Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: KCqCEH/b9+bG/oJIZ5aSlWGEt2G2N2GnGj9PG7k9AGw=
Subject key identifier: 0F:B9:46:7F:F8:A4:52:0F:E6:3A:64:57:6C:CB:E3:58:F3:E7:2E:C9
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 0199FBEBBFEBCAF2CC0275E0893A1EC43F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: NR3LYGmJZwcUO7XhRzTrVZTLEXhM5N4YmkCsTPbjHSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bf:eb:ca:f2:cc:02:75:e0:89:3a:1e:c4:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=0fb9467ff8a4520fe63a64576ccbe358f3e72ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:d0:e3:a0:9f:db:95:cf:9c:83:36:a1:a6:
85:68:81:10:4e:f2:b8:23:bd:85:7c:43:22:e7:a7:
de:34:04:23:4d:63:a5:43:f6:43:6c:c3:19:bb:31:
b1:16:77:56:7b:b0:bf:c0:62:d4:5b:27:31:da:6e:
64:13:c3:e9:12:1d:31:26:08:41:9b:58:b7:61:e2:
de:02:5d:b3:b7:be:ca:27:93:06:47:58:df:ad:81:
5b:4f:c7:e2:8a:16:c6:27:38:36:86:e7:d7:0c:10:
a6:fc:8c:9e:17:7a:b2:da:be:35:51:08:c5:13:c2:
ad:02:30:1b:af:51:ab:ee:1b:51:a7:4d:ed:33:04:
46:60:b7:38:32:82:76:69:46:26:bc:ce:95:11:b5:
8b:d5:ad:3b:db:65:00:80:2d:9b:ef:cb:a2:80:be:
ca:a3:3c:08:b2:3c:d2:f4:1d:bb:8c:30:da:f5:34:
43:f8:10:d5:10:a9:7f:dc:06:57:ed:d2:ed:6f:7a:
94:f5:ce:29:59:eb:b4:45:8c:d4:0b:3f:48:9e:41:
34:84:f6:fe:3e:b4:10:d9:7f:1b:a1:05:d8:43:47:
0c:f6:7a:0f:31:fc:ca:45:c9:e1:54:f7:19:69:be:
3c:17:c9:7c:19:37:fc:ba:29:da:67:c6:d8:26:bb:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B9:46:7F:F8:A4:52:0F:E6:3A:64:57:6C:CB:E3:58:F3:E7:2E:C9
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:56:e8:0a:f2:7b:e7:f6:d9:1a:d2:ac:c2:0c:54:9c:4b:d0:
53:ce:03:3c:d2:3c:5a:79:a8:f4:9f:fc:d7:f8:fe:f0:53:c9:
89:0a:64:10:0c:06:25:75:b8:b2:3c:d0:ce:44:d2:62:71:5a:
e2:ff:63:ef:db:f0:47:59:35:c7:36:b2:c1:76:50:ee:fb:b0:
25:72:71:b5:f7:fd:94:e3:53:77:4d:14:ae:f7:55:78:27:89:
db:75:1b:f8:4a:ac:43:92:20:77:e0:47:78:01:11:e9:58:b0:
38:6f:e6:84:95:52:b2:6a:18:bb:dc:de:74:e1:ae:ad:5a:eb:
5b:4f:20:73:0d:16:a0:9d:2b:06:00:42:17:45:bb:f0:3a:b1:
b0:f1:30:79:e4:43:0b:e4:cf:5a:4e:40:de:94:27:ce:03:d6:
b4:e5:41:53:91:66:55:fc:c6:45:9b:85:b3:e5:b6:59:54:ef:
47:a7:36:ff:c5:46:fd:d9:1c:e3:f5:9d:f5:3d:66:73:0f:ba:
a1:f1:72:85:be:d2:32:8c:c6:fd:ba:b9:f4:be:5f:55:1f:a2:
62:3f:60:42:6b:1f:0f:fc:ff:57:76:d5:12:15:d7:97:a6:94:
cd:1e:96:1e:1c:3e:5e:20:c5:be:a4:91:01:d1:a7:4c:82:f4:
05:8a:e4:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767/ryvLMAnXgiToexD8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjIyMGI2OTZlMmU3NjY1MTZjMDU3NDNkMTM3ZGJiYzE3
ZmQyNjEwHhcNMjUxMDE5MTAwMjM1WhcNMjUxMDIwMTAwMjM1WjAzMTEwLwYDVQQD
EygwZmI5NDY3ZmY4YTQ1MjBmZTYzYTY0NTc2Y2NiZTM1OGYzZTcyZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNrQ46Cf25XPnIM2oaaFaIEQTvK4
I72FfEMi56feNAQjTWOlQ/ZDbMMZuzGxFndWe7C/wGLUWycx2m5kE8PpEh0xJghB
m1i3YeLeAl2zt77KJ5MGR1jfrYFbT8fiihbGJzg2hufXDBCm/IyeF3qy2r41UQjF
E8KtAjAbr1Gr7htRp03tMwRGYLc4MoJ2aUYmvM6VEbWL1a0722UAgC2b78uigL7K
ozwIsjzS9B27jDDa9TRD+BDVEKl/3AZX7dLtb3qU9c4pWeu0RYzUCz9InkE0hPb+
PrQQ2X8boQXYQ0cM9noPMfzKRcnhVPcZab48F8l8GTf8uinaZ8bYJrv/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+5Rn/4pFIP5jpkV2zL41jz5y7JMB8GA1UdIwQY
MBaAFPMiILaW4udmUWwFdD0TfbvBf9JhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUt
MGViMGIyNDBiOWI3LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUtMGViMGIyNDBiOWI3
LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVboCvJ7
5/bZGtKswgxUnEvQU84DPNI8Wnmo9J/81/j+8FPJiQpkEAwGJXW4sjzQzkTSYnFa
4v9j79vwR1k1xzaywXZQ7vuwJXJxtff9lONTd00UrvdVeCeJ23Ub+EqsQ5Igd+BH
eAER6ViwOG/mhJVSsmoYu9zedOGurVrrW08gcw0WoJ0rBgBCF0W78DqxsPEweeRD
C+TPWk5A3pQnzgPWtOVBU5FmVfzGRZuFs+W2WVTvR6c2/8VG/dkc4/Wd9T1mcw+6
ofFyhb7SMozG/bq59L5fVR+iYj9gQmsfD/z/V3bVEhXXl6aUzR6WHhw+XiDFvqSR
AdGnTIL0BYrk3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:12 2025 by rpki-client