Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: fRzX148tkEx6jHQlEqEu0Q8fx3D7KLZERGHKz3sxteE=
Subject key identifier: CC:7F:89:E3:39:4D:19:AF:BE:47:9C:F8:3A:4C:5A:D9:B6:D5:FC:9E
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 0199FC21B2E1A2D7C2F55DE9D0A54F3FF811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 0268
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: 2IggjZcKQnsJ27bFYIHqEpYv-GQ.roa (hash: QiDI9ap52s0p2XMZDDr7ZxsLONOENyLmIWJ6ECFI2k0=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: 0N5PsE9amykRHflhCkr+8tIVtUf6U3yssVSFrn9/9iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b2:e1:a2:d7:c2:f5:5d:e9:d0:a5:4f:3f:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=cc7f89e3394d19afbe479cf83a4c5ad9b6d5fc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:57:87:af:f4:ba:3e:e8:de:31:fc:a7:20:
2f:42:e0:e9:a4:2f:b3:35:b6:6d:73:cf:43:e5:a3:
57:aa:c7:83:c7:a5:dd:ef:d0:d9:a9:2e:a4:af:50:
d2:8c:c1:23:d0:c1:2e:f2:26:12:e3:0a:df:65:be:
d3:ee:56:5f:db:f7:4a:13:ac:36:b0:a1:ac:0f:d9:
0e:02:b4:a9:d3:66:2f:34:93:16:29:55:5d:bb:97:
96:fe:c0:d2:bf:fc:9d:07:eb:bd:59:6d:e7:0e:5e:
ae:6e:0c:76:e7:f7:29:f0:e2:75:cf:60:34:37:93:
d1:b1:96:8c:04:57:78:8d:f9:ac:e3:d7:52:59:f2:
26:d8:12:18:2d:6d:46:0e:32:bf:83:fa:b9:11:9a:
d3:87:e1:77:2a:2b:ea:99:7e:09:bc:9f:89:5d:1e:
44:8a:e4:80:c6:5c:b6:4d:88:2c:61:df:c1:f4:a7:
f4:d1:66:30:f0:45:a7:f4:f9:66:d7:54:d1:82:f9:
fe:e1:1a:bd:f9:2b:c4:c5:73:6a:9b:7f:d8:4f:84:
f6:38:84:17:07:91:2a:14:c2:c9:8a:64:bb:f0:cb:
0a:6f:39:e6:0a:93:fc:47:f9:94:e6:13:2a:be:3e:
5e:f1:d4:7b:e6:b3:22:20:92:54:18:68:80:c4:38:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:89:E3:39:4D:19:AF:BE:47:9C:F8:3A:4C:5A:D9:B6:D5:FC:9E
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b4:a8:5c:9c:3c:cc:67:e3:38:f3:df:b6:71:81:9a:05:ec:
f5:10:72:33:80:95:06:ed:3d:66:bc:f0:af:7c:3c:07:1a:57:
ad:19:c0:89:ea:ed:d9:95:b4:ae:8e:ed:68:35:63:7e:bd:b5:
b0:74:62:50:e1:1a:e9:97:6c:b9:09:0e:b1:69:f8:b8:63:4f:
e5:1e:3b:66:af:02:c4:d5:cd:03:22:bb:04:6a:48:fa:fa:82:
58:55:bb:bc:37:e2:5b:e3:fb:61:56:be:5f:71:21:b6:61:bc:
26:7b:1f:a4:e8:05:cd:e5:12:29:28:18:80:23:9a:4f:99:4e:
5b:22:59:c3:5c:89:35:b5:54:88:1c:2c:30:84:ea:d2:ca:45:
57:91:f3:c7:ae:3f:54:35:b2:b9:57:9f:07:b1:c3:25:cd:2e:
f2:a5:9d:98:61:ac:ca:7f:9d:7b:16:e6:3c:0b:74:6b:27:cb:
e5:dc:39:ff:52:86:fd:59:21:8f:9a:d1:9c:6c:ef:3a:f2:b3:
ec:9d:58:de:8f:d0:10:b9:81:22:c0:7e:ad:25:e8:4c:8c:24:
25:cb:d0:51:85:6c:f6:3e:d4:f8:ec:86:44:38:f1:12:ce:5f:
8f:da:0e:da:1b:f4:21:01:99:de:94:aa:ce:86:26:d4:11:e8:
41:a0:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:24 2025 by rpki-client