Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier: 0I2SdyDl4YoMx7uELsfzVJyKd80x5CHZv5FuVQB3zCI=
Subject key identifier: EC:49:C8:0E:C1:FE:6A:EB:85:E2:D2:E2:7A:EE:E8:16:BE:29:C7:BA
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 0199FB7D0912617C078EC4D882A858572F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:39 +0000
Manifest this update: Sun 19 Oct 2025 08:01:39 +0000
Manifest next update: Mon 20 Oct 2025 08:01:39 +0000
Files and hashes: 1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=)
2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: dzaGNSWn3cezbb11of8xnl+ftma8hUZU/5+0tGtsOqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:09:12:61:7c:07:8e:c4:d8:82:a8:58:57:2f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: Oct 19 08:01:39 2025 GMT
Not After : Oct 20 08:01:39 2025 GMT
Subject: CN=ec49c80ec1fe6aeb85e2d2e27aeee816be29c7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:04:c7:ea:de:69:58:6b:0c:2c:2f:1b:48:
21:f0:1b:b0:1e:4a:a3:3c:a0:d8:90:89:61:c3:e4:
72:62:ae:d1:f3:af:d3:10:e4:1f:29:f7:23:e6:e1:
4e:a3:32:74:5d:d4:3f:d4:79:94:4c:f1:6c:88:5f:
f3:34:ca:d5:de:73:b3:56:62:89:17:e9:5e:ba:93:
11:da:57:50:8f:5b:02:c8:9c:31:ad:c1:ba:dc:4a:
0c:67:c6:7f:9a:4c:b4:d8:02:e6:82:39:fc:28:b3:
0c:c2:f3:73:9b:de:ac:b5:05:88:b2:14:8f:46:54:
95:8d:09:14:f9:28:b9:2f:e7:6b:dc:29:f1:aa:81:
ce:7d:8d:5b:2a:c0:f1:eb:dd:76:59:be:8c:b1:a6:
fa:a5:70:ce:c4:e0:b5:60:94:45:2a:1f:0b:33:23:
35:bb:c0:ad:07:c5:72:a4:44:65:5a:62:a0:2f:4a:
31:c7:ad:ee:62:ce:81:81:d2:25:9d:5d:21:a9:2c:
a4:a0:1d:eb:95:8a:45:40:a0:3a:3b:63:b1:ab:49:
3a:e2:ab:dd:91:17:58:96:f2:bc:76:57:b2:a2:74:
97:24:66:41:e2:05:fa:38:00:91:bf:43:5a:a6:61:
0f:eb:b1:9b:76:5d:48:65:67:7b:22:fa:50:cb:44:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:49:C8:0E:C1:FE:6A:EB:85:E2:D2:E2:7A:EE:E8:16:BE:29:C7:BA
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:88:e8:1b:62:3e:5a:74:ba:f6:21:f8:ee:3c:ee:de:bf:
72:21:ac:ba:48:9d:7a:02:77:d2:9e:67:72:9d:25:75:7f:c9:
e4:64:b4:e2:9d:06:b6:41:5c:1c:30:9c:af:1c:42:9b:70:e0:
6b:a1:b2:27:31:e2:13:2f:89:e7:d6:91:7a:08:00:0b:e0:53:
42:79:8d:f2:68:2e:13:68:36:48:ba:bc:e0:d0:4d:d3:38:6a:
58:8b:d1:e2:39:04:3d:41:26:a6:74:44:92:7b:7a:0e:b4:21:
30:3f:fe:9f:ac:02:14:a5:48:6e:0e:d2:90:d7:0d:61:0f:b8:
96:e1:3c:6e:90:30:67:9b:7d:6b:43:c9:d9:52:c6:1d:84:46:
22:e5:f9:43:43:4e:c4:0c:db:26:7c:e1:0f:3b:41:79:cd:2e:
bb:74:be:a2:91:3a:f4:be:b8:01:c6:fd:57:af:96:5c:80:24:
e8:47:8f:96:09:44:37:01:40:11:38:91:d7:1b:a3:cd:9b:11:
59:4d:28:02:87:bd:45:d3:9b:3a:e6:57:23:21:57:01:6d:f4:
60:09:54:c8:1a:dd:55:9a:6a:d9:f2:cf:a9:bd:1b:6c:1f:42:
85:79:6a:74:ea:a2:5c:82:75:0f:64:06:e9:4f:c4:60:50:d1:
4a:6f:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:43 2025 by rpki-client