Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: FheRIO+/CXJPh8WXJPvpjBkJpu04Q5h7WJZ7YZuuj1g=
Subject key identifier: 31:66:EF:54:20:2E:9A:EB:12:23:8C:4D:26:7E:1E:8C:BE:24:A0:E4
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 0199FC8F7BD2D17F1C51C856B68DBFD31A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: F7yqAF6sRTAS1cblpwyK+jcTjGW3nSr85ZM6NAOAOH4=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7b:d2:d1:7f:1c:51:c8:56:b6:8d:bf:d3:1a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=3166ef54202e9aeb12238c4d267e1e8cbe24a0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:46:03:08:eb:61:b8:29:44:a4:d0:71:27:
e6:5c:ed:30:1b:15:e7:d2:84:9b:e8:db:9f:e5:65:
8f:60:4a:c4:f7:eb:cd:10:02:d5:ae:4f:57:39:58:
d3:ec:7a:cf:e8:40:5d:d3:49:55:24:a9:67:e6:df:
7a:3a:2c:e8:f9:13:84:13:d3:30:cd:ba:5e:b7:7d:
ba:e0:6a:e5:b2:75:dd:8a:a0:45:56:fa:54:6a:39:
9f:1e:f9:20:60:3b:24:c4:68:72:9b:12:5d:bf:b4:
b5:e7:32:f3:3c:1e:59:04:2c:6b:34:37:94:01:31:
5c:bc:83:5e:42:b0:28:29:73:5a:ce:e3:ea:9e:5e:
bc:d8:28:86:11:46:a2:61:97:52:25:f7:a6:46:3a:
20:2f:f7:c5:ec:4a:7f:dc:78:30:f7:3f:5a:19:c9:
60:48:4c:fe:89:b4:a2:64:ce:ba:a5:76:db:57:dd:
e1:0f:de:fa:95:28:b7:c3:97:de:3e:29:5f:15:5c:
4a:78:9b:64:e2:3a:64:be:25:b0:a2:1f:c9:43:3b:
15:17:69:e6:b2:bf:a8:42:e8:fb:4d:bd:29:09:7e:
6e:c3:8e:31:41:5a:28:0c:73:f5:3d:87:7b:67:b5:
c8:5f:d6:f3:37:f0:b8:41:1b:f5:f0:24:b2:0d:c4:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:66:EF:54:20:2E:9A:EB:12:23:8C:4D:26:7E:1E:8C:BE:24:A0:E4
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f3:d2:bf:d6:f3:08:3e:3a:6d:b6:c1:01:1a:52:c0:1e:79:
14:80:64:92:9a:48:8d:28:05:8c:a5:6b:33:31:77:32:a2:b5:
fe:53:83:77:88:82:a2:76:59:04:2a:11:d0:d2:84:9f:b3:6d:
17:4b:89:eb:84:42:b6:bf:40:9e:42:21:70:83:17:a2:55:6a:
8c:b4:52:c1:10:2c:c0:3b:5a:79:f9:8d:a9:65:53:f9:e3:dc:
de:c9:8c:da:f3:49:b0:27:84:31:d0:3b:e5:a5:87:80:25:57:
55:67:be:d4:9b:4b:f6:c2:14:c2:99:aa:2b:33:f9:71:d3:ec:
de:81:ee:b1:21:d5:1b:e2:ab:ab:d3:50:18:43:7b:0f:0c:ab:
05:ce:34:8c:43:1d:02:ed:49:84:f9:95:19:eb:6d:e5:9e:d9:
0e:57:aa:b4:d7:00:a7:74:a7:c3:f6:4b:1a:f0:ca:2e:7b:c9:
01:06:72:f6:a1:de:ca:62:07:9a:8e:9a:94:fe:7f:9d:db:5d:
f6:eb:54:1b:b9:ce:d8:a7:62:35:4c:ab:d6:cf:df:f2:e9:6c:
d4:00:8c:ae:92:bc:e9:37:30:5e:47:91:dc:a3:fd:b2:4a:02:
44:fa:55:aa:f9:d2:c7:86:fe:b1:fe:c5:cf:63:6d:ce:e2:dd:
5f:a9:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:55 2025 by rpki-client