Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: tka7L86YqeMunkfki26pj31joMOGQHxz8QhRINXAJNY=
Subject key identifier: BD:8F:B1:54:1A:C0:2E:B4:D3:39:BF:72:61:31:CE:57:E0:96:0B:E5
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 0199FC588E9C9D4DA6CBFA2FB0132ADDD70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 10A7
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: HRHuE1fe1meybGboQ2Ajamuhjb9DAinIBo6aun6jGtE=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8e:9c:9d:4d:a6:cb:fa:2f:b0:13:2a:dd:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=bd8fb1541ac02eb4d339bf726131ce57e0960be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:2f:69:19:2b:62:72:cb:61:e1:b3:78:a2:
ab:6d:15:13:2f:c1:dd:9e:af:07:17:ec:82:94:fb:
90:71:f2:fb:45:cb:77:19:b9:6b:86:07:73:43:3e:
7e:47:e2:19:0e:cb:7c:1d:9c:3d:20:29:52:e8:fb:
e5:59:38:e6:fa:51:63:42:cb:f5:38:94:13:c0:db:
64:a6:88:3f:b9:23:f2:8e:2b:69:67:6c:1e:27:3f:
0d:81:c2:92:0f:41:e7:87:f2:5d:a1:ea:aa:6f:05:
61:21:c1:a8:29:2a:1b:b4:3c:95:12:35:19:6d:e3:
90:e6:7f:b8:d8:59:b0:8a:0c:6b:35:e6:3b:53:c5:
43:a2:2c:3b:c4:55:44:14:1d:22:1a:da:eb:70:f5:
71:c7:11:c0:6e:69:18:54:f4:81:15:cb:f2:74:58:
80:95:e0:7b:bc:fd:4d:85:be:5c:1f:70:05:8b:78:
2c:65:97:78:62:dc:71:8f:67:26:5a:75:41:48:af:
a2:05:c6:45:f2:3c:51:89:fb:ea:8a:85:bf:e5:e8:
49:97:c7:40:7b:fd:2e:a5:59:6f:5c:2d:e4:c1:14:
d3:e9:c6:01:84:77:66:e9:89:7b:f0:fd:1d:39:0d:
2f:29:11:7f:77:21:1c:15:4e:8f:ca:85:8f:5e:04:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:B1:54:1A:C0:2E:B4:D3:39:BF:72:61:31:CE:57:E0:96:0B:E5
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6f:0f:73:84:01:84:66:d2:ba:a4:57:80:e6:42:39:3c:14:
62:8f:66:79:6d:29:93:d5:25:c1:5d:9b:8f:ca:49:1f:c7:b0:
0c:e4:4a:99:0a:ee:a9:16:e0:8a:a0:f6:cc:5b:aa:f4:d0:60:
8e:d3:15:80:8c:33:35:17:4b:70:22:e1:10:e2:9b:52:95:06:
e1:1a:11:7e:31:82:63:4a:11:71:da:c3:7d:06:b3:5f:42:db:
8f:65:49:0c:47:64:db:a6:42:d7:d3:d7:72:ec:f2:c5:1b:97:
03:64:8a:5f:e9:f3:11:d8:b1:8b:03:3e:81:74:8f:9e:20:2b:
20:d9:29:c5:98:74:cc:1c:81:95:98:41:9a:05:73:cc:f3:93:
a7:46:91:80:11:d6:80:21:37:01:44:bc:a8:cc:8d:94:37:b6:
75:09:67:86:76:bd:e1:fb:17:53:61:21:ce:ca:36:55:22:eb:
44:ef:df:a2:79:82:2d:15:59:5d:be:d8:9f:be:7b:a2:cd:29:
21:89:a4:7a:57:d9:a9:15:7f:59:69:f5:18:15:62:41:f6:df:
f9:6f:70:5c:bf:9f:35:0e:bc:14:1c:9a:62:91:4d:cb:44:a3:
f6:5c:42:dd:c7:1f:e9:83:11:85:7f:aa:0c:ee:1e:4e:06:68:
3e:b6:d0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:08 2025 by rpki-client