
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File: 1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier: G64dkpfwz7iIGdUywiiR6oBf9BUVZ6RyTSZD8Esr1Xc=
Subject key identifier: B8:05:E0:51:88:68:30:BE:3D:CA:D8:FA:42:6C:FA:EE:9D:8A:AC:58
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer: /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial: 0199FC2144E3D449AAD0DAD8A18D1B3008B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number: 81
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: FzPmUYlpNWTVIfFXVhDkFoTCSCG9iziv1PYuRIF0Ghg=)
2: I-zs-8rljmDPlErQ03m2L3NV_DU.roa (hash: UzoSi4X1KX7g6G8RqFjoqfYd2UGDWS9dFOixZ89hyRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:44:e3:d4:49:aa:d0:da:d8:a1:8d:1b:30:08:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=b805e051886830be3dcad8fa426cfaee9d8aac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:60:bf:fc:41:e0:ea:d0:4b:78:07:62:5c:
78:3d:87:1d:df:88:fe:71:36:7e:a6:b9:df:d6:9d:
92:17:9b:31:95:c5:c4:3a:03:ac:5d:ae:42:e9:00:
2e:7c:d8:29:51:44:26:91:c4:20:ea:c8:d1:ad:b2:
27:11:15:1c:b8:ce:59:46:9d:25:01:23:ae:56:6b:
af:6d:f2:75:98:70:2e:21:2f:bb:dd:fb:e9:3f:28:
77:1b:45:cd:28:fa:d1:0b:6b:46:85:ac:a5:19:e4:
8e:91:06:2a:b4:a3:62:f4:3b:85:b1:96:ab:51:48:
d9:ee:24:14:2a:7f:f0:76:20:b2:ff:b6:08:f8:50:
d9:69:29:04:b9:a6:7c:cb:53:33:72:7b:30:7c:cf:
bd:4b:08:2b:8e:ad:d2:00:e3:4d:04:be:42:81:96:
34:ec:59:8f:35:eb:4a:1b:31:f5:23:83:ec:45:1f:
4c:50:9e:ce:b8:01:cf:fa:f5:a6:d2:b2:e0:bc:3b:
6e:43:50:41:f2:b7:b1:e1:7b:ec:41:9b:0b:97:e1:
02:c3:ce:78:c8:e6:79:f8:25:b2:de:05:15:dd:af:
0d:9a:64:7e:57:eb:9a:45:fa:1b:72:c7:60:c5:d8:
bb:10:05:9e:54:ee:54:a1:58:58:72:55:be:85:fb:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:E0:51:88:68:30:BE:3D:CA:D8:FA:42:6C:FA:EE:9D:8A:AC:58
X509v3 Authority Key Identifier:
keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f6:c9:a9:91:7e:15:95:2d:d2:b8:88:ce:8c:14:f6:d0:3d:
c7:02:e0:2c:5a:a7:5b:44:f9:2b:54:38:2a:2f:a2:b6:17:da:
90:79:8c:25:8e:da:a0:4f:75:63:bb:67:b7:37:52:f9:b2:22:
6e:4b:87:5b:a1:96:da:3e:e3:0b:be:1e:bf:a9:a8:32:b5:ab:
37:10:83:27:f5:e2:64:ae:ad:c4:bd:3c:97:0c:61:0a:8a:ce:
f9:50:63:53:2d:fa:84:96:0c:8d:d8:03:25:0b:bc:7c:bd:63:
98:f1:1a:c4:ce:43:0d:09:dc:01:84:21:c6:c9:c7:ca:23:68:
e8:8e:25:c4:c1:92:6d:9d:6f:0c:4b:a6:43:0a:97:c8:b1:70:
f7:7f:aa:df:c6:f0:3e:9d:ad:5e:be:ee:cd:f7:a9:ec:44:a0:
39:9c:59:48:62:7b:2e:ed:6a:9f:0c:32:0b:33:09:27:47:03:
82:16:95:26:19:0d:bb:d8:ce:78:25:8e:74:3a:98:94:59:5c:
c7:b2:cb:8c:2a:b4:55:57:c7:c5:d0:e0:71:25:1c:03:06:24:
08:a8:06:19:1b:d8:c4:1d:1c:8d:46:8b:d1:06:10:84:d4:b4:
ab:3a:1e:27:3e:05:1c:01:65:5d:16:36:8f:a7:29:fa:98:fb:
3e:cd:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:12 2025 by rpki-client