Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: vRMJX1Mhkej9e2+G3qQXiN+BXAYVyl2Ca/VsG+FOyJA=
Subject key identifier: DD:6D:64:4B:21:91:8B:61:6D:42:55:6C:D8:C1:78:5E:DF:DB:81:17
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 0199FEB502AD2C5450624C4DE8774297AE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0B22
Signing time: Sun 19 Oct 2025 23:01:39 +0000
Manifest this update: Sun 19 Oct 2025 23:01:39 +0000
Manifest next update: Mon 20 Oct 2025 23:01:39 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: wd0Hye92TTeJDqTCxbyeidDBWx/CZ5ERd7RDvQ6hrKg=)
2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:02:ad:2c:54:50:62:4c:4d:e8:77:42:97:ae:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Oct 19 23:01:39 2025 GMT
Not After : Oct 20 23:01:39 2025 GMT
Subject: CN=dd6d644b21918b616d42556cd8c1785edfdb8117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:fa:ca:fa:13:6c:02:31:55:fd:c6:3b:b6:
a5:df:7b:68:68:44:52:2c:25:e8:99:43:85:a5:ad:
5e:6a:4e:9c:48:81:ad:72:ae:49:49:3b:65:a9:3f:
d6:0e:4f:58:90:77:22:65:07:9a:cb:7f:27:32:0e:
a0:80:9f:06:73:63:58:1c:1a:7d:f3:9c:10:15:73:
ab:ad:66:20:11:15:42:64:fa:97:6e:b5:7a:de:b8:
33:2d:da:5f:ee:9e:b6:b2:37:85:38:50:c7:ae:db:
e4:ff:53:6e:1e:ab:92:eb:5d:84:91:36:e8:9d:b7:
d1:d5:e3:a5:37:ab:57:4d:b9:96:de:00:37:d7:2b:
51:cf:64:73:4e:5d:0c:5a:12:e4:a7:5f:8a:43:64:
9f:d4:42:9f:7b:ce:cf:bd:9d:13:44:c3:54:54:92:
a3:47:a4:ee:cc:63:35:18:98:7e:17:0c:cb:1c:11:
dd:4d:53:32:2d:a5:36:7f:02:5d:71:e4:36:c4:93:
c3:31:ba:5f:42:35:b6:03:9b:20:18:4d:af:50:4d:
b7:d7:fd:30:45:2e:b7:84:75:4a:f5:23:19:40:29:
58:5d:8a:0b:b5:2a:f3:5d:c3:da:04:41:98:30:cc:
b3:f2:3a:bf:e1:59:0c:7f:1b:91:a6:4a:ac:48:a6:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:64:4B:21:91:8B:61:6D:42:55:6C:D8:C1:78:5E:DF:DB:81:17
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:06:de:2d:07:6f:3b:ee:7f:54:d0:a9:4a:b7:82:6f:6f:ae:
a6:37:42:9a:89:87:c2:19:e4:7c:f8:55:0e:a5:dc:e3:d8:6d:
d1:bf:ce:1f:02:a8:19:81:40:00:cd:5f:e7:cc:e0:b4:1a:4e:
2e:fe:e6:91:20:56:8f:0e:90:03:0c:7f:c6:d5:a7:a6:73:e3:
f2:04:93:68:3e:58:cf:28:78:4f:c5:40:9a:32:cb:de:88:ac:
bf:af:35:32:a4:59:13:bb:18:8a:02:80:5a:6f:28:5f:55:60:
4c:ba:43:9d:a3:14:c0:fc:f3:18:4b:f8:d1:6c:69:9f:be:0d:
cc:fd:83:17:7f:c0:c3:85:e7:37:2a:d0:e5:4c:91:81:8d:3e:
b2:1e:71:c5:34:89:b3:8d:e5:e7:da:4e:c1:2c:85:ae:44:76:
ef:52:9e:3f:36:75:32:af:e8:47:8e:f5:70:c5:9c:37:0d:20:
63:cf:83:bd:95:a4:45:ec:a1:27:ec:30:e1:64:f6:c1:e3:28:
f2:95:8e:bd:6a:a8:d6:d7:e3:75:69:dc:a1:5f:3f:52:28:0a:
e3:9a:20:7c:f2:00:66:ec:04:64:48:a1:13:a4:7a:54:89:31:
cf:cb:16:d8:ba:b7:01:82:6e:14:5d:cf:d3:12:c8:f0:19:6d:
1b:e5:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:43 2025 by rpki-client