Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier: B4CUXk7kNnf71NVfEqyA95dWHHDzabOgrZfXK4T40WI=
Subject key identifier: D7:77:55:AA:E3:7B:E8:E3:D6:89:DC:C4:A2:35:D1:68:77:9E:B5:D1
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 0199FCFDBD38F7EDC72C59F6AB79D5636689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:51 +0000
Manifest this update: Sun 19 Oct 2025 15:01:51 +0000
Manifest next update: Mon 20 Oct 2025 15:01:51 +0000
Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: Fc2+Jk9uCrdbdNzIXPqHBuO4hO9LNdN6Vsjag/uXcBw=)
2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:bd:38:f7:ed:c7:2c:59:f6:ab:79:d5:63:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Oct 19 15:01:51 2025 GMT
Not After : Oct 20 15:01:51 2025 GMT
Subject: CN=d77755aae37be8e3d689dcc4a235d168779eb5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:d8:a1:40:39:91:25:fb:5d:4c:11:62:db:
06:b2:64:71:b9:76:00:c4:79:9d:e4:27:53:a4:91:
bb:3c:27:27:51:ca:ba:51:75:b4:f4:da:d3:dd:ac:
9e:d8:e4:40:cc:9e:00:d1:58:4c:65:2b:7d:36:56:
d3:a5:bb:61:d6:1d:48:a4:d5:13:67:d5:98:1a:df:
b1:12:13:c4:60:40:44:31:bf:9a:e6:54:23:cd:c3:
ce:9a:3b:4c:69:ee:f6:ec:77:bc:db:92:a2:ae:7d:
9a:82:0f:23:3c:a1:37:61:ac:b8:8d:7a:4a:da:8a:
05:e8:f5:03:5b:f9:b1:f9:90:fb:f2:b2:cd:b6:28:
d7:a1:92:e7:4b:8a:bb:ef:a0:75:ab:e2:af:5a:d1:
d1:b5:3e:7b:bc:f7:33:ff:8e:ac:1b:17:b1:2f:5b:
69:6b:9e:64:7d:17:cf:2d:f9:e9:5e:50:da:ca:9d:
5a:52:df:71:11:48:2e:78:4f:f6:07:22:00:c1:c4:
f0:60:9e:eb:1f:fd:69:a3:86:13:b7:72:e1:26:ed:
cf:59:b1:49:ea:d4:1b:13:fe:30:f2:8f:a4:a2:29:
82:9f:7a:1e:b1:6a:1d:e6:9d:3e:f0:75:80:32:57:
c8:91:67:24:cd:c5:4b:72:20:dc:7f:c5:b4:bc:5b:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:55:AA:E3:7B:E8:E3:D6:89:DC:C4:A2:35:D1:68:77:9E:B5:D1
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:75:c5:e8:dd:6b:80:3b:ad:44:2c:8f:3b:ec:e5:ed:54:17:
3d:08:13:e9:9e:ec:fe:a2:ca:32:3b:bb:dd:b1:8e:f8:b5:c0:
a9:6a:da:58:85:5c:18:f6:23:b4:a3:c8:e4:87:41:ff:3a:c2:
7d:67:26:c6:c1:90:14:42:d2:67:96:c7:6e:e8:e2:78:20:27:
bf:92:f3:c1:bd:99:c6:be:0b:5b:4d:9f:92:f7:13:e0:9c:bc:
80:8b:78:90:32:dc:2d:1c:5c:9f:b5:db:f4:4e:5b:ea:af:31:
86:78:63:67:63:db:a4:36:68:13:87:28:64:b5:20:25:3f:96:
d4:44:87:b7:33:0f:31:e6:4b:36:ac:ad:2d:f7:51:4a:4e:04:
62:30:02:e4:93:49:9f:98:97:18:3e:74:7e:e4:67:bc:59:f9:
85:d3:31:b7:50:40:85:60:02:7c:e7:28:33:f5:89:f4:24:1e:
c2:38:99:a1:77:0b:34:29:15:e5:cd:37:39:2f:af:b1:ca:be:
8a:38:7c:05:f7:1a:da:4d:e2:8e:bb:24:c0:8a:07:56:15:90:
8d:b0:c2:72:f0:fa:5d:f8:64:9e:a6:58:76:bd:46:f7:55:e8:
e9:b4:ee:c2:6e:86:85:84:28:1d:fb:c4:6c:9a:08:1b:ea:97:
9d:22:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:20 2025 by rpki-client