Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: DVd/SWFjt/WptNkOnKQj0zViOD9gRJtPGuXTaRrfVf4=
Subject key identifier: 9B:69:91:D2:A1:A7:AD:06:27:EA:D7:8B:41:78:2C:A5:25:63:FE:64
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 0199FD3462D63999912163F4D8D183FA4C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 08F5
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: gKgvPeCArCWk2kghgb51ufX/WnMpDj3P56jWyQ24IgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:62:d6:39:99:91:21:63:f4:d8:d1:83:fa:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=9b6991d2a1a7ad0627ead78b41782ca52563fe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:a5:cf:55:8a:34:6e:69:09:3d:b6:4f:b9:
e8:0a:53:e6:b6:c0:4d:8f:af:72:d6:0c:43:47:4b:
0e:d1:ce:56:d5:c4:7f:f3:ed:83:a1:bc:5b:e0:f9:
be:f6:19:77:ac:02:e1:4d:fa:a5:0c:84:78:f8:8b:
25:88:cb:2e:c7:e1:19:6b:87:2d:76:9f:92:96:31:
18:ba:8e:00:26:a7:28:8b:54:0d:20:77:01:16:4e:
0d:ae:c7:c9:cf:c5:cf:a9:1b:1a:b3:47:65:74:aa:
80:54:7f:89:ef:d6:76:e0:e3:65:e9:c4:16:be:1d:
99:94:71:25:40:24:9c:e5:e6:5d:dc:a1:3f:aa:36:
07:7b:09:42:ec:e5:b4:00:c9:3d:9f:63:d3:cf:c9:
84:f3:f1:23:ef:36:d3:3a:ed:cc:4c:17:62:57:38:
df:67:30:7a:c3:33:0a:e4:de:37:c8:81:37:f9:49:
f5:f7:5c:f1:90:f6:8f:b4:08:c2:25:bf:10:5e:c3:
eb:03:e2:e9:2f:09:5c:be:7b:97:dd:d8:c6:f9:30:
89:a9:70:37:46:a7:21:3c:3c:13:01:6a:a2:3a:3f:
94:b4:67:3c:87:78:23:4c:c4:39:ec:45:dc:04:99:
36:e4:58:da:6a:f8:55:9e:f1:bc:24:bc:c4:84:de:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:69:91:D2:A1:A7:AD:06:27:EA:D7:8B:41:78:2C:A5:25:63:FE:64
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c3:7e:c3:81:47:06:c4:aa:6b:d6:cb:8d:6f:e0:be:7a:52:
70:5f:38:d3:68:c5:5f:87:bb:ef:51:94:e0:dc:72:06:03:4d:
55:eb:73:2f:ea:44:e4:e9:c9:38:87:69:9f:f7:4d:4f:c8:1c:
45:17:5c:27:d7:42:9c:26:5d:2a:98:88:3d:2f:67:ae:b4:49:
af:ca:9e:2f:a8:b2:00:8a:3e:7c:fc:c2:b8:f5:32:6f:39:c1:
05:ff:40:07:b9:6c:7f:9a:6b:fe:3f:35:d2:6d:81:13:22:3c:
44:cd:9c:1f:7a:be:92:56:2e:ef:6a:3b:da:9b:b8:09:5d:9f:
f6:56:8c:11:52:8d:67:66:6d:35:4c:4a:f7:79:9d:a8:4a:cc:
f3:0b:fd:f2:50:71:98:51:d3:a2:bc:59:b3:1c:30:12:b7:bb:
e7:aa:c2:20:ca:b4:c6:ae:dd:06:d3:6f:28:e3:73:7c:39:00:
33:d6:33:19:8b:88:63:65:cf:74:6d:9c:9e:4e:cd:cd:fe:4c:
9a:df:a3:6a:4f:5a:11:09:41:d7:77:4b:32:30:af:e8:fa:84:
dd:10:4a:a2:32:05:70:01:2b:5c:d8:e9:3f:a1:ca:b2:f6:f7:
75:0d:ee:9c:c8:2e:6c:09:bb:b8:0f:cd:cf:b6:8b:3a:5f:92:
8e:62:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:47 2025 by rpki-client