Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: mL+uSoxm9ZiqwByJbr9dhz6ljLN3+urxoxLIgTPgrX4=
Subject key identifier: 0F:85:1F:DA:B0:C1:B3:3A:63:67:E1:2A:9F:6B:23:14:82:E7:19:1A
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0199FE7DC2F54AC1CD7E6085943D650AA8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 088E
Signing time: Sun 19 Oct 2025 22:01:18 +0000
Manifest this update: Sun 19 Oct 2025 22:01:18 +0000
Manifest next update: Mon 20 Oct 2025 22:01:18 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: Rux2ELAEMOKor0MZFDltDFkS/BXHz2CCrz7GLSeo2lc=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c2:f5:4a:c1:cd:7e:60:85:94:3d:65:0a:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Oct 19 22:01:18 2025 GMT
Not After : Oct 20 22:01:18 2025 GMT
Subject: CN=0f851fdab0c1b33a6367e12a9f6b231482e7191a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:43:6e:83:7c:55:83:3b:40:f7:ba:5c:d3:
26:30:8a:f9:14:69:3f:a9:5c:75:53:16:81:75:04:
6a:e9:ee:07:05:04:2b:c8:4d:61:da:1e:39:a9:56:
22:d7:90:43:7e:18:73:cd:2a:91:3d:76:ce:ed:ca:
1c:52:34:b7:cf:55:71:c8:2f:96:b3:0f:2d:c5:39:
19:a5:1c:64:aa:11:57:eb:d8:a5:72:38:5b:b9:1e:
a1:67:a0:13:a1:6f:41:6d:12:ea:cb:15:80:d5:57:
4f:28:97:ec:d3:52:57:5e:17:c8:b3:bc:ab:35:80:
c0:86:c0:65:96:84:c6:5d:d0:ce:b3:09:b4:c7:56:
02:95:25:4d:f4:8d:f7:47:2a:55:8d:21:a6:af:a6:
33:b9:43:08:03:61:a1:81:66:05:6c:f8:92:68:17:
cf:1a:a7:16:06:5a:20:2e:b3:ef:10:42:04:dd:d0:
54:d8:92:81:c9:05:d8:b6:2e:bb:f6:b4:3c:51:0e:
5a:1d:37:7b:63:29:f4:a1:e1:74:9a:41:65:eb:b2:
22:58:14:9e:b8:bf:f4:a6:2e:ac:5f:f6:07:4d:2c:
8b:65:62:38:69:2f:d4:c0:c0:d5:e8:58:a4:34:ae:
6c:70:3c:d7:5f:6c:f8:65:9b:2c:22:24:61:0f:79:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:1F:DA:B0:C1:B3:3A:63:67:E1:2A:9F:6B:23:14:82:E7:19:1A
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e6:93:46:62:d9:8c:07:8f:d5:ba:83:bd:9a:5a:44:eb:7e:
3b:fa:26:a6:64:64:36:75:6f:4b:4a:d0:b5:43:35:e3:bd:24:
6b:46:85:8e:37:2a:37:e8:c2:58:04:2c:de:95:f3:1d:28:c1:
82:13:f3:d7:35:24:29:85:f0:d3:4f:66:73:a2:9d:f3:2b:8f:
6a:f6:9a:69:eb:9e:b5:26:7e:f6:40:70:48:36:bb:ce:6b:23:
b4:d6:22:f8:7f:7e:17:55:ec:e9:a5:22:ae:dd:35:d6:81:e2:
db:de:d8:c5:87:3d:c7:3e:c1:82:ad:02:bf:19:5f:88:a2:c9:
ac:c9:02:5f:42:54:3e:e5:4b:3c:a8:7c:ca:27:b4:73:61:ab:
8d:28:14:59:2a:33:6d:80:3e:d6:80:d5:40:43:13:db:3c:e4:
9a:db:bf:16:8a:72:14:85:dc:8b:e4:8b:33:27:39:00:bf:96:
72:c2:a5:30:fe:ce:b8:92:b8:da:db:27:ea:45:a8:8e:e5:93:
01:05:15:5b:53:bd:78:bb:c3:2c:02:0e:dc:89:a3:74:2a:6e:
f4:5f:15:47:ae:74:76:6a:0c:dd:3f:f7:31:57:c2:7a:ab:eb:
bb:a2:e5:be:5f:94:37:76:3f:fc:48:c3:1f:d4:8c:4a:df:d2:
9a:95:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:32 2025 by rpki-client