Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File: t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier: QtFIn+ozPTMZg4IdX88Cb6DgnhkxweK9y6fNMOm7Eds=
Subject key identifier: 71:FC:00:98:03:F1:86:E5:7C:AF:B8:1B:1E:BB:3A:57:AE:7E:61:18
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial: 0199FEEB877E3DCDFE563DB6F1C80598C6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 00:01:12 +0000
Manifest this update: Mon 20 Oct 2025 00:01:12 +0000
Manifest next update: Tue 21 Oct 2025 00:01:12 +0000
Files and hashes: 1: INh9G5iQoMvQ_1itqGn6rIFWztw.roa (hash: DlHpU6WxKqPj/r93yoW9dLdgNHjiaW8IJyXbLuzYYAg=)
2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: vQbFt42XracMQtr3m29QKothM764loqYZxHUMT8NBNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:87:7e:3d:cd:fe:56:3d:b6:f1:c8:05:98:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Validity
Not Before: Oct 20 00:01:12 2025 GMT
Not After : Oct 21 00:01:12 2025 GMT
Subject: CN=71fc009803f186e57cafb81b1ebb3a57ae7e6118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:ab:c4:0d:97:f9:7d:8d:8f:a3:73:29:c9:
bf:33:82:8b:df:88:a8:bb:2b:51:2f:47:1a:49:a2:
1f:46:fd:b6:a6:c1:4d:de:c1:58:93:a2:68:cf:d3:
43:c8:3f:ae:c4:bb:c0:54:5c:28:39:a9:68:b4:ec:
3d:62:a5:bb:bb:55:ee:83:72:98:79:e5:98:68:1f:
e1:d0:43:48:14:57:10:34:49:8b:ff:d7:da:69:1e:
a5:0d:b9:d7:7d:e0:7f:06:d1:cb:79:0a:d7:16:e7:
7f:a1:3e:9d:ff:ba:11:1d:3f:73:eb:ab:70:e8:05:
20:c1:88:4b:e8:4e:27:e2:4d:3a:d5:c3:03:09:94:
65:c6:58:26:32:af:f8:e2:e6:32:c8:71:fc:f7:b8:
67:b2:74:00:f6:9a:b1:bb:91:17:0c:0c:b5:f5:cc:
54:de:8c:91:1f:8d:47:ef:ed:c6:7d:de:56:48:57:
c2:c7:89:8f:27:ac:ff:16:83:cc:f4:54:f7:8c:4c:
ce:18:a4:a7:58:0d:95:3d:fd:c7:6e:a6:86:d4:92:
2f:21:ef:be:2b:00:5d:e9:66:8a:f1:c4:80:b6:d2:
fb:cf:db:8a:ac:f7:97:a3:6a:6f:7b:c2:0a:4a:d6:
4c:05:8d:70:90:e7:95:3b:8a:32:fd:26:50:e4:0a:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:00:98:03:F1:86:E5:7C:AF:B8:1B:1E:BB:3A:57:AE:7E:61:18
X509v3 Authority Key Identifier:
keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:80:b7:6e:e1:5f:26:2a:6c:0a:f7:95:52:cc:b0:7b:2d:
8d:b8:55:dd:4b:3e:61:94:c2:a1:9c:8f:05:66:9a:90:ec:6b:
8c:a1:0a:33:3a:e7:92:7b:f9:39:b4:b2:59:c7:0d:60:0c:20:
f3:38:f7:64:10:e4:04:27:87:a5:ab:68:b8:c0:26:63:c0:c5:
27:26:e7:e7:de:6b:e4:d5:4b:28:1c:e3:07:33:9f:c3:1d:9d:
f5:38:cf:5c:01:32:8d:f9:d6:30:08:b7:af:fe:aa:2b:36:a7:
c5:d8:30:c6:05:06:2b:e4:2e:35:e1:af:42:74:d8:df:1e:65:
0e:b8:12:ba:42:38:0e:e3:16:aa:b4:06:66:22:26:a0:99:79:
57:40:b8:f8:1a:f9:bd:eb:3a:e2:a7:b8:4a:45:4f:be:7e:81:
79:06:ef:f0:38:e0:c5:23:af:55:73:28:43:e4:13:ed:82:d0:
eb:15:12:b8:92:68:5a:be:b1:6f:0e:8a:7a:c8:81:3e:88:b0:
03:51:3c:8d:c8:d0:c2:70:46:85:86:1e:2f:f1:f8:32:a5:be:
0d:a0:f3:c6:69:e5:6a:02:c7:a8:f6:e9:f0:70:61:db:e8:43:
90:f4:31:36:1f:a5:bb:88:7e:1e:20:01:ea:5b:f8:f5:84:6e:
ed:02:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:33:15 2025 by rpki-client