Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
File: P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json)
Hash identifier: 0S9Y0VLbvwz/Re6WEt7eBFGifN+6UXks4cjgwEOBbvI=
Subject key identifier: DA:03:0A:15:0C:6F:69:1A:27:57:7E:7E:58:14:A9:AE:BA:AA:A6:EB
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial: 0199FFC7AA16BDC86CB14ABF0C2881215BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
Manifest number: 03FC
Signing time: Mon 20 Oct 2025 04:01:39 +0000
Manifest this update: Mon 20 Oct 2025 04:01:39 +0000
Manifest next update: Tue 21 Oct 2025 04:01:39 +0000
Files and hashes: 1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: HSHSDFdg0SNGnxMZjgh1S2KhWyZirS62HdfWdZbE0Ns=)
2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:aa:16:bd:c8:6c:b1:4a:bf:0c:28:81:21:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Validity
Not Before: Oct 20 04:01:39 2025 GMT
Not After : Oct 21 04:01:39 2025 GMT
Subject: CN=da030a150c6f691a27577e7e5814a9aebaaaa6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:86:f6:21:65:8f:fd:2c:59:46:ef:ff:24:
05:7f:5f:08:63:ae:cc:1b:f5:f8:4c:3c:9f:5c:9a:
28:da:d2:14:2e:a5:f3:a0:be:ed:63:97:ed:5f:ab:
d9:7a:46:e1:ae:34:db:a8:46:e9:5f:e8:53:6b:8a:
25:93:b6:87:c2:d1:51:1f:2e:f8:cc:cf:66:38:04:
19:1f:b0:b0:27:af:a9:bb:4d:a8:4a:19:22:67:bd:
71:d8:cb:7b:6b:ea:c5:a6:51:05:e5:69:f8:74:6d:
47:72:38:50:36:1d:74:9d:f0:ec:82:9e:ee:1f:bc:
27:92:93:76:94:e8:41:b2:da:37:b2:8a:58:64:62:
92:30:6f:d9:99:a3:0e:aa:81:5b:da:31:4e:66:80:
a0:69:f1:fe:a4:1c:b0:0d:68:85:c9:87:31:f8:4c:
0b:e6:12:98:cc:23:60:39:85:5f:8a:17:00:d3:59:
2f:bb:4c:cd:ae:be:97:7b:e2:7f:a5:b8:1f:d5:11:
fd:c6:86:29:9a:13:8b:56:e0:1a:25:fd:a3:75:69:
0a:53:5f:e6:31:90:52:fb:0b:a2:e7:e9:84:5d:96:
41:98:6d:8c:35:4f:c1:4c:ec:8f:39:85:4f:da:3e:
71:ed:74:c3:ae:2a:61:9d:24:1b:14:f2:fe:0c:90:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:03:0A:15:0C:6F:69:1A:27:57:7E:7E:58:14:A9:AE:BA:AA:A6:EB
X509v3 Authority Key Identifier:
keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4f:25:ed:8e:6d:98:56:ba:b6:2e:c6:be:5e:81:31:a4:23:
7d:5c:bd:aa:1b:0d:1f:d4:f1:70:3f:a5:53:af:d4:46:49:81:
a3:d3:e2:7a:68:5e:06:b9:33:82:78:ad:50:97:07:fd:0d:22:
bb:42:28:56:49:e2:d0:db:b6:33:b7:70:b8:c8:31:be:74:c7:
fb:bd:05:53:04:43:5d:e4:54:35:c8:bf:17:c9:94:00:15:40:
82:e9:40:0b:5c:5a:2a:aa:81:e5:62:d8:c9:48:a4:3b:f7:e5:
41:d5:2b:02:66:3f:c7:b0:54:4f:cd:35:1f:60:f2:51:31:71:
f7:3b:5e:33:ad:97:e4:c4:52:02:d2:b9:22:1a:3c:60:4f:4c:
e1:ef:0c:bf:6d:e2:c1:26:0a:56:42:2f:12:9a:94:0b:1d:cf:
6b:ed:42:82:65:e0:b4:a4:f8:58:0e:a3:0e:42:73:80:c6:1b:
61:68:39:04:4b:91:50:cf:d0:e6:d8:0e:f2:22:98:11:42:13:
3b:0c:bd:ed:64:0e:7f:75:71:07:1f:bf:2a:16:aa:6b:cf:81:
0a:ef:d3:f4:7e:d2:f6:26:78:b6:65:48:ab:50:57:0d:96:b1:
09:22:71:e3:f1:01:c5:5e:97:0b:e8:1a:76:b0:cf:62:1f:cf:
8b:14:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:53 2025 by rpki-client