Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: MZESirTi2lQ/dZ2DC9NwWlWPBOlXeTHKLfxtJyZW7Vs=
Subject key identifier: E3:49:F1:C7:FB:F4:59:7B:2B:56:22:C2:40:C5:53:C6:51:FD:08:EA
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019A2B8CDEDB5CD338E707C28578B7C41F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 16FE
Signing time: Tue 28 Oct 2025 16:00:43 +0000
Manifest this update: Tue 28 Oct 2025 16:00:43 +0000
Manifest next update: Wed 29 Oct 2025 16:00:43 +0000
Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: JL8C6DrRicMzN2BwPN+/lP8JcPHDWHZp12u006QFvUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:de:db:5c:d3:38:e7:07:c2:85:78:b7:c4:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Oct 28 16:00:43 2025 GMT
Not After : Oct 29 16:00:43 2025 GMT
Subject: CN=e349f1c7fbf4597b2b5622c240c553c651fd08ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:32:35:a0:db:db:ac:e6:f9:6f:8f:80:f8:
71:59:01:3c:0c:37:f3:c4:e0:01:3f:9e:f7:be:04:
c3:7b:3f:43:9f:ad:23:83:bb:69:2c:33:d6:57:14:
ce:19:35:ac:46:f3:6c:a2:c7:66:5e:a0:dc:8c:89:
af:a0:4c:71:b6:9c:44:83:5b:a8:1f:2c:2f:ce:5b:
d3:bb:62:e4:a7:80:29:fe:21:94:8f:ad:72:55:3b:
38:a2:80:40:b3:55:80:df:41:0f:af:85:13:a4:99:
5e:9a:74:fb:f1:bd:03:ac:de:f0:c0:dd:64:51:f9:
9e:86:5d:c0:bd:ae:a2:9a:f9:a8:d9:94:81:fc:81:
41:38:06:78:60:ec:65:2c:a8:b9:a3:f4:d5:f3:fa:
91:56:1c:6e:42:cc:b2:1b:87:d3:b1:2e:62:5b:c5:
2f:d6:eb:28:05:66:0d:18:16:8d:24:24:a4:1e:6c:
24:48:f4:82:2b:18:74:02:96:f1:3e:d5:b2:a2:40:
61:c1:8c:7b:f0:b0:16:44:8d:d5:b5:1b:9a:3e:9a:
49:df:bd:f1:2c:62:19:3c:d8:d1:b6:23:51:7a:6f:
32:97:42:c4:1b:6e:b7:d9:59:54:e3:60:3c:c3:b7:
c2:54:4f:8b:19:82:9d:40:0d:a7:f2:5e:69:6b:2d:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:F1:C7:FB:F4:59:7B:2B:56:22:C2:40:C5:53:C6:51:FD:08:EA
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:74:ff:47:2e:fd:3c:ae:96:d7:be:a0:83:16:76:e1:31:fd:
5f:00:01:7a:46:cf:5e:f0:9e:be:9c:f7:5d:fe:b6:04:14:1e:
5f:92:cb:46:1c:25:f5:84:4f:da:f7:bf:eb:fb:be:85:fe:ca:
30:f1:69:64:c2:6f:d5:4b:79:e3:ed:bc:e3:68:7a:d7:01:22:
e5:83:25:57:65:82:6d:c6:61:9a:a4:d1:3e:4a:7e:81:15:5a:
17:24:7a:c0:64:67:6f:2d:40:b9:1e:5d:1f:d5:7b:6a:dd:d0:
8c:50:5a:46:24:8a:4f:a4:7c:46:28:13:79:78:84:19:88:b3:
eb:fd:0d:60:91:ec:3b:64:1c:fa:b4:61:c0:3d:0b:45:30:5f:
2b:4b:f9:c6:29:05:e9:bd:33:cc:16:b7:1b:cb:41:f6:f8:cb:
df:7d:f6:af:16:8d:60:0d:ee:28:cf:11:52:8c:f2:79:98:ba:
88:dd:81:10:88:be:2a:2a:fd:ab:1d:18:b6:4e:3d:99:a0:69:
86:d4:df:46:40:45:fb:e9:7f:1c:55:8e:31:ee:13:8a:54:2f:
a5:6c:da:58:85:b2:ce:98:a4:63:92:d9:d6:ab:ac:12:ad:99:
1d:9c:e1:41:cd:68:77:0b:c2:f8:1c:46:88:ed:bb:ac:20:55:
b9:ce:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:03:06 2025 by rpki-client