Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: 3b9jYG7+EuZPyrwVp71eEXx3Lr11uj/ce0uDy71521I=
Subject key identifier: 15:6C:C0:11:43:DF:17:07:C6:57:CC:8B:11:DD:86:89:6F:2D:40:FC
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 0199FF59CEA51AC82379A39067DCBA598B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0745
Signing time: Mon 20 Oct 2025 02:01:39 +0000
Manifest this update: Mon 20 Oct 2025 02:01:39 +0000
Manifest next update: Tue 21 Oct 2025 02:01:39 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: FdsTKvDOPn+3Se/qFkjA8lVCKZwi47sMSAXDpCStZbs=)
2: ieIY7b0KhvQU4QgMPfI50NN4QnY.roa (hash: 5XIl/Vpt8manbA7AG4mG7L9mNTT0fdofSZrC08n/ke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:ce:a5:1a:c8:23:79:a3:90:67:dc:ba:59:8b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Oct 20 02:01:39 2025 GMT
Not After : Oct 21 02:01:39 2025 GMT
Subject: CN=156cc01143df1707c657cc8b11dd86896f2d40fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:aa:c9:7a:16:66:a9:57:ed:2b:18:c1:91:
46:8a:85:28:4f:fa:39:70:9a:c9:b1:16:0d:03:c9:
c1:ea:b4:ec:fd:0d:cb:e6:c0:e3:9a:fa:a6:12:17:
fc:93:bf:7f:db:32:cc:b5:84:1b:a5:03:2d:a3:78:
3e:9e:2e:19:53:29:ec:ab:fc:76:a8:9c:74:50:84:
af:4e:ef:b9:0a:c2:35:3f:c1:b5:39:90:ec:60:0d:
c0:15:e2:fc:10:66:80:f8:df:c5:1d:20:f6:6e:5f:
ec:07:aa:10:fd:ef:e8:e6:d8:02:94:6f:b1:60:91:
4f:4b:54:0d:54:04:d2:7a:ff:ce:cc:98:de:2c:7e:
6c:e6:db:bb:0f:a1:27:d8:37:21:c1:8b:3f:f2:df:
85:39:40:f6:55:56:6c:29:dc:f9:42:61:ad:6f:bb:
27:b4:67:64:92:9a:46:c5:82:7e:ab:3b:3f:17:60:
ff:61:14:8d:54:28:5f:66:5e:d3:51:6a:ac:4c:6f:
1f:1b:1d:01:48:d2:8e:9f:27:c6:71:e5:b3:1b:2e:
18:31:ea:30:a1:2e:a4:48:63:67:be:b4:07:77:51:
55:cf:17:d2:47:ed:4c:65:58:b9:6c:97:3e:3c:7e:
e6:65:3f:39:af:20:a2:88:ae:08:04:94:41:02:f9:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:C0:11:43:DF:17:07:C6:57:CC:8B:11:DD:86:89:6F:2D:40:FC
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5b:d1:80:12:b2:ed:e1:4c:7c:47:db:7e:2c:5a:2b:ca:f3:
33:10:8a:a4:3c:e7:55:6d:56:c0:f2:26:78:33:9d:3d:d2:03:
3f:d9:84:0d:29:ea:9d:18:bf:8c:36:87:6a:e7:62:cb:e4:84:
f0:f3:16:39:66:c0:fa:03:8f:22:39:f9:db:60:8c:7b:0d:b0:
7a:b5:e6:72:cb:05:73:e0:40:55:5f:be:8d:a4:4d:6d:da:7e:
1d:11:31:e8:c8:99:37:e8:b6:a2:62:98:fd:c5:f3:f5:ab:8f:
63:ee:9b:45:02:d7:84:92:ef:72:6a:25:39:69:86:85:99:6b:
79:c3:7a:35:69:a1:10:34:b4:23:c2:e6:b5:b8:a8:be:af:f9:
84:5b:20:91:0f:7c:4f:ba:3d:e1:20:27:9b:70:ff:47:3f:fa:
60:1e:79:50:6a:34:69:d0:8c:6f:7e:a8:ac:51:18:dd:8a:40:
89:11:d5:d2:75:d2:a6:d1:5c:5c:5d:48:85:ba:44:81:8a:7f:
15:64:2f:4e:13:02:36:5f:b1:37:6a:f6:ac:0f:92:14:b4:b1:
67:92:e6:72:77:42:aa:e4:2a:b0:75:f9:ab:73:c4:bf:8f:80:
03:41:32:51:5d:fa:fd:9a:11:36:98:f4:73:2d:14:aa:79:2b:
31:7a:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:25 2025 by rpki-client