Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: 2qT6Z7TlcA4csbRDcfd5hz0sdHLuNGaIvh/kZiXWm0Y=
Subject key identifier: 6F:70:AD:BA:DB:F9:8D:51:68:43:F5:E0:88:F0:EA:F1:11:FB:38:B3
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 0199FC21A3A456914C56E6684FDE4135AA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 15F4
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: TK9l2z9RAY/LICzBIurEUXzRFpxeRbTQOR17+nCQauw=)
2: m0jbiHxRktR_kE-i3D3woRX2ZsI.roa (hash: fSOohTJ+oYWg/YD/VykP7b8U7lIYd4B0MDv4mOCNuT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a3:a4:56:91:4c:56:e6:68:4f:de:41:35:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=6f70adbadbf98d516843f5e088f0eaf111fb38b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:21:3f:0d:4b:03:45:dc:6f:f8:e9:a2:01:
fa:df:2a:28:53:54:9b:2a:dc:7d:16:7a:ed:7d:ab:
82:8e:81:b5:c2:4b:6d:82:e9:cd:78:eb:08:9a:83:
74:34:ee:42:1a:17:05:61:5a:5c:e5:58:a8:3f:49:
ac:57:9e:5d:df:8f:97:58:07:b6:3e:05:8d:b7:38:
47:de:b0:4e:5a:4a:a5:09:60:e6:07:87:37:4e:09:
d6:65:a2:c1:7b:70:ad:70:27:3a:96:9d:8d:82:a3:
6a:e6:cf:eb:dd:a3:52:7d:c1:1d:8d:5a:1c:25:32:
42:c5:d8:fa:8d:36:84:82:8f:f2:b6:de:80:f3:5d:
f7:e0:c7:4c:2e:72:f5:cd:8c:f2:b1:3f:ed:e2:c6:
0b:6b:93:41:1d:1e:76:58:8a:bf:a3:00:be:87:17:
c2:6c:6b:36:f6:d1:84:d5:b3:87:12:d9:91:8e:eb:
94:c3:d4:65:68:98:ee:bd:98:64:94:74:e2:d4:f9:
95:75:46:0a:5a:19:fa:4d:01:fa:34:42:8b:63:c0:
71:40:21:ed:68:4a:55:1b:61:7d:8d:97:44:9c:46:
c7:d0:bc:66:a1:8b:91:34:6a:33:fa:8e:50:19:5f:
6e:a6:2c:6b:c7:ed:10:4e:37:94:42:bd:9a:e5:82:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:AD:BA:DB:F9:8D:51:68:43:F5:E0:88:F0:EA:F1:11:FB:38:B3
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:4f:f1:5a:2f:d3:b6:b0:23:50:ce:09:c5:0e:f5:85:7d:
aa:b8:6a:f1:b2:63:f3:39:36:33:d9:a6:30:ca:54:5c:ca:42:
31:82:93:eb:6f:08:d8:69:ed:f0:3b:65:d8:5d:b5:33:5c:9f:
3d:e9:0a:5a:34:18:a6:d5:d5:f1:43:a4:8b:b3:d2:89:24:8f:
fd:e5:cc:38:27:f5:bc:eb:2c:55:12:96:b0:ba:26:f9:c0:03:
50:94:cc:cf:0a:d6:41:7b:b4:f8:3b:38:2a:3f:78:f7:c6:99:
49:ac:62:06:57:2a:7d:84:f4:50:1a:16:73:16:0f:02:bd:39:
4b:e3:29:b7:90:e9:73:27:9f:04:87:a7:41:fe:14:22:7c:4c:
a7:d0:74:41:27:9e:87:69:1a:69:52:cb:24:31:7c:13:1e:71:
e5:f1:64:6b:80:30:bf:f3:eb:f9:26:9a:7b:c8:9e:5c:41:97:
fb:34:32:b0:47:d4:32:f8:02:53:25:9d:8e:74:99:e8:6c:92:
84:80:68:85:6b:53:f7:05:8a:cf:95:35:db:6f:3b:93:00:46:
0d:bf:28:63:a1:41:7d:9e:4c:84:d7:8a:48:4f:e6:35:57:fe:
0b:6d:bf:90:0a:5a:77:27:a2:df:84:dd:f4:a9:b9:28:06:2f:
23:a2:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:22 2025 by rpki-client