Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
File: r8GT7hHlRxYWn5TI-THq4fyFSSE.mft (raw, json)
Hash identifier: YKB9w/Y24lEu3m65Jrsz52Hb97o9sbTAzDeFdXS5u6I=
Subject key identifier: FF:17:9C:1C:9C:15:85:B7:35:6C:C8:74:FD:6A:86:6F:7C:1B:4E:4C
Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
Certificate issuer: /CN=afc193ee11e54716169f94c8f931eae1fc854921
Certificate serial: 0199FBEBB625A1292A0B34FA8A3768C13629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
Manifest number: 0C35
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: AaiQ-SNQmt6l5xOeIk4PwVHWfh4.roa (hash: 6CQTrWnDAV45WpOAHO1NfVL9iDI/ELlZY8vizp+bA9s=)
2: r8GT7hHlRxYWn5TI-THq4fyFSSE.crl (hash: LJgZqsavY4jQiWyug6fpeBNR8xg6u65nCTPRDuGGU+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b6:25:a1:29:2a:0b:34:fa:8a:37:68:c1:36:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=ff179c1c9c1585b7356cc874fd6a866f7c1b4e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:4e:41:7c:4e:eb:31:73:10:ae:31:57:1f:
7d:e1:6f:23:df:a8:57:8c:a3:a7:6b:3a:5d:9d:a9:
45:e3:36:5c:96:4f:7a:98:04:69:6f:31:c0:e0:54:
4d:44:aa:a3:43:0e:41:f9:a0:14:2b:d8:9a:05:6a:
7d:f7:db:6f:f7:9e:1f:9c:b3:39:69:52:c5:d6:91:
6c:f3:44:26:33:c6:de:34:03:d3:7f:50:e6:03:75:
96:f2:6e:a7:66:91:fe:9b:33:5b:d0:99:ce:19:7b:
85:a6:ed:f7:b2:50:e7:4d:46:aa:bc:fd:51:fa:8a:
ed:fe:8b:38:51:0d:69:24:45:98:d2:3f:49:d3:c6:
df:b3:0b:3f:2e:a7:cb:58:26:86:7b:cf:5b:3d:2f:
5a:12:cc:7a:8f:e8:8d:f2:3a:51:70:77:3f:1d:11:
5c:7d:6d:12:76:2c:f3:5f:bb:31:08:3d:84:31:e2:
cb:f5:4e:f7:48:5e:2c:73:69:b2:22:db:e2:ad:92:
e2:52:a4:9c:57:64:e9:ec:ae:4e:ed:d7:99:a4:6f:
2e:dc:ac:c9:7e:30:8c:1b:93:e4:3b:f3:52:3a:3e:
4d:d3:43:7d:d9:cf:e6:79:44:bd:16:d0:67:e3:c8:
22:51:97:c9:5d:58:26:6e:46:51:4a:e2:a5:d5:09:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:9C:1C:9C:15:85:B7:35:6C:C8:74:FD:6A:86:6F:7C:1B:4E:4C
X509v3 Authority Key Identifier:
keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:80:ef:08:1a:08:22:c3:5b:85:cd:09:97:4c:4f:1b:21:d8:
c4:e5:3e:df:9b:5e:64:63:20:1d:33:09:41:70:73:21:32:ee:
ef:2f:f1:4f:80:ae:b3:60:39:35:80:d9:cb:83:be:07:e3:3f:
0c:0f:af:51:95:86:47:a8:04:f5:bd:72:fd:96:21:3e:ed:f2:
e9:17:d9:63:a1:a8:61:02:1b:35:c7:0a:5d:22:ed:24:09:70:
b2:29:a6:21:e5:4e:4c:9a:f4:e1:dc:ea:e0:1f:01:3c:41:22:
f9:74:1f:f5:83:d1:31:51:61:de:a0:6f:af:df:2f:fd:a4:2c:
7c:2e:af:b4:7d:e5:b7:e3:e1:2d:c5:8c:14:ea:8d:f6:32:3b:
c7:de:88:49:3c:6a:5b:af:e6:ca:0d:9c:64:70:92:7f:e3:a8:
d3:c2:df:82:e4:11:bb:ac:49:dd:f5:cc:55:86:67:91:d5:85:
d7:54:90:2e:9b:cf:5b:7a:2b:0d:78:d8:2f:dd:97:aa:79:92:
92:b4:63:63:75:a1:cb:11:98:09:15:8f:93:79:d2:11:fa:d8:
41:64:44:20:e7:a1:cb:15:d8:3e:0b:e8:d5:41:8a:ea:3b:95:
1b:5f:92:06:54:74:06:ce:d5:e2:0c:84:31:b2:30:5e:03:5d:
3d:20:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:41 2025 by rpki-client