Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: DOGUPMDfzPagwW/UCS9OoRf4Xgsl3/epq/Zy+yLwkaI=
Subject key identifier: F7:8D:9D:8E:27:1A:BD:64:34:D2:77:7A:BC:B9:26:CB:5E:90:0C:9B
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 0199FA6A9EFF2A2F00D80AE6C3E633803869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 16DC
Signing time: Sun 19 Oct 2025 03:01:55 +0000
Manifest this update: Sun 19 Oct 2025 03:01:55 +0000
Manifest next update: Mon 20 Oct 2025 03:01:55 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: kTuB9vpTlNVsh6GvuU6CFwTQlFvTOgWyL/ixCUBB7xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:9e:ff:2a:2f:00:d8:0a:e6:c3:e6:33:80:38:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Oct 19 03:01:55 2025 GMT
Not After : Oct 20 03:01:55 2025 GMT
Subject: CN=f78d9d8e271abd6434d2777abcb926cb5e900c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:bc:64:80:77:14:2a:77:6b:76:4e:f5:ef:
de:8b:6e:a7:1c:24:69:39:92:35:95:9b:17:5f:95:
34:5a:35:ec:72:70:da:a3:89:7e:2e:7a:63:1d:65:
7a:72:07:ee:d8:fc:c8:35:79:9e:d5:1e:83:0d:b8:
7a:8b:56:e0:5a:fc:c1:66:bf:f1:30:b4:da:89:21:
ac:8b:88:ee:ab:09:6e:b4:fa:ad:9e:db:a1:9b:59:
fa:f7:94:7f:4c:f1:54:fd:86:65:9b:35:32:ce:73:
e9:04:81:03:76:8e:95:26:17:aa:07:41:a1:5d:95:
58:43:80:f0:c0:9c:18:b2:b5:c1:16:36:75:81:54:
67:39:2b:6c:45:c0:0d:d8:59:5f:e6:de:5d:d9:9a:
ea:4e:c6:87:f1:84:a4:78:2b:ae:84:41:c3:4a:8b:
7c:7a:71:87:43:20:87:9b:74:b9:19:43:c0:b7:46:
84:21:b7:43:93:3a:9b:91:07:9b:d3:61:ba:b4:bc:
53:8c:e8:6b:71:87:91:63:e5:15:e9:e4:a5:4d:62:
43:b0:38:86:1a:c0:1a:1a:aa:2b:e4:57:56:84:e6:
25:a9:7a:c6:eb:81:4a:d7:34:43:17:f9:2f:61:8f:
db:a2:69:e6:0d:46:d3:4d:59:ff:bd:fe:f7:36:5c:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:9D:8E:27:1A:BD:64:34:D2:77:7A:BC:B9:26:CB:5E:90:0C:9B
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:18:cb:c5:e4:70:e3:08:ac:3d:b0:e1:e4:0c:e2:1c:0a:
2f:b1:a9:c1:a3:32:cc:05:2f:92:1d:00:27:9f:95:77:cd:f7:
f5:7d:29:c4:37:e1:cd:12:1c:d2:0a:e9:f8:97:40:0a:4e:d9:
11:ff:38:4a:b2:1e:0c:7d:87:88:7f:df:83:65:e8:aa:74:08:
b4:c2:e5:9e:a9:60:8b:ab:49:73:ad:25:c9:36:86:17:2f:a7:
7d:ee:52:fc:79:39:dd:18:c4:ce:cb:62:92:23:64:a7:09:e1:
f1:06:a8:c4:bc:1d:4d:c4:40:cc:ce:e8:a2:13:e4:7e:31:4d:
98:f8:e2:92:36:aa:18:34:24:15:3b:fc:fd:9a:de:58:45:a8:
a8:6f:71:ef:5b:be:9c:87:6d:94:a6:31:01:93:ed:c2:f2:20:
4f:32:fd:ac:92:6c:2b:cf:5a:8f:7e:c7:eb:b8:5a:22:df:11:
73:a1:15:8f:02:5c:54:ce:ed:2d:83:7f:0a:e8:ad:97:6e:05:
d8:df:38:06:e5:1c:9c:c1:19:14:26:52:49:3c:d3:11:f1:05:
81:2b:af:ac:c9:2d:75:1f:8e:51:6d:c9:5b:5f:8e:af:2b:44:
7f:55:ef:5f:64:d5:13:c6:cc:6c:18:43:b5:01:ca:b1:d1:52:
7e:57:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:24 2025 by rpki-client