Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: /gzU9VfoMh0sa+/b+gFrU1W8g0HnIrvQWiQ8Tx/d/gk=
Subject key identifier: 62:03:E3:C3:32:9C:D5:BB:F5:8B:82:E7:C2:E9:AC:7E:18:30:BE:9D
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 0199FBEB506173F91680A2926C891A82CC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: AZmKBaK5gPFJWi+T5rejCOlwuIb7GhkAQDVSjuWaR+M=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:50:61:73:f9:16:80:a2:92:6c:89:1a:82:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=6203e3c3329cd5bbf58b82e7c2e9ac7e1830be9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:80:6a:51:6f:1a:75:ef:7a:a2:1c:a1:d1:
8b:80:08:1d:8c:c9:f8:6f:1b:50:2e:d0:e9:ce:3a:
16:8d:bd:6e:a4:d2:6a:d3:43:16:51:b6:d1:23:80:
35:f6:24:5b:f6:0d:3a:a6:9b:0e:a1:5e:89:b9:a6:
6c:d5:9a:46:fc:28:42:99:06:36:aa:0c:e4:55:e4:
d8:04:d3:86:fb:f4:9d:0c:4c:66:a9:7d:a8:6c:ef:
c9:99:96:ae:20:f6:98:88:1d:27:ec:92:6d:f9:70:
cf:3a:9c:53:5d:ed:9e:52:69:7c:6b:8f:31:2a:4a:
62:45:7d:32:1c:e1:a0:d3:74:a8:0a:23:dd:43:41:
fd:01:f1:7d:f3:8a:2e:b2:48:de:95:57:44:8d:73:
97:4d:28:e1:9f:4e:d1:e6:b0:f9:c6:f2:45:e0:5c:
89:9a:25:f8:98:23:5a:a1:82:10:52:90:f6:ae:44:
84:71:68:a5:39:09:d2:b1:7d:19:0b:1e:c6:c6:5f:
8f:a7:7c:41:7e:31:a5:b5:f4:69:ad:fe:96:00:00:
ca:de:be:e1:04:08:75:72:90:1b:e5:94:bf:82:dd:
2c:c4:af:b3:6c:7b:78:e1:cb:a6:a9:f8:9c:07:ab:
b1:9f:ed:1b:c7:fb:f1:3a:21:0f:56:91:3e:12:f2:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:03:E3:C3:32:9C:D5:BB:F5:8B:82:E7:C2:E9:AC:7E:18:30:BE:9D
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:bd:1a:dd:bc:14:36:54:a6:16:fa:99:42:06:a8:c4:04:
ff:c0:e4:39:08:97:82:1a:d5:a5:33:2c:bf:09:74:12:5c:17:
a3:cc:b2:81:b7:ce:2b:ac:6a:22:23:f8:52:86:bc:18:90:48:
5c:cc:77:b9:d2:70:1b:4d:6a:85:e9:e5:b6:d1:50:a6:02:8e:
9b:44:13:bb:bd:2a:e0:97:0a:87:d1:36:5c:14:b7:4a:bd:64:
29:46:a9:ef:02:5f:dc:40:75:99:c9:37:be:c6:19:73:21:42:
8e:24:02:0c:fb:e7:0b:91:82:42:c0:8c:cf:da:d7:2d:d2:0c:
53:4b:62:1b:56:b4:2a:74:7b:fa:df:7b:42:3f:ed:ce:e3:fd:
9a:26:7b:25:44:58:fa:31:ba:b0:46:f2:83:92:13:3e:3c:12:
04:7b:86:83:ae:19:af:05:7c:c5:9b:d5:1c:2b:bf:db:8f:25:
3e:0e:68:24:2a:f7:4b:fe:4c:a5:d5:9b:79:46:08:b8:fc:20:
1e:b3:73:8b:a1:98:b4:2d:73:6b:9d:66:9c:2e:9e:a4:e1:c1:
25:00:29:f8:5c:ae:06:7f:62:6a:09:c4:fc:a8:9d:a8:e6:dd:
12:e5:76:05:9e:3c:31:34:6c:30:75:20:96:4d:52:65:7c:9c:
88:79:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:08 2025 by rpki-client