Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
File: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json)
Hash identifier: J/i5mi42ebrX0tsg81qbkglVk9NvSmm/L2LKXMlJJYs=
Subject key identifier: 8C:FA:9A:37:0B:D8:5C:B1:69:FE:D0:92:B4:41:04:5F:E2:A3:FD:C0
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Certificate issuer: /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial: 0199FCC634B60E273F0EF8EA38065149D639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: Unla0lMqG0/TVvkm6kl8PAWanuYyGkn8mT+FIJjly8k=)
2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:34:b6:0e:27:3f:0e:f8:ea:38:06:51:49:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=8cfa9a370bd85cb169fed092b441045fe2a3fdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:79:76:60:6c:5d:22:4d:43:57:f6:56:07:
3e:b9:e9:b8:ee:43:73:87:ca:0c:d9:fb:3a:32:c8:
4b:26:56:18:d8:a8:dc:d0:e1:fe:eb:af:42:b7:65:
52:48:7e:f7:99:7e:4a:85:56:6a:bb:53:49:15:61:
ad:6b:de:10:1d:18:19:2b:58:bd:7b:b6:97:c8:dc:
4b:c0:ae:f8:2f:cb:3c:25:ee:07:91:cd:86:fb:ac:
b3:30:c9:82:86:6e:0e:8b:2a:13:e3:af:d9:03:1d:
7e:d6:66:e2:4b:c0:b8:49:56:9c:e1:f5:ad:f1:d2:
71:ca:ca:ce:64:a5:15:b0:97:b4:52:e0:40:d7:b2:
ea:54:f8:17:1f:ff:4b:1e:1c:ed:90:b8:b7:27:e5:
18:07:3e:ce:85:56:0a:89:c0:84:49:5d:d3:97:14:
83:58:aa:02:69:0b:0e:8e:1b:e2:f6:d7:a3:6f:c2:
1a:8d:01:a7:78:3b:b1:3b:0f:8f:ba:c9:c4:01:08:
55:46:a8:13:e7:74:7e:49:52:94:72:ba:cb:84:97:
66:7b:01:94:72:0b:1f:ca:e3:56:58:23:9d:77:31:
c1:f8:12:e4:7c:d7:a9:3c:f3:8b:21:66:7b:6c:09:
03:99:45:bf:dd:fe:3d:5a:b1:87:06:0e:d8:6c:18:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:9A:37:0B:D8:5C:B1:69:FE:D0:92:B4:41:04:5F:E2:A3:FD:C0
X509v3 Authority Key Identifier:
keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:27:24:2c:c5:02:6f:b4:f4:49:27:4b:a1:fc:0a:76:3a:3f:
55:6e:14:df:ac:a8:9e:5b:ae:a8:9d:2a:50:3d:ff:7a:c0:64:
83:14:78:39:98:5c:4e:c6:5b:b9:0c:32:65:08:17:45:3d:e4:
ab:56:ff:fb:58:e5:e0:e6:e4:24:39:9a:1e:97:10:78:af:a5:
bb:5c:1e:09:d4:ce:6f:50:f6:9c:a5:5d:b3:82:2d:9a:5a:8b:
2c:d6:fd:91:f8:f8:bf:4a:94:9e:3a:b5:c0:f3:10:73:02:72:
d9:0e:f7:0a:c1:e8:e6:57:ff:5e:97:0b:ba:a8:f0:51:7d:1e:
47:cb:9d:65:df:a0:64:92:7f:69:af:3b:fc:e2:40:a3:5a:89:
36:74:51:3d:8d:92:c2:12:34:59:66:80:0d:9c:e4:d8:05:cd:
47:28:80:e4:14:2b:35:d0:59:09:00:be:f9:17:2e:c6:8a:4e:
4f:93:62:d2:a5:6d:aa:0c:e3:2c:92:d2:fd:7d:5d:cc:07:96:
9a:9e:ba:ca:d2:c9:53:23:49:6a:c8:68:58:92:3d:20:b0:4e:
09:db:09:7f:e9:e9:73:8b:fb:d0:28:4e:ea:4a:45:9f:8a:6e:
8b:4d:39:f7:b9:b3:9c:60:6d:1e:9b:2e:22:4c:63:3f:30:96:
0c:a4:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:34 2025 by rpki-client