Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: Lb/xOdSyjMXs8DpB5AORgHpzaxjI6oi421TOKGqoinI=
Subject key identifier: FB:07:A0:84:C2:CE:46:3F:4D:CB:BA:3F:87:86:F6:3C:8B:7E:F1:06
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 0199FD346D537A6C4E47DBC7385968D8F75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: VpjjwD56ZHLS6tJ2Ef//D+C9l6TB9/y4z00rTeuFliA=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6d:53:7a:6c:4e:47:db:c7:38:59:68:d8:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=fb07a084c2ce463f4dcbba3f8786f63c8b7ef106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:31:81:c8:af:bb:0c:ca:ab:83:29:fb:4e:
3f:69:a4:38:15:cc:d8:0d:e9:9f:b4:ca:96:9f:e6:
81:20:3b:83:54:3f:99:df:38:88:8e:33:fa:38:7b:
24:25:da:11:b8:a1:95:98:8f:46:7e:0e:2c:87:4d:
c7:40:74:3f:b6:01:79:3b:55:51:e5:77:cf:d3:97:
c1:75:2a:d2:6c:f4:52:bb:8d:23:79:d7:98:77:59:
6e:ea:3c:1b:5c:98:38:5c:ba:e3:c8:d0:fa:1c:b8:
52:38:6c:c7:8c:86:2a:e8:1a:35:2c:b5:f0:72:da:
5e:5c:14:ee:36:bc:73:b6:44:5e:b5:c8:d9:2f:0a:
a9:b0:31:9d:9e:43:ac:64:31:ea:b0:12:21:27:38:
09:52:f8:d6:c9:9a:a0:6c:97:5f:7d:6f:f3:91:b2:
80:46:af:fc:cf:13:aa:fd:0a:82:f4:90:93:c1:5c:
09:25:26:14:40:e5:d9:c1:a6:31:e4:44:e5:50:16:
0a:33:15:20:d5:31:af:d9:43:ab:51:30:2d:4d:13:
c8:e0:2d:c7:b7:de:b2:63:2c:80:95:a8:00:c3:9a:
04:7f:52:ea:21:aa:f5:ef:ef:34:27:bf:b6:f5:6f:
38:1d:74:70:cb:eb:0a:43:ca:84:d2:de:a1:38:3e:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:07:A0:84:C2:CE:46:3F:4D:CB:BA:3F:87:86:F6:3C:8B:7E:F1:06
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:d1:32:b5:30:ec:89:01:cf:df:bf:c1:4b:92:58:81:be:
14:e4:90:f7:a1:51:3b:5b:9f:9d:14:31:23:4e:81:f3:e9:6a:
fc:c4:b6:e3:75:8a:5a:9e:55:33:c2:c2:4f:10:ab:5e:6c:47:
43:d1:5f:43:6f:d9:70:5a:f6:6b:cf:c9:03:7e:e4:c4:0a:27:
3c:39:30:e2:e1:b6:ca:c6:91:65:24:4d:f8:9f:68:38:05:51:
a4:11:a0:21:32:1d:7e:96:e7:6d:ac:0b:cb:20:f2:0d:c2:81:
de:ca:bd:dc:36:7c:d6:9f:90:d2:96:2a:38:7e:83:69:41:57:
84:bf:c7:b8:3d:5c:98:6f:3d:fe:b9:59:13:9e:87:67:52:c0:
90:bb:c0:38:73:2d:df:eb:d8:73:9b:c4:d6:92:57:91:72:ca:
96:35:41:cc:74:6d:82:71:bc:9b:6c:5b:7d:cb:0c:f4:5a:7a:
6a:04:df:d5:3d:7a:f1:99:21:87:ac:b1:6d:b2:71:a5:3c:46:
60:cc:81:cc:32:81:d9:8f:3e:62:c3:00:07:39:f6:76:7c:1c:
2e:58:4c:20:fa:54:8b:d7:17:06:8a:db:56:13:cf:28:26:50:
4c:92:9d:e2:7f:1f:c8:9f:9e:6d:e3:e1:da:c7:3e:3e:9a:e0:
46:00:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:37 2025 by rpki-client