Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: lgyaXB3fCJxLyWPbUahYvqQNE41bH2YVJf/xHRBx1Kc=
Subject key identifier: B8:B8:FE:A4:AF:71:41:21:A8:C7:0F:42:80:2C:A5:8B:6F:DD:F1:39
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 0199FCC6723BB8B9FA064B1F704BBD6EB3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: UxlzFVlP41Xq+hjKNBrQ+k0iMbX0M6BRNEBz+ega5Ro=)
2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:72:3b:b8:b9:fa:06:4b:1f:70:4b:bd:6e:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=b8b8fea4af714121a8c70f42802ca58b6fddf139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:3f:09:86:ac:6b:53:17:7a:e9:62:03:69:
f7:7e:e0:a8:8e:69:d0:85:55:52:09:24:bd:2c:9d:
16:0c:1e:1f:a2:be:62:52:2e:d4:c6:c3:f6:76:c3:
a4:fd:71:02:fe:85:bb:09:3d:e5:68:fb:8d:fb:30:
ce:8e:62:0c:54:9a:bb:70:20:4a:d3:05:29:75:74:
4b:06:1e:09:48:22:fa:42:8e:58:f0:97:67:5d:3c:
2b:78:29:c3:c7:92:dd:bf:fc:d8:b6:7f:c1:fe:56:
5e:72:2c:87:70:6d:74:0e:94:fa:6f:fe:09:67:97:
a6:f5:5e:84:12:80:9a:7f:ee:0e:10:83:66:fc:69:
e7:33:b2:b7:51:2e:77:89:29:b5:66:da:d1:be:25:
f3:d4:75:29:95:fe:d7:a6:29:2b:ff:5c:e2:e0:00:
81:ba:c7:53:98:fb:2b:d2:6d:be:3d:d6:71:36:3e:
cb:c6:fb:19:79:6b:6c:19:cd:03:c0:17:de:b9:19:
ec:45:2a:62:2e:94:34:6e:83:11:e6:29:61:e2:8c:
9a:95:10:f8:7d:ad:09:c1:46:b3:84:0a:97:72:bc:
40:b0:e0:26:51:e3:94:43:d3:85:58:23:6c:ea:e3:
31:26:dc:90:56:d2:37:c4:1b:a4:45:02:9c:5f:53:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:FE:A4:AF:71:41:21:A8:C7:0F:42:80:2C:A5:8B:6F:DD:F1:39
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f4:18:87:60:e5:79:09:11:b6:f2:fa:5e:3b:6a:1e:25:dc:
72:35:27:14:c4:48:86:d1:73:25:09:2f:05:75:30:da:33:79:
36:fc:46:fa:e0:0e:cc:9a:b1:2e:76:22:b2:d3:10:42:c9:92:
59:c4:23:10:9a:d0:9f:d2:ab:3a:dc:49:01:e5:60:53:8e:f5:
a5:5c:78:f4:32:ac:17:33:94:b2:32:d4:99:2d:bc:29:1f:2e:
b9:36:42:3c:b4:47:4c:f5:d2:16:10:53:b3:1b:8f:4b:2f:88:
91:f1:a6:ff:c0:82:42:94:2c:38:4f:fc:d7:39:ce:d4:85:ae:
bb:c3:38:0b:d2:1f:73:25:28:94:76:c8:41:84:a7:81:d4:92:
02:8b:26:d6:8e:3b:ef:cb:98:1d:95:ed:ad:49:b6:16:d3:a7:
2f:d3:19:f3:93:d9:87:dd:ed:b6:69:bd:55:93:21:d7:ae:62:
46:c7:79:d7:1e:35:0a:ee:2e:bd:b4:46:4f:ae:66:74:7d:06:
8b:7f:b8:cd:64:db:d6:c3:40:07:cc:28:05:66:09:81:70:a8:
7c:65:89:72:69:7e:47:76:45:b6:6b:6d:fa:1b:f4:ef:c3:3b:
77:89:7a:26:7c:d9:ef:1f:d8:c5:03:52:bf:97:bc:45:fb:c7:
0a:98:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:36 2025 by rpki-client