Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
File: S8K4kvLb729UtFNg_rD4QUpahQQ.mft (raw, json)
Hash identifier: QAyFQ0iEHYjqWefhizr7HjZEs59XfJDqo655OKlS30Q=
Subject key identifier: 41:B0:C6:8C:BF:1F:98:85:21:48:52:48:AA:CD:6C:C2:D8:11:C0:D0
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 0199FC582AB3E7F3E3EF135B54139503EBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: 8XxbJK1GWPrtjat_Lpe2HKly_9k.roa (hash: 1REGOqOGYIsLrmhSt5pZG4EmBpaR7Cf++uPRynahll8=)
2: S8K4kvLb729UtFNg_rD4QUpahQQ.crl (hash: IvdeMSc6VwKOgUHRcjcRejNQ2cHFAmpzDsdEDxmQ9eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2a:b3:e7:f3:e3:ef:13:5b:54:13:95:03:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=41b0c68cbf1f988521485248aacd6cc2d811c0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:fb:5e:5b:47:fe:95:8f:26:9e:04:cb:5c:
30:f7:33:32:cd:5e:de:90:f2:6d:28:9c:a5:35:5a:
97:84:d1:c7:94:c7:42:a4:fc:12:ae:3d:ce:4f:83:
98:5d:df:eb:3b:01:3b:dd:eb:7d:70:81:ae:59:ec:
cf:dc:e7:47:f8:39:3f:7e:af:50:f0:3d:25:03:1e:
7b:f1:7f:da:ab:b9:84:28:42:89:af:76:ff:5a:71:
c2:73:f9:02:73:0a:45:ad:66:d4:c6:e7:4e:4f:14:
b0:1d:56:a9:5e:72:4f:5e:bc:9b:71:a1:10:f5:7c:
a5:0d:86:25:e8:8e:cd:4d:d0:10:bc:c1:08:f8:b2:
9b:d6:e1:39:38:9a:9b:1f:1b:d6:31:ab:96:c3:b3:
9c:e3:8a:13:a5:e3:cc:4c:c9:04:99:5f:96:d0:16:
98:e1:e2:05:5d:62:9d:9e:a8:de:d4:3a:42:2b:ba:
e6:6d:cd:80:6a:9f:a8:c9:5b:dc:e3:1e:8b:41:ef:
e4:46:b6:20:ae:da:61:2a:5a:3e:f1:aa:2d:4f:91:
1d:6d:6c:68:14:21:4e:3e:17:c5:a3:61:55:5e:05:
27:f2:4f:53:c5:2e:48:33:61:a8:2a:63:99:06:96:
5f:b2:7f:80:c3:9e:ed:a9:19:41:af:45:ce:ac:0c:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B0:C6:8C:BF:1F:98:85:21:48:52:48:AA:CD:6C:C2:D8:11:C0:D0
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0f:d5:6b:75:c5:e9:92:ea:3a:5d:2a:a0:ce:58:9a:04:2b:
d9:f3:00:d9:49:f5:d6:cc:f1:82:13:1b:a4:2a:cd:39:54:c0:
92:97:58:66:99:24:7d:ec:e4:7e:33:3d:d6:54:eb:25:1f:27:
bb:06:43:d4:00:a1:a6:39:fb:87:f7:0f:09:1e:5d:25:8b:3b:
07:21:0a:d6:bb:ff:18:4f:0a:2a:72:6f:0b:5b:84:f4:55:3d:
d6:a6:78:c8:94:55:54:65:7e:3f:c2:14:40:56:67:6f:cf:97:
5a:7f:b2:8a:05:9e:70:e4:5f:1a:e4:3b:4d:6e:27:c4:6e:6b:
6a:1a:00:b7:be:27:87:a2:84:fb:0c:5e:b8:8b:4a:b9:8c:e7:
a1:3a:06:47:16:1a:35:f7:63:fc:4d:c4:59:c6:7a:2a:d7:8b:
66:de:0e:ae:72:07:0f:2f:ac:3f:4e:c8:82:a0:9a:e6:88:81:
f5:7e:81:89:f9:59:b2:2f:31:25:7e:43:8c:b0:ab:3f:53:df:
8f:b8:c6:48:5f:48:26:4f:e3:ac:49:c2:4d:23:30:a9:62:f5:
72:03:4b:f1:a8:05:5c:de:f2:0a:69:1a:cf:76:47:1e:fb:62:
00:39:41:72:b9:f0:fd:dd:9b:67:89:0c:08:ea:b8:1f:9f:cc:
ae:2f:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:09 2025 by rpki-client