Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier: q6p/BEcGgMM+DKLjoeQSwR6zCUfpPGIepr2zd96j0/M=
Subject key identifier: D8:57:64:64:A6:01:E9:26:41:F3:7F:21:63:F9:78:06:84:7B:EA:FB
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 0199FBEC0B20DF4752DB65E73F97496AC5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number: 0A8C
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: QTsP+QjKxCf5VnGxsI/2wQmopFzZr3mXh7DxYu+bdK0=)
2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0b:20:df:47:52:db:65:e7:3f:97:49:6a:c5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=d8576464a601e92641f37f2163f97806847beafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:29:39:1a:84:a1:8a:c8:e3:40:01:ca:b4:
64:42:00:11:d1:47:31:54:cd:31:45:b3:82:c7:f4:
df:12:fa:db:ee:5f:ae:fe:70:49:2b:5f:20:63:f2:
77:5c:6c:ad:fd:dc:cb:3c:02:a5:5e:64:43:b6:e4:
3a:ab:2e:41:e9:b4:04:6e:e1:e1:45:99:41:23:a9:
a0:94:24:9f:1a:78:e3:10:47:68:43:a8:d6:47:0c:
e6:10:b5:9f:87:b8:1b:3b:26:84:fb:0b:c3:ab:db:
c7:b4:18:0e:4b:30:db:b6:dc:58:b3:6f:21:77:6e:
6a:f8:c5:25:b8:62:c6:79:a1:84:c9:24:58:01:2b:
3d:b3:27:f5:33:03:8f:96:8b:29:e8:1f:76:6c:e3:
46:8d:40:30:ac:1b:79:17:8c:11:59:54:ee:22:30:
da:d6:8c:8b:4e:b2:5e:4d:1a:b1:a9:1f:ec:85:d0:
79:ae:ac:eb:f2:81:43:e7:87:3e:a7:05:f1:58:dd:
e8:8f:51:7b:51:d7:f4:67:cf:5a:45:b2:e9:dd:17:
05:dc:e6:61:7b:9f:90:c7:2f:df:52:34:31:b0:c7:
4d:56:ad:c7:16:3e:e4:5d:bb:96:0f:ab:ad:a5:4c:
e6:61:91:b4:a9:ca:8b:c3:15:94:c4:6c:3b:f1:98:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:57:64:64:A6:01:E9:26:41:F3:7F:21:63:F9:78:06:84:7B:EA:FB
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3f:01:ab:97:8e:35:93:cf:20:27:e9:0c:1f:6e:63:d8:a3:
c6:89:b4:1f:51:5e:a2:98:af:74:fe:b9:bf:75:3d:f6:51:7c:
a1:53:ff:03:f7:02:3c:5b:8f:21:df:a0:55:e1:ed:a4:12:8b:
a1:d9:90:d5:4d:75:fc:4f:0a:08:10:9f:bf:68:0a:ff:2b:65:
cc:c0:64:fa:77:f7:9a:93:f3:6d:a4:1b:f5:2b:81:e9:1e:1a:
e0:21:a7:f4:73:fd:2a:7e:08:a3:d8:64:40:94:e2:4b:61:de:
ff:3c:35:b4:0a:d2:71:ef:d9:b4:6a:dc:95:dd:5b:ff:eb:ec:
c0:31:c8:48:b3:f1:0b:35:40:7c:38:01:31:d2:e2:a4:20:d1:
74:cd:46:d9:35:9d:f6:73:02:b2:ec:42:b9:63:00:2b:64:ac:
ab:fc:c6:40:db:d2:7b:b7:54:3c:75:30:aa:db:3c:5a:94:ac:
1b:01:85:df:d9:d3:98:26:f9:5e:d3:e6:d5:09:ec:90:ad:71:
33:bc:3a:92:f1:c2:e1:3b:87:54:15:a2:56:e7:05:4a:0b:50:
c8:11:5b:bd:f4:a2:07:d6:e5:14:eb:43:6a:22:10:a6:69:ba:
8e:5b:d6:36:4a:d3:ff:1d:33:87:fa:60:34:02:04:5d:6e:45:
79:6c:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:45 2025 by rpki-client