Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: GMAdlG+/py5MfMJz6zKoVlQPGsGvt1L/w5Tiajd11+k=
Subject key identifier: B2:88:F3:D1:1D:18:6D:3E:C3:95:81:15:65:4E:51:3D:17:34:10:2F
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 0199FE102D3D220C74912FE580A322AA66D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 04BE
Signing time: Sun 19 Oct 2025 20:01:36 +0000
Manifest this update: Sun 19 Oct 2025 20:01:36 +0000
Manifest next update: Mon 20 Oct 2025 20:01:36 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: JOfBGnVSlos3cWW4CmpFPQMu1J7qQC4g//PIzFozkEs=)
2: ZEIkHOpAjx_99PsiN5R21UlMSKc.roa (hash: vTffovFaT4NCjWWk8Fwv+MgUP11pdffCPeTnPWoxFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2d:3d:22:0c:74:91:2f:e5:80:a3:22:aa:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Oct 19 20:01:36 2025 GMT
Not After : Oct 20 20:01:36 2025 GMT
Subject: CN=b288f3d11d186d3ec3958115654e513d1734102f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:3f:09:87:14:34:81:96:db:87:f3:6b:bd:
73:a3:f2:f9:55:34:ce:e5:f3:85:8d:b7:00:12:2f:
78:76:fc:da:c7:8d:ac:cd:b6:17:b4:84:7c:e0:f0:
f8:45:33:de:ee:2c:f1:2b:c8:05:57:06:a1:ca:3d:
af:00:d0:dd:99:76:d7:f6:c3:38:31:8f:23:6f:63:
9a:19:d7:c5:f5:4d:f5:46:87:d3:8d:0f:5e:cf:43:
ae:6e:64:4a:15:73:47:73:f8:ac:45:95:90:96:b4:
68:93:c1:87:84:8e:73:b1:cb:fd:53:52:7b:87:1e:
9a:43:9f:6e:ee:a4:82:bd:8f:67:20:8e:4e:81:4a:
b9:2a:0c:64:f2:62:1c:b3:6f:82:2d:37:37:f5:80:
20:8d:fa:9b:f0:4e:d4:dc:31:ff:36:9a:eb:3e:9d:
bc:26:9d:63:a8:14:a1:aa:63:d8:50:eb:85:86:f8:
3f:5b:4f:60:20:0b:ff:4b:1b:69:47:f4:db:a2:c3:
65:0c:34:40:69:2f:66:ed:35:2a:9b:67:01:c6:ff:
40:d1:a9:80:92:2c:21:97:4b:67:7b:43:f1:33:ea:
25:b8:a4:b7:72:76:0d:49:a7:cd:6d:4b:be:5a:4d:
46:40:ee:c8:ac:38:69:67:54:ca:3d:c4:2c:64:84:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:88:F3:D1:1D:18:6D:3E:C3:95:81:15:65:4E:51:3D:17:34:10:2F
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:03:aa:13:48:49:34:71:8b:f0:cf:63:1f:4c:0a:7d:61:94:
35:fa:48:36:c5:4d:ac:e7:d9:ff:d7:62:c4:80:4b:7f:d1:ba:
eb:28:c2:d4:71:24:01:ee:d8:df:2b:1a:55:a6:af:bb:78:a3:
06:76:a7:74:a3:1f:04:1e:e9:1d:b8:7c:ad:1d:a2:8b:a5:b2:
f1:4c:64:dd:f9:16:a6:2b:ab:22:27:4a:37:3d:c3:59:67:0f:
1a:2e:dd:86:aa:44:ab:98:48:c7:34:7b:8d:66:14:19:a4:ed:
ce:25:ed:f2:b9:7c:78:a6:47:5b:da:d4:59:98:73:63:56:cb:
48:4d:89:b1:22:9e:1c:a1:fb:61:a3:ab:ad:c7:25:f0:c1:28:
db:25:ca:5c:39:55:5e:a9:9d:a8:72:6d:f6:0d:ea:a4:71:dc:
82:5e:3b:92:06:cd:03:e5:19:9a:24:08:b0:87:2b:a2:db:c6:
9e:c4:a0:e6:4b:b5:03:da:bd:90:ef:b3:cd:b9:c1:81:d9:f9:
85:4d:6d:ad:bb:a8:a5:97:64:72:f2:bd:2d:37:c1:49:0d:bb:
c8:e9:99:1b:5a:25:2a:e6:68:10:bb:85:8e:44:b4:b2:11:3b:
68:66:c4:a1:24:c4:e6:0d:af:19:4f:84:97:d8:82:88:e6:66:
67:50:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:56:55 2025 by rpki-client