Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier: Pt1mIbjq0JW8A8EQzMdkc3BUzqtQorCWq0YgoGQgfr0=
Subject key identifier: CC:D8:3A:75:C6:83:D3:0C:21:36:0A:7F:A8:C1:B5:CC:5D:78:37:A7
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 019A2409C100188523D41B7B3B6BE5B89978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number: 15F7
Signing time: Mon 27 Oct 2025 05:00:10 +0000
Manifest this update: Mon 27 Oct 2025 05:00:10 +0000
Manifest next update: Tue 28 Oct 2025 05:00:10 +0000
Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: oeoBtBhBS/H/AoDsCGLkNKRVggDR2vRr/8cE6qbPyDQ=)
2: d2hoUpvor7BPW8nmpz4xnZjE2u4.roa (hash: hIY/GtYHLCsuos0GvnTm5ot49GmbZ9W7yYzcGZgrlOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:c1:00:18:85:23:d4:1b:7b:3b:6b:e5:b8:99:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: Oct 27 05:00:10 2025 GMT
Not After : Oct 28 05:00:10 2025 GMT
Subject: CN=ccd83a75c683d30c21360a7fa8c1b5cc5d7837a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:fe:2d:d4:7f:64:bd:ac:1e:b3:a8:e8:f6:
ef:40:25:1f:ff:c3:8f:9c:b2:a5:20:8d:07:31:60:
6a:cd:42:ba:f0:87:8c:df:a3:59:56:da:44:e4:c8:
6f:4a:92:00:fa:6f:70:65:40:10:2a:54:a9:75:cf:
6e:2e:37:57:47:84:ce:1d:fe:0f:7c:c3:2f:0f:01:
30:a2:a7:6c:4f:96:2b:9c:42:94:42:1d:51:9b:2d:
23:2d:0a:bb:ad:1c:9a:11:65:0f:ed:3e:a3:e3:38:
de:45:b8:5f:ee:13:0d:25:f5:dc:c0:ed:5b:97:be:
a1:6d:bc:96:65:89:44:5f:d5:1e:4a:0c:a7:40:7a:
6a:06:d4:90:1e:7c:70:65:42:95:f9:3d:e9:45:0f:
ed:d5:1d:13:ed:bb:90:0d:ae:77:8d:48:24:37:a2:
ba:8c:76:c1:b7:aa:84:03:fc:2c:e5:0f:a1:86:a8:
e4:e8:5f:fa:83:c6:83:1c:ad:f9:2c:5c:57:50:83:
93:44:9d:f0:e6:bb:49:ab:11:c2:63:69:90:d1:21:
56:7d:fc:43:34:82:93:da:32:0e:da:9c:4c:6c:d9:
ef:ec:c7:80:3a:1a:be:f2:12:56:9f:b5:7a:9c:3c:
30:d7:21:d2:d7:12:40:4d:ba:7a:3f:10:7a:d1:01:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D8:3A:75:C6:83:D3:0C:21:36:0A:7F:A8:C1:B5:CC:5D:78:37:A7
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:b8:a6:8a:de:92:b3:dd:ae:dd:b1:0d:19:52:9f:ea:54:
55:44:b8:64:ad:d3:f9:b1:27:ab:32:a8:83:3f:b1:91:be:a1:
8c:12:0b:a6:ac:d7:6a:72:2f:a9:1b:1d:14:33:e7:1f:11:f6:
f3:57:18:46:57:10:e6:2d:91:fd:d0:09:55:c5:a1:d9:43:3e:
86:91:4b:d4:60:8a:a0:6d:c8:1e:00:6f:1f:a6:86:4d:62:16:
ea:33:03:42:c2:e7:83:d6:f4:35:30:cd:85:f8:8b:b4:74:41:
8d:e5:44:9c:4e:eb:61:94:84:0d:2f:13:e8:6a:9f:7b:1b:8b:
ed:b9:70:ff:f6:31:e3:f2:39:00:81:71:f9:63:ee:36:0e:5a:
69:26:24:5e:d4:53:6d:97:44:92:f7:ba:e8:67:40:e0:79:71:
75:2d:3c:f9:6b:d4:25:dd:36:e5:c5:67:43:41:92:4b:a1:2b:
7d:82:07:c1:d9:80:2c:8d:c9:d2:d9:66:08:49:8d:f2:fd:b7:
2d:7c:ce:9b:76:8e:c0:d9:37:4b:c3:6f:13:62:cb:49:51:80:
fd:e3:90:40:99:68:f6:81:5f:b8:df:67:da:a7:aa:8d:ad:e1:
38:d5:a3:4e:47:d1:5b:28:17:2e:d1:ec:de:94:11:e9:a0:49:
52:13:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:59 2025 by rpki-client