Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: w3fyIlXXfj1I9F+p/Z147kYcFoSr3A1JhEYHTsxjllE=
Subject key identifier: FE:C0:1E:2D:ED:42:B6:F0:8E:A4:FC:48:D5:B3:AA:0C:0B:B8:37:6D
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 0199FD345AF1BA24A120585BF61DE68C9315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: RFo1D45EAZR+DcDbdTmVXUpG5A1NsTIIvrGmoaLietk=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5a:f1:ba:24:a1:20:58:5b:f6:1d:e6:8c:93:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=fec01e2ded42b6f08ea4fc48d5b3aa0c0bb8376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:1c:73:41:9f:73:64:2d:01:fd:48:69:44:
73:ba:97:67:0f:f2:48:d7:2a:c2:9b:3f:b5:83:9b:
ce:01:3d:a0:15:5a:82:c1:c5:75:00:21:66:a3:3a:
12:f2:9c:92:f7:2a:1f:20:dd:0b:48:27:6f:43:ca:
00:e7:91:ec:4d:41:2e:bd:2b:17:d8:da:4e:64:0d:
b7:65:07:8f:f2:02:89:3a:a1:8e:d6:3b:27:1c:f0:
ee:b8:7a:19:1b:21:f0:0c:f8:64:c4:98:c5:2f:06:
96:b4:e1:15:89:e0:83:bb:df:58:ae:02:05:42:c3:
a0:03:c2:fc:c3:6f:52:63:5f:1d:6e:2c:1f:f4:16:
c2:29:c8:b1:fa:1d:7b:3f:d2:85:04:19:de:b0:cc:
e4:a2:7a:27:7a:c9:af:86:42:ce:17:31:0a:b9:70:
a0:cc:6d:b2:c5:73:7e:6b:a1:d3:bd:c4:f7:95:0b:
f2:e5:d4:82:76:77:5d:be:38:3b:fe:a0:01:17:bf:
5a:cf:72:7b:2e:b4:b3:f2:ee:98:8d:f2:1a:24:d3:
d0:e5:af:fb:91:7f:29:df:ef:b1:28:f9:f1:e1:a7:
49:c5:58:96:0e:13:33:a4:53:69:82:ce:a2:82:ee:
b8:5c:62:91:e1:52:d2:e7:71:e9:7e:9b:ef:f7:2d:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C0:1E:2D:ED:42:B6:F0:8E:A4:FC:48:D5:B3:AA:0C:0B:B8:37:6D
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:20:af:18:f9:63:dc:7c:c2:4c:79:06:ce:48:02:d2:80:
3d:7e:29:a4:46:93:56:71:8d:ce:87:b4:20:54:89:a3:78:bf:
e9:66:eb:0b:f2:08:06:cc:47:7f:29:da:d9:63:b7:6c:cc:0e:
99:50:d5:f3:11:35:1c:2b:9d:8f:8e:b5:fd:c1:b5:08:41:93:
e8:36:44:49:7b:28:a1:20:6e:0e:05:85:2e:03:3f:c2:bd:bd:
9b:66:46:20:df:05:38:f0:d6:e0:23:ce:07:44:e9:1a:ff:32:
25:bc:3d:8f:4f:30:79:59:71:2a:35:1b:e8:7f:8f:89:ad:3d:
ce:03:c8:e0:91:ba:7d:10:2f:ce:57:3e:67:6f:27:88:3a:62:
c1:84:11:55:53:25:7c:9f:da:0b:78:67:8a:bc:6e:5d:57:cf:
bc:80:f9:57:69:4f:48:44:9b:db:ca:22:ee:9a:d9:8b:3b:e4:
0d:86:78:77:ac:be:d7:a2:b0:94:10:a0:ae:d8:e1:dc:bc:e2:
38:02:63:15:30:a1:a2:5e:dc:26:cb:57:4c:98:8f:a4:ac:40:
f6:7e:53:5e:d1:e7:f3:4f:6e:78:49:1c:3a:1f:f7:f9:0f:4f:
01:48:dd:e0:d9:76:51:03:5b:01:12:73:f4:30:a5:64:48:2f:
6d:fd:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:20 2025 by rpki-client