Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: Xpky+RApadydk7KEP/jWwPNJQrQnA/r0XQ2YtK2MtME=
Subject key identifier: 3B:1A:8D:DA:30:83:FC:3C:23:7F:25:C0:CC:3A:B9:80:94:15:15:72
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 019A02911BC39437DD9622892456CA6010DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 0313
Signing time: Mon 20 Oct 2025 17:00:55 +0000
Manifest this update: Mon 20 Oct 2025 17:00:55 +0000
Manifest next update: Tue 21 Oct 2025 17:00:55 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: pDlf7EB018Y4vZykJoW7ZwvcQDX4s6Gqz5gq6fzAxZE=)
2: qCeXwVNQp66WQ27Det0b9KrkJEc.roa (hash: WoKc3ldX5sHKUSOKMyS/VBt9xUxQrJ5xCbXpuIjQb48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:1b:c3:94:37:dd:96:22:89:24:56:ca:60:10:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Oct 20 17:00:55 2025 GMT
Not After : Oct 21 17:00:55 2025 GMT
Subject: CN=3b1a8dda3083fc3c237f25c0cc3ab98094151572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:ba:0c:5a:28:a4:87:80:a5:d6:92:4e:6d:
5d:9c:86:60:00:ac:e8:75:18:b7:5e:53:87:e0:57:
5a:95:57:9c:aa:2e:14:6e:27:90:ea:0f:39:0a:c4:
ac:9b:05:0c:56:b0:56:8c:ac:92:84:af:20:38:87:
a7:9f:1c:ad:aa:41:e6:19:b3:8c:d6:8f:ac:1a:fa:
46:48:6c:90:73:8f:c3:91:77:f4:f9:41:d6:9b:be:
1d:98:c9:99:b7:e6:f1:96:93:ff:a3:91:1a:59:3e:
58:11:1e:79:37:bb:68:0e:16:f6:9f:61:af:b9:65:
65:cc:94:25:7d:c6:07:b4:a9:30:df:59:4e:d9:b2:
40:64:8b:8c:ab:12:4f:0f:f5:4a:e5:77:aa:6e:e6:
96:27:0e:a1:dc:91:d4:fb:16:7e:a6:a0:c4:54:f1:
1d:63:32:d7:09:6c:98:ef:cc:c4:2c:7c:a6:fa:ab:
02:9b:37:fe:62:3d:9f:ef:10:af:29:a0:a7:d2:9a:
73:a5:f4:2e:fb:3f:68:7e:47:00:c8:96:f5:a1:e4:
8f:c9:7f:8f:af:2c:8a:e7:16:98:df:17:d3:7e:fd:
39:1b:6c:5d:62:3e:6f:89:fc:a2:5c:a2:b3:77:2c:
5f:94:c1:53:d9:22:2e:fe:d0:11:a9:07:ff:53:c4:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1A:8D:DA:30:83:FC:3C:23:7F:25:C0:CC:3A:B9:80:94:15:15:72
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:68:da:af:d0:5b:c8:ba:64:2d:29:77:dc:7d:e0:f5:b4:39:
66:15:89:ec:26:41:b0:49:8b:c1:71:f3:52:31:aa:7e:d2:63:
d6:a3:ea:8a:1c:eb:9b:7d:4d:56:b9:97:7e:b6:8d:9e:6f:80:
7e:5f:bd:69:2d:85:a4:9f:96:1f:fe:b4:66:9c:3b:d7:18:7e:
27:c5:e5:1a:31:3c:45:d8:c2:a2:ad:3a:1e:fe:d8:e0:85:bd:
86:68:97:ec:5d:f4:fc:f2:03:4b:de:0c:51:6a:18:d8:88:de:
f7:f7:c6:d7:93:85:d6:9c:e5:61:aa:f5:dc:67:13:86:45:74:
28:d6:cb:6d:8c:39:1d:17:c2:3c:df:16:85:a0:04:03:46:10:
08:0e:79:f1:93:e8:95:cc:e3:57:87:14:10:25:12:22:34:70:
06:db:13:da:0e:fb:64:26:ca:9e:42:1f:f7:13:85:9f:e6:bc:
ed:a8:92:c8:74:f2:6d:d1:d9:7f:96:03:c7:13:b4:01:5b:79:
5a:07:a5:98:27:2c:63:30:44:ed:4f:fc:d9:9c:13:07:ee:5e:
fa:d2:44:7e:a2:4b:45:31:9a:8b:b8:21:09:14:2d:65:49:f4:
d3:c6:e8:55:3f:10:58:e7:cb:ca:7f:21:5d:8c:3b:1d:fb:3a:
2b:8a:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:01:27 2025 by rpki-client