Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier: xR/IaAvexciWDkiPVyOmAh1gt2gZfJWWw7XB/F/8SoQ=
Subject key identifier: C8:6C:65:77:A6:2D:0C:85:DD:99:0D:B9:77:9C:31:87:C4:FE:09:F5
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer: /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial: 019A05927D23CA101E76BB1D2E5B278D593A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number: 16E5
Signing time: Tue 21 Oct 2025 07:01:17 +0000
Manifest this update: Tue 21 Oct 2025 07:01:17 +0000
Manifest next update: Wed 22 Oct 2025 07:01:17 +0000
Files and hashes: 1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: pDlpoSgncMb1HvYvAZk+a5j2wtKuWw+7ih7QR+vmEDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:7d:23:ca:10:1e:76:bb:1d:2e:5b:27:8d:59:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Validity
Not Before: Oct 21 07:01:17 2025 GMT
Not After : Oct 22 07:01:17 2025 GMT
Subject: CN=c86c6577a62d0c85dd990db9779c3187c4fe09f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:0d:25:7f:e5:35:54:e9:76:23:a3:48:de:
e1:f9:9f:d8:32:db:7e:15:4f:49:b3:cb:ee:0d:79:
1e:ea:d1:d0:9d:51:5a:44:93:ae:c2:f0:36:86:a3:
75:f3:e4:4c:5c:84:1e:12:6e:a0:d1:71:62:9c:80:
bc:fc:30:a7:02:d0:a8:13:e6:db:84:bf:62:83:cb:
28:d6:fc:a9:c7:e4:9d:a7:91:bd:40:a5:ce:52:a1:
5b:2b:d9:31:75:cb:d2:47:19:15:82:9e:aa:d8:92:
3c:03:83:e7:ea:69:ed:de:bf:14:f1:41:4f:15:19:
27:5e:d1:e3:d7:05:e6:46:4f:94:bd:7a:6b:42:aa:
c8:32:37:39:4b:bd:34:20:27:1f:69:b2:1f:65:02:
65:35:d8:e9:6c:9a:d4:21:f6:01:67:c3:e8:79:51:
ff:68:3d:97:f5:26:3e:24:7c:1e:43:69:12:bb:f8:
1e:24:39:53:59:b9:f3:1c:f8:d5:66:0b:41:78:a5:
8a:cf:37:a7:40:1e:fc:f6:69:82:45:62:c0:da:7f:
f2:60:dd:7b:b4:bb:9a:1a:25:91:26:30:6b:78:ce:
59:fb:d3:32:e1:58:42:a8:94:ac:a2:e2:17:57:88:
34:c3:ca:90:5d:0e:8c:2d:85:ff:73:85:aa:bf:a3:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:65:77:A6:2D:0C:85:DD:99:0D:B9:77:9C:31:87:C4:FE:09:F5
X509v3 Authority Key Identifier:
keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:be:5f:51:6f:00:4c:e3:92:2b:f9:ea:8c:e0:16:63:32:
75:02:45:4f:e5:48:5b:01:7b:eb:6b:c7:1d:6e:6b:9c:1c:0e:
43:6d:9f:e5:4a:91:2e:7b:c1:92:5d:c7:20:e6:37:fe:7b:56:
f4:67:d5:90:a7:8d:10:5e:42:f6:55:c2:bc:79:f3:38:a1:f8:
84:28:d2:7b:fd:84:d2:62:19:24:8c:e1:a4:02:9f:57:e0:24:
85:8f:2d:0c:ef:64:b0:d5:e5:00:f3:31:34:f7:87:75:e9:e2:
88:74:b6:54:c1:3c:9c:ba:a4:f0:0a:72:e1:81:db:f2:fb:c5:
20:34:b1:bb:5c:69:b5:17:7f:85:12:21:f9:fa:06:73:8f:72:
60:fd:5a:e7:41:4a:31:76:80:ef:69:70:5a:dd:20:82:bb:e5:
63:e1:c3:8d:07:fc:39:c3:7d:8e:99:3b:00:4a:96:5f:46:6c:
e8:a0:fd:ac:f4:73:6c:61:6e:94:f7:f6:f3:fc:fb:43:66:fe:
b7:7e:58:d4:18:79:60:4a:fe:15:5b:de:9b:17:d5:13:29:33:
dd:1d:79:2b:9f:c6:17:91:4d:b3:a4:87:43:d8:ef:03:87:5f:
9f:e2:d9:c2:0c:56:5c:47:6c:30:57:78:1d:9d:d9:b4:d2:37:
e8:02:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:00:09 2025 by rpki-client