Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier: LH5JX1zkpqGqbNqokYnRIwPmeuIq+2rWEI38SBKqXvs=
Subject key identifier: 91:49:4E:A6:CA:47:A0:59:BB:7B:ED:F5:CA:83:B3:63:1C:30:6B:32
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial: 0199FBEBF8E7A6813D4D449B6303AE48BD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number: 0619
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: s5GXu69SHfoG96Iwj/WBVz9bbThXHp07ZsP+jERd/nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f8:e7:a6:81:3d:4d:44:9b:63:03:ae:48:bd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=91494ea6ca47a059bb7bedf5ca83b3631c306b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:7b:eb:1e:0a:74:7c:32:c0:83:9d:50:c8:
d1:8d:a2:12:03:ee:5d:1f:2c:ae:9d:b6:b7:dc:c4:
6e:c5:28:7a:6d:c3:cb:5f:9f:ed:53:ed:aa:aa:7f:
bd:2f:6a:e2:2c:1f:37:4b:86:56:9a:df:c2:31:f0:
2f:fb:83:86:da:bc:9e:f6:7f:4d:0f:e5:63:85:9c:
d6:26:cb:fa:a9:d1:34:40:8b:9c:5b:df:d5:a4:9c:
e3:85:9f:45:b7:75:04:5e:aa:70:04:74:46:73:01:
b2:15:2a:90:e4:66:f2:0a:21:45:40:27:52:50:40:
fb:5f:4c:0f:f0:68:c8:af:a1:d6:5d:09:de:75:3c:
0e:d7:fa:4b:eb:c1:0e:c1:9f:a5:9a:6c:c3:24:0f:
fb:69:67:8c:5b:c0:ec:dc:a8:4d:70:b3:54:f2:d8:
c3:2c:94:96:60:02:9a:22:a8:8f:71:7c:8a:ba:bc:
a8:38:11:16:be:99:f6:44:e2:9a:fc:93:82:5d:07:
95:cf:21:c9:24:cd:b1:80:76:1e:7c:f1:bd:d4:52:
cb:d9:23:48:71:87:cc:d5:02:2d:3e:a7:27:90:10:
22:c2:99:69:9f:f2:52:63:30:c4:af:ed:62:aa:c5:
a6:b4:3b:f3:64:c1:b5:08:c8:3b:d6:b3:2f:99:78:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:4E:A6:CA:47:A0:59:BB:7B:ED:F5:CA:83:B3:63:1C:30:6B:32
X509v3 Authority Key Identifier:
keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d2:d2:3b:aa:8a:b8:d9:99:26:33:45:13:37:aa:0e:93:61:
ec:e7:bb:61:39:c5:12:60:67:68:12:e6:4b:2f:56:a0:5f:c5:
a3:0e:b0:48:c6:8b:fe:87:08:ae:83:2b:3f:c7:64:8d:66:70:
ed:21:1b:45:45:5f:8b:fb:e7:ad:77:0b:eb:9f:7e:f5:06:a3:
a6:10:89:03:1f:40:24:9a:5e:cf:26:e5:b2:18:a7:de:c4:16:
ea:e3:0d:1c:55:a8:2b:f0:d5:d4:37:37:46:07:a9:d4:23:dc:
51:cd:4f:01:bc:f6:ea:cd:de:46:d2:f0:7b:ec:97:8d:4b:58:
30:62:6e:42:0f:64:a6:eb:91:3f:fa:e5:10:fc:a7:71:fa:e7:
af:9a:6b:e0:90:79:4b:18:ff:0c:36:07:94:f9:87:a9:86:06:
be:3b:6e:ad:c9:24:ce:05:f4:18:eb:4c:bd:6c:0b:f3:fe:07:
e4:d7:08:ea:36:89:02:40:ad:6a:3f:b3:02:48:d7:dc:a4:8a:
4b:c9:6f:3c:23:de:e8:fe:c4:84:b0:31:dc:74:83:9d:43:f4:
d3:fa:5a:5a:df:e3:26:c6:d1:21:7b:88:a9:3f:82:5b:a8:63:
80:79:56:3c:c8:cb:8f:b3:ee:51:4f:ef:b1:bb:a7:bc:28:38:
6f:50:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:14 2025 by rpki-client