Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: +7dBmAs9/zSRSJmGhcI/RBYc4R8tHzQY/gilrPOkI4A=
Subject key identifier: 4C:F1:AB:40:35:0D:00:9C:FF:5A:FF:9F:4C:B0:F6:0D:BA:D0:2A:73
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 0199FC2143482231CE04F7265C9A9DE81A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: yJ9Ul7fhXpqrnpE2eBJeth2cwHL85b0jqRB3iaWgY+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:43:48:22:31:ce:04:f7:26:5c:9a:9d:e8:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=4cf1ab40350d009cff5aff9f4cb0f60dbad02a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:ff:a1:1f:f3:54:eb:16:a9:62:c8:43:1f:
92:82:7f:76:47:9f:44:ed:78:7b:1c:be:6e:67:95:
b6:23:11:8c:c2:1e:24:38:2d:ea:9e:e3:69:fa:47:
72:58:47:44:8f:66:53:e1:a0:44:ba:23:4e:a9:0f:
6e:85:68:2d:2c:af:db:ae:1a:03:b4:84:9c:70:93:
a1:35:9a:f0:b8:bd:e0:fb:00:56:6d:62:38:c7:42:
29:01:1c:ae:30:79:be:d1:f6:5d:a3:3b:d9:b5:52:
09:d9:26:68:9f:d2:65:0f:d9:ad:20:ae:14:e4:1c:
79:29:38:2e:cb:04:67:66:a3:0c:99:5a:13:bf:d3:
75:9a:40:4e:fc:57:7e:ec:7b:7f:bf:e5:91:20:ad:
76:07:40:44:ad:92:19:d9:a9:cd:be:59:60:37:7a:
68:6c:b4:bb:7e:21:85:50:6f:3a:0d:b0:c1:f0:c7:
bf:e1:7d:cc:f7:b5:1f:b0:b8:fd:51:ec:d2:7d:f9:
af:57:85:91:65:7f:46:23:1b:78:48:e4:c4:38:c5:
ae:8d:88:31:ba:de:17:0e:c6:8e:64:bb:42:d1:dc:
4e:b4:38:a6:01:e4:3c:e9:7e:70:6b:5d:66:71:d7:
c0:cd:c3:86:12:80:d1:f6:50:0e:c5:3f:03:c9:1d:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:AB:40:35:0D:00:9C:FF:5A:FF:9F:4C:B0:F6:0D:BA:D0:2A:73
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7e:00:26:23:0d:99:6b:e6:53:28:5e:f3:57:92:ba:78:c0:
da:99:42:fc:d9:ac:98:4d:b5:f0:87:35:3a:35:ee:4f:14:ef:
3f:ba:82:af:08:e0:ac:1f:d5:3d:47:83:70:6e:e7:7d:3d:2b:
cb:7f:59:2a:44:4a:68:29:a1:ca:1b:dd:52:c8:9c:4f:88:a0:
84:92:b0:ae:c8:0c:3b:0c:99:a2:0f:7b:36:b1:55:de:11:4c:
ba:9a:c5:f9:72:f0:a4:c4:d6:5e:79:2a:b1:5c:c6:cd:02:bc:
1e:dd:54:a8:e1:8c:47:a6:06:35:14:2b:51:fa:a6:8d:8b:26:
bc:dc:a0:39:de:d5:ab:86:a3:67:ec:b5:19:e8:70:21:fc:4a:
18:8c:a9:31:11:77:5d:1b:13:8a:7a:75:28:c6:45:47:79:0c:
e1:df:5a:00:59:12:07:24:2f:00:9a:bc:f3:31:4b:c3:ff:e9:
77:c0:c3:1d:9e:55:7d:d4:7e:25:31:86:0b:c8:18:50:46:d8:
c2:73:59:9d:a3:e4:6c:db:a0:39:4b:a4:6c:6b:54:41:2f:e6:
29:9f:58:92:6e:6d:aa:51:19:b9:df:d8:07:0d:8a:c1:28:3b:
49:1f:89:45:1b:4b:03:96:42:c5:13:dd:cf:62:bc:71:d5:5a:
be:66:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:42 2025 by rpki-client