Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: u91OrC9FEs2FuCBd90qnTpWtI/6PzL2ZerofmHAPV5o=
Subject key identifier: 6C:EC:75:10:5B:E7:A0:CD:DE:22:87:B4:BD:45:FE:E2:B5:3A:69:C6
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 019A228B1C81CD8F6B8BA9DE8FE0D0195D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 22:02:13 +0000
Manifest this update: Sun 26 Oct 2025 22:02:13 +0000
Manifest next update: Mon 27 Oct 2025 22:02:13 +0000
Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=)
2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: y5iz7LVp5A7rQwTNKOhRXeixpCH22ZueQ3D0Mz2iNWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8b:1c:81:cd:8f:6b:8b:a9:de:8f:e0:d0:19:5d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Oct 26 22:02:13 2025 GMT
Not After : Oct 27 22:02:13 2025 GMT
Subject: CN=6cec75105be7a0cdde2287b4bd45fee2b53a69c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:58:88:6d:1d:62:fc:f9:a2:2a:cf:de:75:
a5:f0:4f:06:41:14:9c:2c:60:c1:32:bd:c6:37:85:
af:bd:bd:28:28:43:77:33:b1:a2:2c:41:f5:20:b3:
b2:81:6a:8d:95:6e:e2:9d:34:34:16:5b:d0:dc:be:
d5:d9:a5:d3:f2:8c:e5:bc:ed:e6:bc:0d:82:93:8a:
b8:3f:97:c3:bd:7d:51:cf:e7:f7:45:60:f0:82:12:
f6:81:7c:49:36:af:3d:53:94:3f:2c:10:24:99:e5:
39:cd:8f:dc:25:32:8c:82:d2:b6:e8:04:c1:f1:27:
93:ae:79:2e:44:6b:2d:f6:fc:e3:38:d1:85:ed:fa:
70:4c:ea:65:49:51:81:95:11:06:56:8c:29:b6:8f:
d9:84:75:b1:2c:bb:45:57:a3:a8:2b:f4:1a:e6:3d:
0e:40:59:46:96:08:9b:b3:e5:20:15:fd:7f:96:35:
be:85:8b:b2:59:94:a5:73:27:61:3f:f6:fb:fc:9e:
07:eb:14:97:84:0e:d3:42:7b:eb:3d:d1:6d:81:9a:
0a:5b:26:f4:53:81:f6:57:d2:5f:6b:2b:56:ec:cd:
c6:f4:8c:26:5a:cf:b3:76:a5:69:a9:99:67:31:0d:
c9:dc:48:f5:57:6c:9e:a8:4b:3c:0e:94:f5:79:48:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EC:75:10:5B:E7:A0:CD:DE:22:87:B4:BD:45:FE:E2:B5:3A:69:C6
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5f:0a:9e:00:e4:44:ed:75:5c:4e:06:2a:1a:f3:68:fc:66:
db:df:b6:42:2b:19:9c:74:18:71:68:57:e7:84:cb:36:c6:3a:
d7:21:5c:86:de:86:ef:3b:15:a3:60:2b:39:18:cd:56:71:d0:
43:7a:c2:87:4d:e5:73:54:31:5b:9c:5d:5e:ce:f9:2b:73:af:
5a:a7:3e:95:52:fa:90:e4:13:5d:51:31:90:b8:91:c9:ef:fb:
c7:a6:fc:b6:e0:f5:2a:48:8b:e7:9e:f6:fd:11:30:f7:97:89:
9a:28:4b:64:bc:aa:fb:c8:95:c2:c4:9f:0e:f3:99:54:3a:e8:
b1:a4:d8:2d:ac:29:9f:64:ac:bd:bb:ef:8c:c7:05:ee:6a:42:
0d:99:bd:1a:4d:ba:b5:7e:09:dc:83:b3:35:3c:cc:6b:42:87:
11:08:b3:9e:23:07:20:43:9d:00:b3:c3:d0:b1:e6:12:25:b7:
65:31:a7:48:2a:61:41:0a:a7:cb:16:98:43:cb:b5:33:40:20:
65:85:fa:16:8d:7e:9e:77:49:4d:31:2c:17:31:d3:75:29:76:
aa:f1:4b:0c:d2:e8:3b:18:4d:c7:f5:d1:81:d7:85:00:9d:2a:
57:96:88:31:ff:7e:bb:c9:50:37:d8:02:6f:4a:ca:d0:9a:3f:
37:b8:7f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:16 2025 by rpki-client