Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: 8Xssul9jO0mb+DBgyhJCwLv2GGotcKqwEAU+FgaBogM=
Subject key identifier: 40:95:00:E2:E2:46:AC:A2:99:59:4A:65:53:F1:93:69:73:BD:0F:B7
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 0199FEEB9ACC5E890822A22C446D2E127E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 070A
Signing time: Mon 20 Oct 2025 00:01:17 +0000
Manifest this update: Mon 20 Oct 2025 00:01:17 +0000
Manifest next update: Tue 21 Oct 2025 00:01:17 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: 8MvhMcpXqvW4Igzg1j/oRDbCqTL38X2DMK8JX6JXxLk=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:9a:cc:5e:89:08:22:a2:2c:44:6d:2e:12:7e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Oct 20 00:01:17 2025 GMT
Not After : Oct 21 00:01:17 2025 GMT
Subject: CN=409500e2e246aca299594a6553f1936973bd0fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:8e:e6:51:fa:bd:af:24:a9:ec:65:9a:c1:
47:64:7c:34:c7:ba:b5:fb:74:f8:f3:5d:a0:74:af:
63:a4:e2:a1:64:97:b0:4d:e0:13:ff:09:c5:24:20:
20:cd:77:55:8e:ed:80:29:a8:23:64:fd:36:df:7c:
98:76:25:a4:f8:11:0a:7d:29:64:40:8a:ed:eb:d4:
5d:c1:8f:1b:6d:5c:0f:db:f6:3a:ed:a5:63:8a:e6:
fd:1f:d8:1a:36:d5:80:c2:e1:4e:bc:9a:d7:a7:6d:
28:14:c4:b1:67:a2:b9:78:c6:7b:54:30:d3:80:e2:
d6:54:ba:0b:24:6e:61:e4:7e:d4:d6:4e:84:a0:c2:
2c:d5:53:3b:23:f9:09:b3:81:e9:51:88:28:d1:62:
40:b1:e5:9d:d4:6a:29:ff:7f:f3:b0:48:c4:88:75:
91:66:73:41:07:56:a5:aa:ca:2e:e6:6a:24:79:7e:
68:bd:36:aa:4b:b6:c9:47:8c:eb:63:22:2b:8d:bf:
5c:c9:49:e2:ec:eb:f6:28:11:1a:10:78:56:38:e1:
74:ad:26:c4:3a:18:f5:b9:07:12:b4:c1:c5:13:5f:
4f:ab:bb:28:b8:ff:70:6d:53:20:37:47:33:69:ab:
ca:a4:51:28:d7:0e:c0:f2:20:b4:9c:48:80:0f:89:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:00:E2:E2:46:AC:A2:99:59:4A:65:53:F1:93:69:73:BD:0F:B7
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1f:f1:c2:60:f0:53:9c:6b:02:61:6f:a1:22:9d:6d:0e:85:
c2:20:85:05:f3:00:1d:58:e6:e7:58:f7:2c:5f:e6:aa:7c:b4:
fc:07:04:b8:68:f4:e4:29:bb:fe:51:4a:20:c3:b1:0a:0b:e7:
9f:40:33:ec:af:b7:73:61:f9:fb:7c:52:6b:19:4a:e3:7f:c2:
cb:fa:72:0c:14:a2:26:22:50:98:e8:5e:8c:b9:c2:16:c2:0c:
da:45:f0:ab:53:c1:43:fa:3b:ad:72:53:c8:01:90:6c:bb:d3:
92:90:78:99:10:1f:2e:53:85:46:f6:80:9c:ff:4b:2e:23:db:
fb:ef:03:0f:67:6d:78:f7:6e:e8:65:b8:7a:94:b7:f7:ef:40:
bb:df:05:a8:ea:68:8d:c9:57:82:b6:dd:f4:9f:bb:39:23:71:
91:69:a6:6f:91:46:e7:f1:15:72:6d:24:b6:29:e1:0b:26:81:
24:b0:54:a1:ff:94:1f:fe:d8:c4:86:c1:11:a8:6b:e0:b6:62:
22:4c:7a:d0:59:1c:46:b9:5c:7a:4e:6d:3f:0f:2b:17:db:76:
ee:97:2c:8a:91:e5:bb:aa:e1:4f:88:b0:0e:cf:44:0b:61:2e:
eb:12:7a:dc:9a:1a:4a:36:6b:af:0c:93:85:02:fd:34:e7:e5:
4b:20:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:35 2025 by rpki-client