Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: k70CCas5ZPWnuwMnTd/8GzrDzcnJAPkbRoELy6reGzs=
Subject key identifier: EE:16:A5:62:0E:52:D4:35:61:88:E8:A2:FB:BB:A0:0E:F3:6E:30:F2
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 0199FC8FC3A1D1DD87FCE434BEEC86060D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0508
Signing time: Sun 19 Oct 2025 13:01:44 +0000
Manifest this update: Sun 19 Oct 2025 13:01:44 +0000
Manifest next update: Mon 20 Oct 2025 13:01:44 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: IGUD/20k36bKt6Ya1JaC3iN7gqSvn90pSdEvFpv1H+I=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c3:a1:d1:dd:87:fc:e4:34:be:ec:86:06:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Oct 19 13:01:44 2025 GMT
Not After : Oct 20 13:01:44 2025 GMT
Subject: CN=ee16a5620e52d4356188e8a2fbbba00ef36e30f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:bd:b9:2a:0e:4f:bf:40:bc:2b:f9:3c:19:
bc:7f:80:a3:a8:ff:8e:a7:74:c9:67:a3:4f:ff:17:
6c:dc:06:c3:1a:26:d0:fc:c8:1c:6b:7b:f7:8b:f5:
ca:a8:ab:af:f1:0c:f1:c2:77:e7:04:fd:6e:ee:cd:
03:39:f9:db:9e:c6:0b:e3:a0:ff:b3:07:dd:55:cd:
8f:74:81:56:d1:fe:0a:8a:36:fe:a7:9d:ef:7d:8b:
c5:9f:34:5e:ab:a1:29:0f:2b:0a:af:ec:e1:40:4a:
08:54:67:61:a3:57:92:7a:81:06:34:9e:a6:32:28:
aa:90:95:74:80:9f:83:be:bf:5d:db:a5:15:ff:e0:
85:8f:0d:64:b2:00:67:ca:c8:f2:e4:7b:33:7b:b5:
c6:62:84:9e:b7:90:01:34:d8:2a:66:c2:9b:54:16:
29:cf:3e:41:cf:c7:78:93:c0:65:c6:3c:f5:6e:c0:
f3:a4:eb:c1:36:d9:4f:e5:c5:a7:1e:d1:01:62:a9:
36:da:87:d3:87:a6:fa:33:6f:34:65:f5:e8:d1:82:
91:c4:47:7e:bd:e3:52:69:3e:5a:2b:54:0f:cf:a1:
33:e3:ba:60:89:c2:64:1e:4b:df:ea:ef:bd:21:79:
7c:42:d9:4c:1a:ac:05:c4:95:41:05:6b:0b:f5:a3:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:A5:62:0E:52:D4:35:61:88:E8:A2:FB:BB:A0:0E:F3:6E:30:F2
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e4:c9:3d:9f:28:99:cb:6f:13:a2:9f:44:6c:6f:10:a6:99:
fe:9a:f9:04:32:3c:fe:0e:b3:71:ec:12:f7:94:e1:59:45:33:
32:ed:bc:ef:7b:de:c3:af:da:38:ae:d2:ad:1d:10:77:82:64:
b6:f7:9a:72:1b:9c:c5:42:b8:c7:da:bf:53:9e:45:7c:2d:e3:
ec:7b:ff:c0:e2:f3:8d:ca:7e:8d:3f:7c:1d:d9:4a:2e:0b:a7:
c6:49:a3:18:d7:87:56:bb:25:ae:2a:cb:8d:3c:68:ab:f6:8b:
b6:48:a0:ba:41:5d:61:60:30:1f:5e:aa:dd:91:5b:e7:a2:ea:
1d:fe:1a:25:86:4f:e7:f6:50:ac:c8:b2:69:df:39:83:03:30:
77:50:18:69:f7:ae:e0:a6:71:88:a1:86:5f:22:fc:e7:2c:77:
ab:31:ef:b5:58:73:5f:43:d1:9c:03:ac:db:69:cc:81:d5:8f:
f0:c7:90:8f:b4:b8:63:ef:d5:e3:ba:6d:64:19:99:04:6f:0f:
2b:ac:9f:90:e1:97:bf:cd:82:b9:d0:87:10:cf:35:ca:d9:ef:
2c:cf:fd:d0:df:95:00:d7:57:8c:d1:e5:a3:a2:8e:f0:b4:4d:
c6:31:63:d8:37:73:7b:ca:c2:07:5c:aa:44:49:63:3f:10:e4:
29:c5:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:21 2025 by rpki-client