Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: 7ynoqBne4FochMPc5IsjDfPa/0gyop8J2v29SokexS8=
Subject key identifier: B2:18:13:5E:90:FF:26:A5:13:34:D6:31:60:3E:BB:C3:09:75:79:5C
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 0199FC8F9AA86C13BB3D6495DD9F92A8E219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 07F8
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: rPgxZr4Bq2U4Q+ryM2TxmJyX4oZRKy9p9A9Q+wVLjmM=)
2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9a:a8:6c:13:bb:3d:64:95:dd:9f:92:a8:e2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=b218135e90ff26a51334d631603ebbc30975795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:96:ae:89:c7:6f:14:8e:6e:5a:2a:ad:b1:
c3:ec:23:2a:9f:5f:3a:29:76:9f:07:d5:32:a9:48:
df:5e:e8:0c:ac:b3:4a:8f:cd:23:85:ab:f2:53:85:
aa:64:6f:12:7c:2c:74:d1:0f:f9:a8:9f:92:ee:98:
37:0c:05:56:12:cf:36:32:3c:15:d9:86:d6:8d:4a:
17:0a:65:d6:2d:cd:f0:2b:55:4a:6c:a7:42:fb:dd:
f8:aa:0d:1d:9c:6b:7f:d9:5b:5d:07:63:f4:08:df:
18:48:a4:54:5d:6f:d0:15:a4:3a:cc:d3:b8:e6:16:
29:ae:e5:25:71:8d:22:47:48:63:f4:48:45:42:00:
7d:80:ee:73:84:d6:02:d1:61:eb:1c:5d:b2:89:a5:
a5:c1:bd:00:57:c3:b9:15:00:04:aa:9d:a1:9c:21:
ac:db:72:eb:96:91:53:52:30:62:5f:a0:72:2a:d8:
4f:ff:3c:3d:07:71:64:f5:6b:86:eb:d1:e1:b7:d7:
22:66:d9:d5:a9:97:34:18:5d:42:71:fe:6b:ac:df:
05:85:8e:1e:e3:53:06:1c:4e:f9:e6:a1:4c:9b:62:
ac:2b:b4:ef:d2:79:2f:39:8b:63:63:4b:42:74:f8:
80:54:cf:dc:0e:0a:c7:0d:f5:12:97:67:21:bd:2c:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:13:5E:90:FF:26:A5:13:34:D6:31:60:3E:BB:C3:09:75:79:5C
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d8:1b:1f:9f:a8:5e:4b:3c:3a:67:1e:3a:99:d2:d4:84:a7:
e3:a6:9d:41:2d:59:be:76:be:a8:33:cc:b2:86:b7:83:6f:94:
b9:0b:7b:59:a5:cc:5b:d6:fd:f4:e8:fb:a3:4e:b9:9a:c3:07:
d8:ac:72:06:7e:06:73:53:39:b3:97:94:d7:92:4a:83:09:41:
a7:82:e8:73:c4:96:75:0b:04:5d:16:ac:b5:d8:fc:91:77:f5:
8f:d4:fc:d2:e6:6a:20:9b:e9:6c:94:88:34:bc:ce:88:37:9f:
1a:4c:bd:5b:46:52:c7:47:a5:fd:19:4c:1a:df:a6:a6:d5:6d:
0c:a3:37:a6:b2:fd:3e:47:5c:8f:28:df:fa:de:4d:34:40:ec:
50:1e:38:c3:70:b6:6a:48:c8:62:66:dd:a6:f9:cb:21:ab:e0:
85:15:fa:d7:a9:ae:cb:bf:11:4b:40:d0:f8:3d:c9:e7:0b:69:
b5:cf:72:71:19:95:4e:53:d6:5e:6d:f5:17:5b:6d:a3:1a:d7:
63:65:7b:f1:df:f4:70:c1:f4:7b:ba:d6:c0:8f:fe:bb:df:66:
5f:75:ff:8a:44:b8:81:5b:91:77:5f:88:e5:48:ee:74:ad:f3:
4d:9e:4c:97:0b:8b:92:8f:12:f2:2e:67:55:cf:fa:50:d3:45:
9e:c4:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:41 2025 by rpki-client