Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
File: a8Szt0G7W1thchrTBscRR8TfK8E.mft (raw, json)
Hash identifier: 8UklqVNRDdgXjOlIxvbkr01XOKjg7AL3r/k5UxPjduw=
Subject key identifier: 60:FB:3B:52:72:30:18:F7:BE:9D:F2:32:C4:B1:22:A7:AF:9D:05:37
Authority key identifier: 6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
Certificate issuer: /CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Certificate serial: 0199FB7C844FEC56EA13040123983FEE0300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: a8Szt0G7W1thchrTBscRR8TfK8E.crl (hash: IsLFQ+mKKpmBUSa6kH7QvV3cQSoxSQsgGJjnVijc3Cw=)
2: lptkvzqZ3YAXA8erbwtu8Z-p7p0.roa (hash: WUNdsd7uaJayOlmZESESWmlDWN7XrWQH54c9bPYnQ6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:84:4f:ec:56:ea:13:04:01:23:98:3f:ee:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=60fb3b52723018f7be9df232c4b122a7af9d0537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:b1:d2:29:9e:0f:de:8e:d2:34:f5:ec:8f:
ff:22:8b:05:e1:63:e7:0d:ed:f6:83:79:18:c1:57:
3b:90:77:76:7f:61:0b:d7:ab:0b:4a:55:14:7b:ea:
b3:aa:95:fd:94:ec:d5:5f:52:74:d9:3e:fe:5b:44:
82:32:ca:ca:95:a1:f5:0c:0e:e6:64:c5:6a:0c:99:
0e:58:2f:f4:12:db:ae:97:d2:83:c5:fd:af:1a:85:
ae:dc:72:1f:69:4e:77:c7:ae:fe:5f:81:b3:74:25:
ef:76:09:46:87:e3:08:bb:c8:aa:c3:41:3c:13:75:
90:dc:c0:57:08:60:7f:dd:6c:83:2f:d7:a1:a2:70:
ef:81:24:7b:f2:47:ce:25:d2:04:91:b3:e8:0a:8c:
b0:b5:da:54:9e:c0:5f:1a:7b:93:02:f8:0f:57:2d:
87:f2:6c:e6:79:77:b0:36:17:b0:3b:5b:49:ba:5e:
bc:bb:89:96:ef:68:fd:28:bd:1d:8a:82:57:e8:ad:
7e:a3:e7:cc:43:ba:5d:3e:b5:ac:0f:fa:9f:df:2c:
61:dd:96:50:2d:98:54:d4:1c:50:a4:28:bf:f5:11:
37:df:54:2a:c3:71:7d:55:61:9e:40:80:b7:b6:63:
7c:56:3d:2f:cc:ed:91:11:87:ee:e5:a9:dd:9e:00:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FB:3B:52:72:30:18:F7:BE:9D:F2:32:C4:B1:22:A7:AF:9D:05:37
X509v3 Authority Key Identifier:
keyid:6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ce:5b:a2:00:32:ab:7a:93:f8:8e:89:36:6a:56:60:1c:7e:
2d:48:80:17:81:76:00:59:90:2d:55:4b:96:32:bb:44:a3:68:
c5:f4:26:0b:ee:05:a4:e5:c5:9a:8f:32:c3:56:8c:d5:36:7a:
bb:78:42:b2:ca:96:18:c5:f8:4a:0e:db:7a:04:2b:11:30:db:
7c:de:d3:fd:3f:d9:45:d6:e0:3b:0a:ea:15:37:d1:b0:5c:67:
a8:7f:4f:d6:d2:b9:7f:e1:da:c2:d0:47:d3:bc:1b:08:98:f5:
7c:cd:ca:cd:21:af:b6:65:26:24:d5:65:ba:2a:77:ec:de:dd:
c8:fa:22:00:73:97:36:d5:4d:0c:42:af:c7:0a:3d:02:c0:6a:
67:17:16:68:92:7d:b2:d1:4a:16:51:cb:6e:82:49:40:55:5c:
03:ea:91:c3:3b:2d:a3:bc:00:08:14:ff:6a:1d:d4:84:c2:22:
53:f2:5b:1e:ea:01:1f:49:5b:61:d1:6e:06:67:09:4a:9d:fd:
8d:e8:e4:91:35:cb:87:c0:27:59:c6:9d:a5:e1:99:00:78:f7:
e4:8f:f0:a8:2a:66:8b:04:d3:90:34:f3:04:97:0c:21:36:fb:
79:65:29:0d:f1:2f:1d:65:7d:ed:0d:b6:84:13:0f:c5:e5:98:
55:7e:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:43 2025 by rpki-client