Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
File: n8UDUANWwjcveVsQ0PfVid9p_Is.mft (raw, json)
Hash identifier: JHjn3Sij88en/zKfGgFr7135jBh9dIot596L8nhM0Dc=
Subject key identifier: 4F:CE:04:A2:BA:C9:92:27:B0:AE:D6:94:F5:2D:8D:DD:54:2B:7C:AD
Authority key identifier: 9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
Certificate issuer: /CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Certificate serial: 019A1EAC71D8E4662F395ED471BB1D4A541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
Manifest number: 16F1
Signing time: Sun 26 Oct 2025 04:00:09 +0000
Manifest this update: Sun 26 Oct 2025 04:00:09 +0000
Manifest next update: Mon 27 Oct 2025 04:00:09 +0000
Files and hashes: 1: n8UDUANWwjcveVsQ0PfVid9p_Is.crl (hash: zjTSY6IxuUd7u3gt1nm+OQnMUQF4TnbvX0bvA+X26RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:71:d8:e4:66:2f:39:5e:d4:71:bb:1d:4a:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Validity
Not Before: Oct 26 04:00:09 2025 GMT
Not After : Oct 27 04:00:09 2025 GMT
Subject: CN=4fce04a2bac99227b0aed694f52d8ddd542b7cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:c4:86:d9:d8:36:62:91:ca:57:76:d6:b8:
6a:2f:a7:3c:4c:27:85:88:cf:45:5d:d1:e1:dd:b2:
37:3e:ca:9c:24:61:16:ba:5f:ff:03:44:fc:3e:59:
f4:7c:83:3c:09:31:67:08:07:1b:18:49:41:ab:b1:
fc:2f:e3:ea:4a:f1:c5:d4:44:18:62:66:68:e9:51:
fa:6e:56:1b:18:30:e0:31:8f:25:f4:76:fd:ca:08:
26:f2:46:71:38:ab:34:1a:4f:8c:84:57:79:7a:93:
57:c4:8a:ee:d2:f7:c9:fc:b2:8d:e2:bf:95:a6:60:
0c:e4:b6:58:f7:ef:a3:e4:87:16:b4:c7:37:ac:a4:
c0:46:bc:d0:ad:e3:24:6d:7b:c5:5e:92:17:00:7d:
52:1a:fe:fa:ba:38:3c:fc:2b:a3:4d:ef:47:e5:6e:
42:d0:b9:86:60:87:88:41:31:e6:59:6c:e5:b7:b9:
6d:8c:a8:c9:74:ec:6b:ae:58:c2:2a:ab:5e:02:22:
71:88:b4:95:74:34:8c:48:5e:42:84:6b:1d:5c:6e:
51:4f:a2:c8:4d:99:18:27:15:49:8d:c5:24:3f:d0:
de:c9:ce:1c:37:86:6d:fc:62:3d:14:70:57:35:01:
1a:12:eb:a9:b0:61:d4:5c:7c:18:27:0f:37:8b:3a:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:04:A2:BA:C9:92:27:B0:AE:D6:94:F5:2D:8D:DD:54:2B:7C:AD
X509v3 Authority Key Identifier:
keyid:9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1a:a4:3e:6a:be:7b:cf:56:63:f4:fc:93:08:b9:8e:78:aa:
6f:0d:d1:30:b6:e5:d2:47:56:3f:bc:5e:9b:c5:b1:f8:91:a9:
a2:00:40:2a:fe:64:6e:f9:2f:8b:f3:ad:a4:28:b4:ce:db:dc:
5b:f3:ab:78:ad:2d:1d:bd:aa:d3:a7:b3:35:28:0d:74:10:c1:
1b:35:be:f4:d8:f8:38:c6:2d:3a:89:77:24:b1:0b:56:aa:4e:
55:7a:71:98:76:4c:be:61:d3:2e:b9:0c:c7:07:8a:dc:36:17:
9b:8f:4e:ca:5d:71:36:93:fe:11:24:a8:ef:61:1f:01:71:e7:
f1:5d:fe:4f:5e:ee:5f:80:5b:fa:72:e1:5f:3f:cb:82:07:38:
c5:9b:45:5d:17:f6:0c:89:12:9e:54:bb:0e:57:39:90:f9:fd:
25:cb:ae:e7:d0:4b:7a:b6:15:d6:f5:ad:59:50:0d:f5:0a:ea:
b8:3a:a7:4e:4a:7f:86:20:f6:98:b1:ae:8f:b0:a7:e5:b9:ad:
e3:be:c5:11:6e:c3:86:bd:78:73:0c:95:a1:6d:f0:59:c3:5a:
6b:38:dc:5c:d1:bd:95:d4:66:72:b2:a4:ae:5d:4d:05:22:1f:
fb:fb:d0:19:f2:49:e4:88:81:fd:ab:7e:63:97:b9:c0:29:09:
64:4c:d6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:10:27 2025 by rpki-client