Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier: 4UmsFCN5jTgR4GO8BQusQvuY+DXhOuCuDUpMecLGKts=
Subject key identifier: C9:6C:58:3F:74:C2:A7:D5:C0:D2:13:7F:00:1F:DD:2D:22:B3:4F:09
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 0199FC2163D6D1BFDCB455C9F421252F99AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number: 121F
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa (hash: N1QdoGGRESzbdDo8ibNStMhsdyaZ5jyu5P6HBd0ZTZU=)
2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: 8X6//40IfuaRvOPnR5L6J8JzqqREZC1+drl8ZjkdCn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:63:d6:d1:bf:dc:b4:55:c9:f4:21:25:2f:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=c96c583f74c2a7d5c0d2137f001fdd2d22b34f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:d5:2c:66:0f:c4:fd:4b:66:d9:83:4e:28:
5c:3a:2e:4f:70:1a:62:c1:4a:44:b8:60:69:09:fa:
c4:17:55:d2:d7:e4:c5:bd:bf:ad:6a:b0:c3:06:b4:
31:68:de:13:55:ca:40:76:b8:72:bb:84:b8:89:66:
30:66:50:12:c7:c4:b1:a7:d6:b1:81:46:ce:af:81:
38:c6:1d:a0:3a:f6:82:49:c8:93:5a:d4:db:20:9a:
37:2c:d6:f7:be:ca:af:ce:10:9f:28:37:3b:ea:96:
54:25:9e:4b:2e:ca:36:00:56:4d:95:1a:ed:e6:d5:
65:d9:58:26:da:fb:2b:b3:c9:aa:fc:b7:19:4c:96:
55:44:0e:84:c0:e4:80:d5:d1:4d:b9:ce:98:31:38:
95:5f:f7:14:8e:b5:2f:8d:3a:12:39:07:9c:f7:cc:
23:e1:82:a5:55:fd:eb:a4:d7:56:55:9c:1d:c5:e6:
e4:38:84:26:86:5b:3c:38:a0:de:88:ef:fe:22:bb:
5a:95:ca:67:0f:d5:ef:6c:d6:01:a4:31:e9:ad:a1:
90:9c:ce:cb:b2:ff:fc:dc:bf:34:a9:54:c6:72:0e:
32:d8:99:50:17:2c:f5:a8:51:9b:51:18:42:ae:c7:
ee:df:8d:a1:82:1e:0c:78:19:66:7e:b3:9f:78:78:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:58:3F:74:C2:A7:D5:C0:D2:13:7F:00:1F:DD:2D:22:B3:4F:09
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ef:e7:66:66:32:e9:93:fd:fc:53:94:66:b2:e1:c1:2d:48:
75:5b:e8:d6:1c:ad:32:ac:bf:2c:32:c8:59:af:ec:94:75:f6:
37:0d:ec:38:54:93:8f:17:a6:93:d7:a0:c9:13:88:65:64:c4:
92:9d:a0:2e:9b:b6:46:6b:6b:d4:f2:d2:5e:d8:cd:82:ef:59:
9a:37:f9:58:6e:19:ad:ff:74:34:65:95:4f:dd:ab:83:81:84:
2e:89:89:fd:2f:49:34:3a:96:67:03:3d:16:f6:df:b3:18:8c:
07:b7:dc:f5:0d:af:34:ec:f5:a3:da:a4:35:5d:4a:8e:ec:e6:
f7:9e:52:e2:6b:a0:9e:ec:b8:bd:e2:47:7f:3e:f4:cc:a0:1e:
b8:de:e1:8e:a9:50:3c:09:50:69:7f:e0:90:81:e4:dd:97:7c:
68:55:8b:96:f1:f7:2c:0f:c8:ed:56:75:0c:dd:38:6e:60:17:
73:c4:6c:6e:bc:74:14:94:b1:e0:d5:b9:76:37:40:99:a2:07:
5d:b1:31:b6:0c:df:e1:b1:40:48:37:0d:f3:51:72:68:b5:88:
a9:ad:a3:66:32:ec:f4:e3:7d:b9:b7:32:21:97:92:3d:bc:08:
17:70:25:f8:1d:c6:fe:60:e0:5d:4e:ed:9b:9e:c5:d1:c8:4f:
a1:95:90:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:13 2025 by rpki-client