Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: DJ1B7Vvin7f9wjR6qSlgzBNS4l1lowBJPnhlb91+usE=
Subject key identifier: C4:31:3A:A0:73:BC:AF:47:A7:B3:F4:95:73:B1:C8:34:EF:0B:EE:4E
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 019A2854F82325AB4B1D69955EA7F5E6929B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 01:00:48 +0000
Manifest this update: Tue 28 Oct 2025 01:00:48 +0000
Manifest next update: Wed 29 Oct 2025 01:00:48 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: PhuIHKO+2WvF7DWrkHgEKn+1dp/Lq9tRGTmC5ysHwHY=)
2: N4NsUcZuS_9XiBDgAfw6eryV7HU.roa (hash: tpgeA/zfOVEAg9H115FFWM358l26uFQNlABFRgvWlU4=)
3: yV4dNy3NsBZVUNWCmHTLsnrsaLM.roa (hash: HeRl5vH7gTSirrF3z1irtqiGbkDXqM3OvljtYndKLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:f8:23:25:ab:4b:1d:69:95:5e:a7:f5:e6:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Oct 28 01:00:48 2025 GMT
Not After : Oct 29 01:00:48 2025 GMT
Subject: CN=c4313aa073bcaf47a7b3f49573b1c834ef0bee4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:55:87:03:83:0d:38:80:34:ed:e0:86:9c:
ad:3e:53:88:61:cc:ac:7e:b5:7c:51:1f:68:5c:75:
24:02:b4:a8:dc:d5:11:b3:73:65:96:ca:57:de:fa:
87:87:1b:19:af:03:a1:b8:95:fb:5c:56:4a:3b:1b:
2c:83:1f:58:e6:94:a8:e5:3e:b8:20:d7:d7:8b:f7:
be:d6:e9:63:45:7e:fa:3f:f1:2e:83:c2:4e:d1:a4:
ef:14:81:7f:ae:ec:ba:97:ec:09:14:ec:ca:36:e3:
e1:50:fa:dc:42:74:f6:72:46:12:62:31:57:b5:da:
08:a6:e1:8f:9f:ed:a5:af:a3:98:19:f4:3e:36:ad:
01:0c:d5:ce:b1:01:6a:38:f8:2b:13:47:ac:4e:bb:
56:7f:cc:5f:73:ba:51:ab:41:b9:c7:e8:70:36:d7:
fe:d0:43:78:7f:53:99:f4:56:87:99:21:e0:e3:d6:
6c:59:76:42:62:01:33:34:9d:7a:5e:26:f2:db:d4:
5d:c6:fc:eb:30:94:65:b6:75:c8:cc:52:b1:ac:68:
69:41:b8:5a:7f:85:6e:3f:63:54:dd:15:e8:9c:4a:
90:4f:cf:fb:73:f4:75:5e:61:db:65:a9:52:be:e0:
9e:1d:a6:91:00:dd:da:f8:7b:b6:b6:94:68:f8:38:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:31:3A:A0:73:BC:AF:47:A7:B3:F4:95:73:B1:C8:34:EF:0B:EE:4E
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fb:ce:54:dd:b0:ad:1a:be:76:fb:01:21:b4:46:d2:b8:ef:
c9:6b:94:c0:12:2d:a5:e8:6b:bc:bd:d1:4c:f8:30:fb:77:22:
c6:88:94:c2:76:aa:e5:65:d7:57:fd:61:63:e9:e1:41:28:99:
95:e2:fa:99:86:cc:9a:59:db:11:0c:f6:ec:65:14:01:0d:71:
7c:cd:41:41:39:51:b5:8d:37:ec:4d:70:f7:26:ef:29:80:2c:
f5:29:12:52:83:8f:8e:7b:9a:27:6e:9b:c6:66:15:5f:bc:5c:
54:59:da:08:a7:4c:a9:44:2c:04:7c:b8:5d:61:b9:ea:a3:ea:
ab:07:05:0e:6e:57:77:54:e0:18:92:46:50:41:95:67:22:e7:
a5:5c:71:5f:46:ec:be:18:8d:87:94:02:c8:ad:53:88:45:65:
a3:23:1c:03:38:1e:cb:34:2e:f6:a1:d8:5a:2d:f3:87:f0:2d:
8d:12:8c:ab:1d:98:b2:bc:15:ce:20:b7:c7:02:f3:2a:6a:fa:
77:c1:dc:7c:80:c4:92:ca:a2:2d:24:2c:62:16:b0:2b:e4:e8:
ee:c3:b6:e0:2a:d9:02:f0:b1:d2:77:70:81:73:f1:23:bb:6f:
6b:d9:0f:8c:8c:a4:64:42:4a:ae:89:05:31:19:3f:46:16:ed:
72:82:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:44:58 2025 by rpki-client