Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: OvXDT3KDnbh6r5BzZhHHiLzFWamOslKFYJxiD5SDXOs=
Subject key identifier: 63:6C:21:B6:DB:EC:97:23:B8:1E:4F:80:1C:2F:0D:B9:5A:9E:B1:F3
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 019A00DA11D11B60FFD748127E07BBF89491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 09:01:22 +0000
Manifest this update: Mon 20 Oct 2025 09:01:22 +0000
Manifest next update: Tue 21 Oct 2025 09:01:22 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: am2FStvOAmitW5eyLNfXmxbHRXlcfDhYkpmXj2YEu9I=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:11:d1:1b:60:ff:d7:48:12:7e:07:bb:f8:94:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Oct 20 09:01:22 2025 GMT
Not After : Oct 21 09:01:22 2025 GMT
Subject: CN=636c21b6dbec9723b81e4f801c2f0db95a9eb1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:ac:bc:a3:4c:92:3a:a0:9d:d1:b7:43:5d:
44:3e:cb:54:ed:cb:5f:0d:c8:9e:c4:c6:6b:95:00:
e2:33:b3:14:f5:68:ec:ea:dc:cc:8d:e1:6a:fd:54:
40:fd:ba:32:dd:3d:bd:62:7c:a1:f6:ee:ae:cf:44:
98:a3:1a:74:98:51:89:f5:09:90:de:27:bb:3e:2e:
7e:75:fc:fc:26:dd:a3:fa:a4:76:0c:fa:9e:25:35:
1a:2b:87:f0:e0:89:9f:01:ef:e5:23:31:0f:e1:34:
83:93:83:03:56:61:b7:11:0c:3f:e5:a7:ac:4f:a9:
8c:59:dc:6f:5d:80:bb:99:74:a8:c9:3f:88:52:08:
7c:3c:5a:af:cf:a2:e2:9e:b8:48:85:0f:01:2c:84:
57:c2:22:a6:af:6a:dc:e2:b3:e3:b8:41:d3:0f:90:
55:44:be:26:a7:39:0b:e6:73:43:e4:44:09:a5:43:
a9:3e:01:af:55:c9:57:07:95:5b:73:1e:ea:77:8d:
c5:2b:59:8e:cb:02:e4:0a:c3:b5:88:e2:09:b2:7a:
97:92:97:a0:0f:20:4c:db:69:6c:3e:c6:dc:95:58:
8f:48:94:5a:0a:b5:6f:e5:d5:ad:57:16:ef:d0:cd:
f8:99:5e:fd:8a:79:0f:1e:44:49:b3:02:29:3f:4b:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6C:21:B6:DB:EC:97:23:B8:1E:4F:80:1C:2F:0D:B9:5A:9E:B1:F3
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:72:7e:0b:df:63:22:90:ea:7d:e4:df:11:9e:f1:44:d3:0e:
2a:ad:89:03:64:cf:be:be:0a:a2:5e:13:4c:a3:de:03:7a:f0:
09:e0:42:fb:b3:e8:e8:fc:63:2b:fa:d1:e6:3c:9b:49:c8:52:
0a:5c:3c:08:b6:b4:36:ea:b5:03:6c:ab:8f:cb:b4:6d:e1:e9:
0a:18:ce:6b:fa:25:06:f0:9c:54:1d:1d:6a:84:d3:34:a4:46:
67:10:a9:94:72:5a:46:37:7f:e9:68:14:27:48:af:52:69:f7:
25:3e:32:4c:21:08:c8:84:54:22:61:05:ac:08:d9:70:b4:77:
c6:98:dd:4e:bb:ba:71:96:01:69:e5:1b:c6:7e:84:f4:3d:7c:
ce:e5:67:48:a9:55:a2:88:b0:01:53:dd:15:31:60:26:25:4c:
44:e1:62:73:21:a3:33:70:ad:8f:09:f7:24:bc:4b:27:72:73:
3d:57:ae:a9:3d:f2:15:ac:20:01:93:b7:ce:2a:cd:bc:f2:06:
84:7d:c2:3c:5c:f0:29:7b:16:68:df:4a:53:80:39:ad:ff:04:
88:4c:d6:05:b0:5a:09:45:c3:71:1a:b6:c8:ab:3b:9b:df:8d:
3f:e9:08:34:80:06:66:e6:d2:3e:06:4e:20:32:5a:23:80:1e:
ce:2a:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:02 2025 by rpki-client