Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: lTv0Jv1Se8JE0JU9oEj+O0bvW0reABSsBdi1J8zED7I=
Subject key identifier: 27:D6:D0:12:FD:73:5B:D4:F6:CF:4D:4F:95:E7:28:B7:9B:82:BF:F0
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 0199FE0FD35F43A673C4DAA599615ED5F89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 20:01:13 +0000
Manifest this update: Sun 19 Oct 2025 20:01:13 +0000
Manifest next update: Mon 20 Oct 2025 20:01:13 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: 9dcm5aBJjrSaE7oJIhmaYjbBKttKz6NCnpwWqjoeM84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d3:5f:43:a6:73:c4:da:a5:99:61:5e:d5:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Oct 19 20:01:13 2025 GMT
Not After : Oct 20 20:01:13 2025 GMT
Subject: CN=27d6d012fd735bd4f6cf4d4f95e728b79b82bff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:cf:ba:57:a1:58:62:9a:43:89:13:cc:ba:
14:b9:21:4b:c5:cb:d5:57:12:6e:99:c3:32:59:9d:
97:0c:97:cb:02:34:bb:4a:3e:ec:09:29:a8:dd:86:
31:39:18:34:f4:08:c5:fb:f0:74:c0:2a:45:06:59:
ec:9d:0d:b7:35:1c:c0:2a:3c:2e:d8:44:f5:d3:29:
bb:d2:57:f2:89:23:12:bd:16:ec:69:3a:ad:30:25:
88:a4:1d:ac:c8:56:5e:d9:1b:18:2f:51:a2:fd:85:
e3:4f:6f:20:78:3a:fe:fc:93:e3:35:90:5b:c8:b9:
73:a6:13:39:0b:21:f4:d9:5b:30:47:61:29:4d:d8:
d4:32:ce:63:a4:75:3f:8a:0a:76:14:a9:e7:ca:15:
2a:5a:08:50:bb:14:e2:4b:15:3b:8f:1c:3d:96:01:
bc:92:75:14:7d:19:81:01:e0:46:2c:10:67:19:6e:
36:6d:95:03:0b:0f:aa:c1:22:da:7b:90:b5:4e:03:
40:9b:6f:28:5a:69:02:c2:60:ab:5d:cf:f2:11:d3:
6e:25:dd:d1:97:9b:b3:92:05:95:ac:74:84:90:7d:
de:0f:8a:4a:27:a4:06:40:54:6c:d2:4e:06:56:c4:
57:97:20:a2:8b:e4:55:e9:38:d5:35:a9:04:d7:ca:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:D0:12:FD:73:5B:D4:F6:CF:4D:4F:95:E7:28:B7:9B:82:BF:F0
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1b:16:7a:40:9f:b4:81:7c:a7:c6:4c:4d:97:7f:9b:d9:08:
a4:ce:02:1d:03:63:11:ce:9b:c5:3d:86:6a:d4:df:6e:2a:05:
f4:57:fc:ff:70:3b:ce:c5:0e:f1:b4:e2:56:23:81:90:6e:42:
38:86:86:2a:1c:bd:83:13:ee:ba:4e:79:c4:25:a3:ff:af:21:
08:5f:77:97:ef:6e:1f:de:f5:55:57:67:9a:76:92:74:dd:73:
47:f7:fc:05:7c:f0:11:8c:be:ff:04:97:af:b4:68:c2:27:37:
20:ce:c3:ca:be:fc:ca:59:e0:e9:1c:47:eb:ae:ae:13:a0:0f:
2b:94:fc:a4:5b:38:7e:69:1e:72:56:06:9f:1d:04:fc:2f:55:
71:79:53:b5:f5:2a:ca:91:76:c3:87:02:73:ad:47:72:59:9a:
31:1e:ad:e6:c3:e7:2a:ea:4f:5a:2e:84:66:2c:cc:e2:b7:d1:
44:b8:b4:ad:71:45:9e:00:dd:9b:d8:a6:11:17:24:6f:e0:82:
4c:8e:50:15:00:30:3b:b5:e8:02:95:2f:5b:d6:b7:33:3b:1c:
80:58:1e:e6:88:3e:e5:4b:d8:20:eb:6f:b0:23:03:f6:99:6f:
e3:cf:bf:1d:d0:1f:0a:5e:2a:ed:a7:29:3e:28:69:d3:dd:c1:
86:01:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:41 2025 by rpki-client