Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: QCQ/dERy0ehhbOBhmUlhK2Vj6sQb03WKbXHoWXl1aCk=
Subject key identifier: 6F:B7:4D:58:B8:37:D2:25:8C:E2:40:69:33:F7:9C:39:76:9F:25:AC
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 0199FC21982812A2B6F2BE6ACB51C6A196B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 1223
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: qCDn38WpnvmHIb4LyFwkHTTKPkG9Xo3eT1RzpoQLMwA=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:98:28:12:a2:b6:f2:be:6a:cb:51:c6:a1:96:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=6fb74d58b837d2258ce2406933f79c39769f25ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:7f:9f:91:2f:a4:d9:d2:33:af:e4:04:c7:
c8:76:f0:1b:31:27:78:52:49:2f:00:7f:b5:83:52:
5e:b3:3d:d6:11:74:a8:83:08:93:26:92:88:c0:9c:
7e:e0:8e:fe:7f:7a:f6:60:35:d0:5d:92:aa:c3:dd:
4a:c4:47:da:dc:a3:0f:6d:4d:d9:db:b9:1d:dc:f8:
78:d7:00:b8:77:f2:b0:b9:5c:f9:55:4d:48:59:f4:
41:b1:56:27:c1:69:e9:ad:7c:75:b0:c4:cb:2c:56:
e3:86:0f:8f:8f:01:f3:82:78:c3:30:31:d8:df:9f:
65:39:b5:ec:6e:a8:23:63:4a:58:ad:ca:cc:58:44:
5f:9a:7e:07:ff:33:96:f9:a8:6e:7e:14:bf:69:84:
b6:c6:51:42:23:75:51:2f:ef:0b:fc:d7:d2:10:de:
14:3b:b9:e1:cf:90:71:c8:bc:b8:14:6c:87:7a:ae:
e2:e9:54:5b:32:f2:20:6b:fd:0c:4f:2f:30:91:e5:
e2:a8:72:5a:19:e9:bf:38:ec:95:23:68:76:4d:03:
e4:a4:27:59:dc:0c:48:e6:d7:ac:48:b1:53:7c:d0:
d8:d9:ab:71:2a:75:2b:b6:36:88:60:9a:5e:c0:76:
e6:4b:17:e6:31:53:b4:34:fa:d5:b2:8f:28:0d:2e:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:4D:58:B8:37:D2:25:8C:E2:40:69:33:F7:9C:39:76:9F:25:AC
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8c:46:0e:3c:0c:d8:a7:38:8b:a1:01:e2:6d:a8:32:f7:cf:
cc:24:0e:98:ec:f9:46:69:70:f7:67:e8:85:86:40:01:cb:20:
04:22:96:d0:37:43:b0:f2:52:51:4e:e0:de:4c:a1:6a:c6:fc:
5f:4f:77:0b:aa:d0:06:ba:9e:1a:08:ce:43:b7:98:4a:e5:75:
40:a6:5d:7e:da:84:04:88:83:37:67:68:47:e7:d6:aa:08:74:
47:af:89:90:b2:26:6b:40:2f:65:16:b7:d8:77:7e:04:a9:5e:
de:73:55:3d:50:81:42:87:63:e3:65:0c:89:82:ce:a5:24:98:
35:9f:b7:e1:61:87:88:f0:8c:28:e3:42:36:0a:c8:ca:55:3e:
69:d0:9c:86:be:4b:04:78:df:ec:97:01:62:95:7f:b8:61:d7:
b8:b7:f4:cb:e6:63:14:1f:21:de:7c:5e:28:24:83:92:73:d3:
65:97:cc:05:95:f4:47:0a:22:cb:30:0a:82:5c:61:42:91:b8:
ac:45:b7:6a:39:42:c4:91:50:7f:5e:5b:91:42:a5:8c:bf:50:
cc:39:c1:9c:0b:b5:75:84:e0:8c:16:99:9a:af:36:a9:0a:fb:
98:17:af:64:d7:2c:60:6b:be:eb:ca:42:dc:d9:19:08:9f:35:
71:ef:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:46 2025 by rpki-client