Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: Luoyv2gQ0vM/Tbnocm3iWv9Q3mKo9QWJVRKX9j6W1ow=
Subject key identifier: 08:AE:3B:29:26:53:46:E1:E7:68:5C:CA:6B:C6:91:70:47:63:F1:4E
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 019A1A98AC5C501778218F81C2B0D8C9FC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0D95
Signing time: Sat 25 Oct 2025 09:00:04 +0000
Manifest this update: Sat 25 Oct 2025 09:00:04 +0000
Manifest next update: Sun 26 Oct 2025 09:00:04 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: nb/PG4HFIfX0wXCBAnGkEg8Yc/JdmQ32fu+zUBPDJWs=)
2: negj_8qldSprHD3F1eQcTwkIJOc.roa (hash: 5inaQlsg7taDD/vUiufDsWArj6aKqWfm3/zGXBynHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:98:ac:5c:50:17:78:21:8f:81:c2:b0:d8:c9:fc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Oct 25 09:00:04 2025 GMT
Not After : Oct 26 09:00:04 2025 GMT
Subject: CN=08ae3b29265346e1e7685cca6bc691704763f14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:ac:0f:83:9a:14:ca:40:3c:d8:6a:47:22:
90:a7:ba:a8:73:ec:f4:a9:9b:af:e3:a0:b0:fe:42:
75:8e:bf:fb:df:2c:ec:00:89:3a:08:28:97:db:19:
3f:93:d9:42:1b:49:f3:23:76:df:31:5d:d8:26:74:
19:a3:3c:39:c3:76:fa:ac:31:50:02:f6:ce:f9:c1:
6d:87:71:3e:0d:83:52:31:ee:37:4b:19:61:cc:47:
3d:aa:3c:24:99:be:9d:3c:74:c7:6b:f2:91:64:5c:
e3:30:a1:f6:05:1a:c7:a4:6f:ac:7b:5d:d5:2f:28:
dd:62:42:75:46:28:c0:5c:19:50:a4:07:23:af:6e:
6b:11:e5:fd:01:79:be:9f:e5:82:b9:5b:d3:44:7e:
33:47:d4:84:f9:e5:38:0a:68:37:db:90:56:16:cd:
c7:d7:8e:d1:1d:1f:3f:e4:d5:fe:f9:49:04:a1:cc:
c0:09:70:01:96:5c:5a:af:30:dd:bf:c0:51:19:23:
74:60:90:c8:67:c7:b3:91:dd:02:80:1e:37:06:c5:
ea:ed:b7:50:c3:0e:19:13:fa:1e:87:64:02:9b:4b:
5c:5c:d5:b6:01:2c:de:0a:80:92:ae:93:a2:49:be:
da:df:4e:51:d2:b5:d9:cf:f2:18:b6:9e:33:c7:60:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:3B:29:26:53:46:E1:E7:68:5C:CA:6B:C6:91:70:47:63:F1:4E
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fc:7f:4d:7c:3b:fb:ea:e1:29:9c:da:f8:ab:5e:f6:30:df:
19:a1:30:0b:f0:5c:c7:1e:ff:ee:aa:45:32:d1:78:f0:ba:a6:
e0:b9:ab:cb:9c:bc:d3:36:54:65:dd:23:ba:01:68:4f:e5:b6:
b1:9b:a9:40:19:e8:b0:0d:c0:5e:19:cd:83:30:74:f2:81:19:
ce:84:11:a0:43:ed:56:f7:aa:1f:e8:24:02:ca:2e:85:d9:22:
e1:e3:3a:bf:01:5b:99:96:7c:e2:44:76:90:cf:3d:db:e3:fd:
9f:d1:fc:49:e7:d4:3e:9f:38:36:84:66:4e:f9:49:60:e2:d6:
25:5c:df:a5:53:8a:7b:55:cb:18:e3:42:03:8a:95:00:ea:95:
f4:c6:08:c5:a9:dd:d3:96:e2:69:b4:8e:1d:cf:b6:01:31:3e:
25:82:f8:49:24:0e:72:9c:12:48:74:3d:2b:84:07:2a:f0:ac:
4f:4b:2c:0d:ae:3d:25:00:b5:48:6b:cb:9f:86:fe:5b:b4:fc:
01:24:4d:ac:b5:e5:50:77:81:63:07:cd:f6:52:fb:a6:ab:e5:
1a:ae:be:8c:d1:33:b8:5a:18:de:7c:10:7f:f9:0f:44:43:28:
9f:e3:56:6a:1a:5b:d6:44:4c:58:aa:69:8e:5f:a2:05:f2:cb:
68:5b:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:12 2025 by rpki-client