Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: yJEHGNMEoBcN9/ZWHTlcjVK/nlS4bkO6pLPj3/0SbzI=
Subject key identifier: 94:59:01:B6:78:A4:86:CD:F5:26:D3:77:E8:E2:49:E9:0F:4E:16:10
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 0199FAD81B0E3A7648C6EA6DBB61A87A0872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 118B
Signing time: Sun 19 Oct 2025 05:01:30 +0000
Manifest this update: Sun 19 Oct 2025 05:01:30 +0000
Manifest next update: Mon 20 Oct 2025 05:01:30 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: +bpGujiLL1iqnpidphLEMe6CmroqRRMvmSPjhga0s40=)
2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:1b:0e:3a:76:48:c6:ea:6d:bb:61:a8:7a:08:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Oct 19 05:01:30 2025 GMT
Not After : Oct 20 05:01:30 2025 GMT
Subject: CN=945901b678a486cdf526d377e8e249e90f4e1610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:55:5f:59:24:ea:ea:8e:f2:a8:8d:c6:a2:
ae:56:8d:1e:6d:25:8e:f9:e5:fc:5d:55:c0:64:f2:
b1:5d:71:e5:f7:24:ad:ba:44:2e:8c:fc:6b:c7:3e:
0a:3d:5b:3c:ef:cd:5a:bb:c9:bd:4f:82:8b:a3:55:
24:83:2f:b6:59:e8:1a:b5:b6:d4:15:45:bf:6d:c1:
78:ef:0e:4d:e0:89:c9:f0:d9:81:c9:01:22:cc:f0:
8d:d2:52:fd:66:65:e8:ec:17:7c:de:d6:e8:7e:8b:
57:03:83:8d:6d:70:41:a6:7a:5e:8b:74:d8:0d:30:
7d:08:c9:20:22:a1:7f:db:65:c4:4f:0c:d5:3b:dc:
b8:ad:48:fe:bd:2e:e2:56:14:95:bb:ba:c3:e3:4d:
97:91:f9:d4:ed:74:a5:76:cf:3d:67:34:5a:eb:09:
9a:62:f6:15:1c:c2:c0:ef:e8:fa:e5:57:47:78:39:
0a:74:2d:57:78:55:02:ff:db:b9:f2:0d:be:0a:f8:
af:ab:6e:42:0f:95:93:22:63:9d:4d:48:87:eb:d9:
98:3c:52:8b:fd:d7:09:6d:c1:d5:f3:78:96:4e:55:
33:48:93:d7:c4:e3:a6:4a:3f:c4:68:b1:b1:81:8a:
b5:40:75:df:53:62:30:73:d8:ec:4d:c3:df:ef:7b:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:59:01:B6:78:A4:86:CD:F5:26:D3:77:E8:E2:49:E9:0F:4E:16:10
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d3:07:47:2a:12:8d:00:b5:d4:2c:09:7e:58:0e:db:18:dc:
ba:4b:c2:7b:d8:0f:15:fc:4f:7e:ee:28:ae:d2:e0:a4:f5:e4:
5d:38:49:4a:c5:c6:37:1b:11:16:75:53:55:a4:06:89:0d:56:
0c:cc:04:11:f6:85:98:33:91:e2:78:fb:80:8d:c4:51:c3:3e:
0a:eb:35:22:99:17:43:33:4b:d4:d4:36:d1:02:dc:4b:31:55:
30:d9:a0:aa:9c:a2:32:e2:39:1c:3a:39:6c:e3:b6:07:e2:35:
80:01:72:1d:8a:ca:1c:e9:ed:65:c2:61:1d:fe:de:51:76:dd:
67:37:38:dc:29:04:be:cb:af:0b:87:8f:76:2d:94:93:49:99:
c8:c3:6d:f0:98:3d:8f:a5:92:ae:75:e7:23:de:8e:8b:4c:5a:
85:e9:30:0d:f6:2c:2d:6f:23:2a:e6:27:f6:df:b6:91:2e:4b:
e9:09:32:02:d8:a2:43:e3:22:d6:4a:d7:0f:19:00:99:ff:91:
9a:b6:0d:5c:98:e8:bd:ee:cf:71:f8:4d:d6:c4:7e:bb:0a:4e:
62:28:b3:2f:e8:a1:6a:18:cd:86:f6:84:e0:6b:fe:ee:42:fd:
48:e1:a2:52:96:95:d6:29:45:ec:24:4d:cf:df:fc:cd:ba:44:
52:64:ab:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:44 2025 by rpki-client