Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: GrsDsbYO8HNU/dn5RPc0vqYnxGjfJgaivPLAlwOFkZY=
Subject key identifier: 04:A2:41:7F:D8:D9:F5:AA:27:4C:3B:07:AF:27:FF:A2:7C:E4:8B:A0
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 0199FDD9EAC59052CE50B5B9E7ABEE889E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:20 +0000
Manifest this update: Sun 19 Oct 2025 19:02:20 +0000
Manifest next update: Mon 20 Oct 2025 19:02:20 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: V2lrH2k6d4gjkB8Gl6sxDwTDwbpYNBYYTh8TEoOl0sM=)
2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ea:c5:90:52:ce:50:b5:b9:e7:ab:ee:88:9e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Oct 19 19:02:20 2025 GMT
Not After : Oct 20 19:02:20 2025 GMT
Subject: CN=04a2417fd8d9f5aa274c3b07af27ffa27ce48ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:74:7b:c1:35:1b:6b:4e:b5:5c:86:f8:e3:
ef:60:ec:ef:5f:5b:f6:cb:54:55:a3:f8:9a:7a:18:
1f:2b:c4:24:1c:cd:10:b8:23:f6:be:fe:7a:9f:d5:
81:55:22:ab:72:eb:33:b3:a6:1e:ee:5c:b7:45:7b:
d6:a2:fa:97:f1:bc:5f:15:78:4d:57:62:db:82:12:
b5:2a:76:f0:cd:a6:f5:a9:18:67:4a:cb:19:a4:c9:
46:38:d8:7f:65:64:b4:9c:75:7f:9f:9e:85:0a:2c:
f8:a8:6d:2c:66:23:47:75:95:5b:ae:9a:bb:e9:48:
ab:bc:86:6a:fe:20:ee:50:bb:30:42:a5:dd:65:8e:
e3:8f:70:4c:1b:e2:eb:e8:77:56:94:d2:53:6d:f6:
11:11:a5:30:64:bd:09:bb:a0:4a:a1:e6:77:0f:44:
06:31:21:c8:68:58:5c:ff:b0:71:27:19:d6:e2:82:
08:95:70:4c:d2:8d:25:59:a8:0f:5f:54:46:1c:ba:
21:b9:88:30:13:e8:74:26:60:6f:6b:f2:78:58:f2:
2f:6b:56:f3:ad:69:ad:f2:92:ba:e5:84:28:d0:bd:
ce:5d:cc:d6:cc:7b:b9:e7:f0:e7:6f:4c:f5:29:9c:
bc:5a:83:ee:aa:0b:ca:77:65:57:50:2a:06:7a:af:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:41:7F:D8:D9:F5:AA:27:4C:3B:07:AF:27:FF:A2:7C:E4:8B:A0
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:e0:9e:95:82:af:48:89:a9:ec:ee:6d:b4:41:04:a1:1e:
d8:1f:0a:f4:4f:92:0b:74:8a:28:da:a4:5d:22:dc:a9:a8:18:
d5:7e:d0:88:42:a9:ef:a5:e5:4d:51:6c:33:63:fe:25:7c:d1:
22:a6:95:16:03:ff:98:0e:dc:b3:dd:bb:19:81:9c:71:62:05:
3c:1c:81:87:d3:08:40:7d:e1:56:6b:06:56:ff:87:e3:0c:e6:
12:fc:9b:26:3e:dd:af:fc:b8:79:ff:92:04:6d:9d:56:86:50:
f1:0c:ff:68:21:f1:fa:f1:d7:1c:f9:a2:50:ab:d5:2f:b7:fb:
7d:c7:d5:b7:01:74:be:02:2e:20:91:3a:8d:c1:17:47:1b:3d:
65:36:4e:6a:5f:ef:75:4f:ab:67:0b:54:14:dd:cb:c9:c4:73:
e1:77:83:30:40:37:19:c4:30:59:a0:bb:9b:05:de:55:85:22:
ef:cf:87:5c:5b:f6:1c:b1:a6:e1:14:83:8a:55:27:4f:92:1f:
4f:af:38:b2:83:cc:6e:9c:88:db:57:58:5b:df:ed:ef:06:6b:
1f:00:f4:f4:3f:f1:4c:d5:8e:fe:82:79:f1:de:c9:1b:78:13:
0d:bf:42:8e:31:f4:b7:e0:1a:5e:fb:0c:38:38:46:43:62:ef:
ce:2f:e2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:30 2025 by rpki-client