Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File: 8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier: /upeLbl3XsGBTS7smbj1QxaDvgO5sJ000o/yu38undU=
Subject key identifier: A8:1D:3C:8C:66:B2:61:88:A8:E6:D1:1B:AC:3D:43:D3:0D:56:59:F1
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer: /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial: 0199FCC618667947FE92B02F2EE933C39330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: akYe3DRakQfljhufUyhXimbsyVVoxvbU5IdQHT+WrxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:18:66:79:47:fe:92:b0:2f:2e:e9:33:c3:93:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=a81d3c8c66b26188a8e6d11bac3d43d30d5659f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:51:40:57:b7:27:40:e3:01:4b:08:10:f4:
17:8f:d3:b7:a3:3b:4d:98:29:a7:a8:26:4c:cc:a5:
45:af:76:d1:01:09:4e:e8:17:78:da:8b:fa:d7:2c:
70:90:52:61:85:23:1d:47:b7:8e:af:36:f8:08:3a:
09:44:a4:28:49:81:51:33:9d:9a:9b:68:71:39:40:
f1:1a:fb:9c:9b:72:0f:1d:ae:59:a9:6c:15:94:6b:
47:13:15:a1:e1:38:0f:7a:4e:40:3f:fc:04:a5:6e:
38:4a:64:96:78:62:33:4a:18:ca:bb:c9:73:90:55:
82:4a:d6:08:0c:df:48:50:50:b0:da:7c:8c:ac:b9:
2c:53:10:e8:58:81:43:33:4d:df:cd:07:db:71:bb:
2d:4e:d9:38:26:f4:24:3d:88:2b:77:95:a9:a5:7b:
0a:9d:74:67:97:11:01:35:9d:e0:57:c0:ae:f3:72:
52:54:23:a7:4d:7d:66:8f:6b:ad:14:11:b2:3d:9a:
b5:20:4d:86:a9:29:16:a8:0b:21:7b:fa:62:9e:c0:
a1:8b:ce:da:70:1b:46:38:24:0f:da:62:39:fd:2b:
e6:95:b4:e8:8d:19:92:64:7c:9f:7a:b2:5b:c7:61:
a4:39:03:68:c8:4c:46:94:6a:a9:75:f5:41:cb:72:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:3C:8C:66:B2:61:88:A8:E6:D1:1B:AC:3D:43:D3:0D:56:59:F1
X509v3 Authority Key Identifier:
keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0d:fb:1b:3d:aa:f4:af:1c:1a:0f:35:65:4f:f7:6d:35:a2:
bb:2a:ac:fc:7b:d5:d5:07:fd:ab:4e:b2:f7:6b:5d:b1:58:62:
01:e6:42:69:44:28:58:54:55:a1:d9:14:89:65:5d:2a:55:67:
3f:a6:25:b3:5c:6a:97:08:f0:0c:15:8b:89:e8:6a:1e:48:7c:
f5:ae:13:8c:5d:7e:07:4f:10:92:52:8e:ba:c5:46:63:e6:ad:
dd:a5:1a:ca:7b:0b:14:26:03:0c:d6:50:e9:a7:3c:25:4f:2a:
2d:6b:0f:b8:fd:79:c4:48:11:6d:25:51:6f:bb:cf:2c:de:f0:
3b:2c:ba:d4:5f:4e:db:83:47:43:6a:48:87:52:bf:31:1b:45:
8d:35:ef:03:90:57:9d:46:00:3b:f2:b3:e3:fe:a8:85:a0:2e:
93:9a:ba:82:eb:1c:d1:a7:2b:20:72:85:5e:8c:0c:e5:c6:d9:
09:9b:bd:e5:4a:af:ce:9f:e3:02:20:24:eb:c8:c7:48:92:f4:
04:c7:f8:ba:cb:e8:3a:89:5f:a1:1d:52:b1:7b:08:ee:19:fe:
cd:ca:9a:af:c1:41:68:19:99:c3:c2:89:6e:c8:94:8d:8a:b0:
2e:e3:6f:d9:be:41:64:df:8d:2b:94:30:24:ee:14:b5:89:a4:
74:f4:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:48 2025 by rpki-client