Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: h9QPbW/Lk9E/APgPEzmvRt3fDAQcXbeP3DXl/HA+0Iw=
Subject key identifier: AC:21:DA:8C:7F:05:C9:24:9E:A9:7F:17:F5:4D:DF:1C:5A:3A:B2:ED
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 0199FD342F0C7401FE69F0EAD127D58BDE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: AAaqU0TfeuoXAnjpOXO54kUg++9PzEpRhay1mUmdE8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2f:0c:74:01:fe:69:f0:ea:d1:27:d5:8b:de:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=ac21da8c7f05c9249ea97f17f54ddf1c5a3ab2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:fb:27:4b:d9:1d:b3:46:f9:93:48:e6:d7:
b5:fd:9b:40:48:a2:62:dd:13:cb:79:d1:9e:30:9b:
51:48:41:be:32:b4:7b:eb:13:b5:5f:0a:3b:d4:03:
f0:e2:fd:c1:03:65:b2:bc:b5:5a:05:76:35:5a:55:
41:23:57:b4:57:6e:3f:ae:03:ec:b3:fd:f2:4c:98:
a3:08:a3:5e:7d:5d:41:e7:e2:fe:ba:d7:90:97:64:
6b:28:26:b0:c2:5f:63:f2:99:7e:63:3b:83:e7:4d:
72:66:8d:0e:b5:80:5b:df:81:6c:0d:42:bd:bd:3b:
fd:5f:2f:fd:25:d6:aa:b0:e4:8f:81:85:0b:f2:06:
a3:18:d5:f1:91:29:c6:c7:27:65:b4:6c:85:3f:4a:
2f:5a:d0:73:49:c0:46:c8:5d:2f:53:32:ff:99:77:
a7:b9:76:d1:7e:ba:f9:c2:91:1e:b5:e7:89:85:7c:
d0:b8:e3:06:14:5d:4c:69:e6:37:64:87:48:b3:52:
b5:aa:34:79:89:63:b6:86:bd:a7:d2:54:b4:83:a1:
bf:6e:08:7f:c9:72:bf:bf:8f:2e:58:54:57:d6:77:
09:3d:79:64:06:78:52:74:68:ea:80:80:a3:66:b6:
41:5e:17:be:75:9d:ba:8f:9f:08:87:23:38:89:b5:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:DA:8C:7F:05:C9:24:9E:A9:7F:17:F5:4D:DF:1C:5A:3A:B2:ED
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:da:9f:e8:84:c3:4f:f1:15:42:bc:37:1d:ad:ec:80:b7:
79:5e:b2:f1:1c:d8:7e:74:56:32:9b:41:a7:57:ed:76:72:4a:
fa:96:2a:eb:dc:84:75:57:9e:83:d4:ba:27:8e:60:39:aa:01:
65:f3:35:09:90:29:dc:a7:90:e0:ed:7a:a5:e2:04:45:1a:d5:
53:aa:be:06:1d:69:34:a9:55:82:4c:69:80:07:3c:13:11:22:
2f:bd:72:60:a9:90:e9:2a:70:5f:6c:fa:14:20:f5:c7:f4:04:
53:02:b5:92:0d:2f:b4:df:b3:b8:66:f2:4f:92:cf:98:8f:b5:
27:3f:8c:05:18:86:e3:53:6d:9b:6f:a8:79:d9:b6:73:c5:72:
3e:7b:34:c0:46:19:4c:cc:f9:2f:56:06:5e:ce:73:50:d0:9e:
02:f7:b7:84:fb:5c:88:c3:f4:9d:61:00:20:0c:e2:24:39:e4:
ce:d9:1b:64:46:8d:91:93:4f:ae:35:c1:27:78:15:d6:fc:a9:
76:a4:6c:1c:52:93:eb:30:20:6d:94:8f:e5:99:82:f7:33:ec:
f1:a5:ca:bf:d6:7f:7c:bc:90:df:54:7d:da:00:a4:04:37:63:
f9:9c:4f:c9:8d:15:85:5b:e6:de:fc:c4:9e:06:c9:63:19:9c:
24:6d:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:58 2025 by rpki-client