Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: 0nt+FTOZe/AIn3LbQu4RqCV58O/KCYWzkfzXhDOXcNY=
Subject key identifier: 17:82:07:87:77:49:ED:FB:F7:AB:39:3D:EE:CA:6D:65:32:26:97:0A
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 0199FEEB824E0FB6C119576F7620BA2BBA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0AD2
Signing time: Mon 20 Oct 2025 00:01:11 +0000
Manifest this update: Mon 20 Oct 2025 00:01:11 +0000
Manifest next update: Tue 21 Oct 2025 00:01:11 +0000
Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: oFAXcShG8be0UbQmKVPM/+bLtmq40pxlJzYH0HeXucQ=)
2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:82:4e:0f:b6:c1:19:57:6f:76:20:ba:2b:ba:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Oct 20 00:01:11 2025 GMT
Not After : Oct 21 00:01:11 2025 GMT
Subject: CN=178207877749edfbf7ab393deeca6d653226970a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:eb:14:5f:f9:23:bc:b6:45:a8:bd:a5:8d:
09:99:6b:ed:64:e6:60:be:72:c1:ca:dc:4f:50:06:
4c:d7:36:0f:a0:b8:06:27:f4:6f:c6:1f:72:03:cc:
35:13:2f:2f:78:90:89:6b:44:74:88:f9:0f:a3:61:
61:1a:79:10:8d:54:3e:11:25:d6:b4:13:0e:f9:4c:
f3:a4:73:b6:64:f4:5b:08:60:3d:b0:fa:db:77:c2:
45:22:a1:b8:42:12:76:78:fd:a4:71:e0:57:70:61:
bd:4f:08:8e:cc:f4:65:65:19:d8:04:31:9c:78:c2:
db:04:b0:31:f7:93:75:fc:7d:ea:02:17:1f:cd:61:
2e:b2:8c:54:cd:55:51:a7:de:3a:ae:e6:4a:55:5a:
55:2d:7a:1b:7a:1d:ec:61:56:12:12:75:e7:28:83:
54:5e:3d:ad:73:80:9b:48:eb:4b:7f:ea:ef:fa:ab:
ea:ca:48:40:93:34:84:3f:77:66:2d:d2:42:e3:09:
2b:60:f7:ed:79:8c:54:ff:b0:bf:b6:b9:23:e4:f7:
b2:90:a8:6b:e1:16:9a:2b:c9:c8:b0:52:35:b2:dd:
2e:07:31:da:ea:0b:bb:8d:6e:39:69:31:81:ce:83:
0c:5e:4c:9f:16:5f:49:82:76:66:be:c7:a9:5d:3a:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:07:87:77:49:ED:FB:F7:AB:39:3D:EE:CA:6D:65:32:26:97:0A
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b4:a9:32:39:0e:f7:90:45:d4:cd:72:55:81:56:53:f5:ae:
81:12:06:07:e0:c1:ea:ca:00:64:11:52:52:41:31:df:df:9d:
0f:0a:9b:cd:51:8f:97:e6:f1:95:ff:d5:c5:ce:e3:e0:46:0c:
23:5b:05:8e:2c:29:ac:b8:75:69:1d:bc:d2:19:15:9d:68:3c:
55:54:b0:06:63:e5:79:c0:e9:80:5f:1d:aa:c1:84:76:37:d5:
40:7f:34:9e:db:9e:82:61:99:7c:d8:ee:80:9a:19:73:d9:87:
a6:71:c3:fc:2a:6c:4d:c9:4b:36:4b:68:a7:06:36:fa:90:20:
04:20:49:78:e2:1a:79:ab:5b:72:8c:7e:ef:20:e7:52:69:70:
11:92:c6:4a:b1:f7:74:8b:ce:73:a2:04:c0:b4:47:ed:0a:17:
dc:84:d0:a1:b8:10:5f:36:e2:93:49:67:a2:df:8c:01:6d:41:
e1:c2:7a:0e:ed:5d:90:29:5d:78:63:cc:4f:b1:79:f1:83:3d:
a7:cb:5c:24:f0:54:df:46:dd:71:ee:a0:8e:7f:56:95:2d:c2:
9b:95:f8:b2:f1:eb:f3:c5:d8:b1:42:3e:36:8b:87:78:2f:fe:
2a:61:cb:79:25:21:1b:3d:d4:fd:32:40:43:1e:44:18:e5:5c:
e0:85:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:23 2025 by rpki-client