Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: kS/OYagmWizXMmwJdjL/HHT5nf6JNOJdiWq9Mm0qx1w=
Subject key identifier: 69:14:75:CA:F3:8C:EC:9E:E6:1E:57:10:6A:8F:60:AA:0D:BF:ED:76
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 0199C721477BE542780D7EA71027F49013F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 16C7
Signing time: Thu 09 Oct 2025 04:01:10 +0000
Manifest this update: Thu 09 Oct 2025 04:01:10 +0000
Manifest next update: Fri 10 Oct 2025 04:01:10 +0000
Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: 6XNsj9XQuVqkWi8RP+0tE6yqHwntYUS2Hl57S+NZoBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:21:47:7b:e5:42:78:0d:7e:a7:10:27:f4:90:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Oct 9 04:01:10 2025 GMT
Not After : Oct 10 04:01:10 2025 GMT
Subject: CN=691475caf38cec9ee61e57106a8f60aa0dbfed76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:3e:c0:b1:e1:d6:30:ac:bb:31:5c:39:93:
ef:bd:c5:58:09:c1:56:a0:32:ba:ac:90:10:22:13:
5f:92:c3:fd:56:48:96:4a:07:ae:64:36:95:17:97:
a8:61:86:2d:e9:e3:61:71:06:ca:c3:b3:9c:a5:b2:
71:68:fe:ac:4a:99:ec:5a:9d:1a:46:cf:66:ae:78:
36:1f:c9:30:59:0f:63:12:cc:2c:eb:02:5f:1b:e3:
d1:09:33:1c:72:c6:d4:5b:75:1b:06:51:ba:d2:88:
26:66:38:cd:54:91:40:6b:07:13:6c:00:20:45:e2:
49:e6:89:56:86:29:a1:ab:10:df:0f:3b:ad:a7:07:
cf:53:a4:25:92:bd:b3:a5:dd:28:24:b7:1a:b2:28:
cd:52:c2:99:6b:0f:f4:f1:2d:bd:6e:02:86:64:d8:
5a:84:0b:a6:5a:b1:73:42:d6:91:c6:f7:b6:dc:e7:
be:4a:fc:27:2e:bd:fa:48:f4:3e:48:30:7c:50:3e:
a5:f4:70:d3:41:65:d8:25:a7:71:39:05:f6:89:71:
ec:f7:22:4a:8e:e5:ff:3e:18:d5:39:9c:66:cf:0f:
9e:38:12:a2:7b:ab:1a:a4:2d:92:62:03:66:c8:13:
38:42:04:da:32:9d:2e:0c:c9:fe:99:66:45:e9:69:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:75:CA:F3:8C:EC:9E:E6:1E:57:10:6A:8F:60:AA:0D:BF:ED:76
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e9:8b:fc:14:fb:63:ea:33:d4:90:07:22:72:6f:b5:9f:89:
a4:9a:03:02:60:ba:cd:82:68:88:e7:1d:d1:d2:b1:d1:de:15:
cd:81:8b:be:a9:8e:2d:11:7b:17:9c:87:f7:13:47:ca:29:54:
d3:63:84:13:dc:46:32:4f:2c:13:cf:76:4c:7a:a9:a8:e4:ea:
47:e9:eb:e0:ef:d4:12:91:b9:54:ae:46:d0:ab:9f:2c:05:9d:
07:3e:0a:23:10:4a:24:31:14:85:2a:ce:85:c1:a8:ee:25:dd:
a3:5d:43:ba:6e:cc:6b:2e:39:a9:d2:c3:6a:45:79:35:cc:15:
a2:18:e3:7b:73:48:5c:46:fc:ee:e9:8d:ac:22:17:ec:dd:d8:
d4:46:d3:bc:a5:a8:c3:1a:2d:7b:ed:58:5e:46:e1:e1:ed:45:
0b:1b:47:b3:40:9f:87:bc:ca:f8:fe:77:57:2e:aa:4c:53:ec:
db:c1:85:c4:1f:c9:2a:80:07:4e:98:bb:26:c6:26:3e:a0:b3:
b6:7e:12:a6:1b:be:73:6d:17:09:19:14:fd:7b:47:f6:07:40:
6a:5a:06:cb:57:1d:5c:6e:7b:61:c9:5d:96:77:3a:e7:51:6e:
f0:16:c1:93:3a:ed:0b:53:57:b2:7c:97:7f:d1:f7:11:e5:4f:
ae:f2:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:13:56 2025 by rpki-client