1:b9:77:
a8:dc:c6:bd:0b:96:6e:92:4f:51:46:c6:8e:0e:ba:c4:5c:90:
a8:eb:fa:17:2c:6c:03:9c:c8:a3:e6:3a:e8:17:a5:a9:f0:05:
77:a7:ed:09:5d:35:28:23:e6:4c:7e:0b:86:67:bc:fe:b3:aa:
84:53:46:c3:92:88:d9:2d:a6:d9:c1:44:c6:5b:69:df:ae:de:
00:eb:ed:ef:51:ac:8f:e6:84:f9:56:ab:b6:ac:7c:cf:5c:ce:
f9:f7:26:27:dc:dd:e6:75:90:9f:3c:3a:74:5b:ff:02:4e:d3:
e9:6e:2b:8b:f0:01:b4:0e:c0:de:9e:9f:41:55:03:8f:ec:10:
4a:1d:72:fd:93:dc:61:7f:3c:b5:18:a6:73:5b:8a:5c:e1:a7:
90:b8:48:37:7f:31:57:d9:b4:f5:28:04:23:1c:b6:25:b4:a8:
1c:40:52:4b:e9:bd:ca:06:10:92:50:23:7a:72:4b:74:0c:93:
73:a4:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:39 2025 by rpki-client