Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: SLpiwL5SeKS40X+Qg5T3lB84Np8ENlbITEJZiLDupi4=
Subject key identifier: 25:91:C5:10:44:41:F0:98:27:75:62:53:D0:B4:F8:22:A2:04:6C:DA
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 0199FDDA69702F2A78F1EA13EC1EC5AFCDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 1383
Signing time: Sun 19 Oct 2025 19:02:53 +0000
Manifest this update: Sun 19 Oct 2025 19:02:53 +0000
Manifest next update: Mon 20 Oct 2025 19:02:53 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: 8marRZY1c40eRrIzLF/vzikED30QNMhx9YW1DjwOFio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:69:70:2f:2a:78:f1:ea:13:ec:1e:c5:af:cd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Oct 19 19:02:53 2025 GMT
Not After : Oct 20 19:02:53 2025 GMT
Subject: CN=2591c5104441f09827756253d0b4f822a2046cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:f2:c3:4e:47:c5:ea:ca:61:b2:ae:ed:00:
9c:ec:73:46:30:91:0e:d4:cd:a7:75:41:62:26:72:
8a:7b:a1:20:57:d9:20:b5:89:30:68:74:1a:60:b9:
48:ac:63:08:fe:3b:00:2e:07:71:2d:9b:72:13:17:
b3:a9:50:29:f3:8d:9e:91:6e:94:5d:ec:4b:b7:a7:
ba:3d:81:eb:2d:7f:09:8c:7f:a5:dd:6c:fa:74:8e:
81:55:c8:04:44:24:7a:4d:09:47:b6:d7:5b:1f:c9:
3c:7b:1c:fc:ab:73:2d:d7:19:3b:70:78:0b:bf:b1:
b7:33:78:5c:43:a2:ed:0b:f3:4b:df:1c:31:35:83:
2e:de:21:9c:cd:68:ba:31:c8:00:0d:f7:53:64:42:
f3:fc:0c:09:c4:34:b2:1b:1d:fe:f6:c7:4a:bf:af:
b7:ee:6f:b4:fd:96:0a:7a:89:10:8a:b0:e3:64:20:
fd:cd:6a:09:39:cf:ac:6d:76:0b:fd:f1:b4:3c:4d:
b5:c5:17:ab:a2:7d:f3:1a:96:17:18:cc:3f:09:28:
9c:57:36:99:03:4f:0b:f1:fb:01:1b:6b:9e:59:4d:
70:0a:aa:ea:06:b8:ba:c1:f7:f9:4e:b0:98:d5:b0:
01:3a:41:0c:54:ea:95:db:22:65:6d:54:39:3f:00:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:C5:10:44:41:F0:98:27:75:62:53:D0:B4:F8:22:A2:04:6C:DA
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3c:8e:f6:ab:fd:6f:04:da:3d:94:6f:50:1e:ec:3e:82:99:
72:fe:ab:a1:1a:84:eb:8b:cf:65:e6:ca:73:07:8c:76:e4:c3:
34:42:74:1a:53:94:aa:7f:78:29:3a:5e:74:4a:2f:02:72:bb:
30:2f:cf:c1:15:df:8c:b7:5f:97:17:2f:1e:65:7d:ce:93:30:
c5:77:97:a5:dd:e1:07:d8:55:67:e7:42:b6:a2:b6:8a:90:be:
44:c2:0e:57:fb:f8:e1:21:d2:1f:01:2b:b6:21:90:8c:61:da:
06:17:7e:69:dd:92:5b:c0:88:17:b8:c3:72:9e:2a:06:64:d7:
2a:f5:2f:19:cb:e0:50:0f:78:08:52:dd:28:70:76:c2:f0:96:
70:f9:79:7d:17:34:40:11:eb:93:ca:df:97:ab:18:94:88:c0:
dd:8b:42:bb:3d:45:41:92:ad:35:16:84:83:ea:42:98:3a:12:
ce:2b:29:bf:59:f2:f5:ba:0c:0e:e0:d6:ab:a0:7b:fb:91:f2:
ae:44:bc:9a:de:36:09:d2:0b:71:a8:6c:01:ab:ee:df:53:4a:
fe:81:22:e0:2b:be:16:a3:e9:56:d6:d9:63:7e:98:d6:08:44:
6f:be:f8:4a:70:59:21:68:ee:ee:ec:7b:d4:eb:75:f0:30:a8:
2b:99:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:53 2025 by rpki-client