Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: Wk810yrq5Vmvke8iMeYJhn2Gkq/Vra/8pjBpFHgzGk4=
Subject key identifier: D6:1C:26:FB:49:87:3E:9D:62:B8:BA:BA:63:1D:9F:6B:C9:66:79:96
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 019A2C313C6E2BDA535447F57851BAF515B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 19:00:15 +0000
Manifest this update: Tue 28 Oct 2025 19:00:15 +0000
Manifest next update: Wed 29 Oct 2025 19:00:15 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: DKSiCgh2/GwBxB71vfHVtz08aAjV65fHEdLVz8zmRD4=)
2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:3c:6e:2b:da:53:54:47:f5:78:51:ba:f5:15:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Oct 28 19:00:15 2025 GMT
Not After : Oct 29 19:00:15 2025 GMT
Subject: CN=d61c26fb49873e9d62b8baba631d9f6bc9667996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:95:ee:a1:78:54:87:be:a6:c5:96:e0:f0:
b1:2f:46:f7:24:b4:42:c7:66:37:c3:02:cd:7c:b1:
c4:3b:36:3b:4a:40:9c:e2:9f:69:bf:18:aa:02:4e:
17:dc:21:35:0a:11:ab:0b:56:6a:97:da:66:93:db:
67:41:d0:37:33:82:13:4d:55:57:76:77:08:76:7f:
1d:1c:47:85:a6:ac:88:28:5c:12:41:aa:f1:b9:25:
31:ed:04:fa:af:9e:d4:d8:93:12:0e:2b:72:6c:15:
f1:94:5e:91:cb:71:d6:50:9b:18:6d:63:01:5b:36:
24:b2:ab:63:f0:6d:ba:d5:c8:f2:62:2d:8b:f7:87:
cc:14:c0:20:35:de:d6:a4:b9:e9:78:e8:03:44:d7:
b7:de:79:e0:4c:92:35:75:cc:01:55:89:54:b8:54:
88:af:78:df:59:63:bd:4e:bc:88:4f:28:ca:d1:1b:
79:eb:6c:9a:9e:c6:76:e2:bf:d8:5c:ed:c1:ec:74:
f4:9f:21:17:e0:0a:e6:99:db:43:5f:28:28:40:9d:
1a:47:3e:ab:b0:f1:7e:29:84:b5:07:5a:e7:56:67:
a6:d0:ac:b2:84:0d:89:8d:27:d4:b6:da:fe:2e:d4:
d9:20:7f:db:f8:02:27:b5:bb:e8:77:1e:eb:25:92:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:26:FB:49:87:3E:9D:62:B8:BA:BA:63:1D:9F:6B:C9:66:79:96
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:68:d3:a9:c5:f8:16:cf:8d:cb:2e:bd:1c:80:3b:f2:da:08:
bb:53:ff:72:d1:80:f4:12:c0:d3:72:55:18:55:9d:74:da:e5:
71:55:24:00:0c:ab:2b:fa:00:b3:f2:11:33:43:3e:61:21:9c:
a8:34:0a:b5:dc:f9:40:e9:ed:44:77:e9:f7:bd:73:5e:17:40:
36:ed:ea:49:08:38:f4:3b:1d:78:d9:a4:8e:d3:4c:68:d6:bb:
e3:a6:42:16:6d:4e:bb:04:af:9e:0d:25:85:9b:81:aa:ca:49:
16:c1:47:36:79:08:06:98:ef:76:1c:1e:cf:bf:f4:fa:8b:32:
c0:13:9f:35:96:0e:75:42:c3:ce:87:46:0f:5f:bd:78:7a:25:
76:c0:4f:0a:f3:2e:38:1f:cc:eb:ca:6a:6d:4c:3b:b7:4d:68:
49:e6:73:0d:57:03:78:b4:79:cf:2f:fb:7b:d3:35:ca:ec:2c:
1e:a2:bf:c0:5a:c0:ec:9a:51:61:f8:63:10:61:fc:f5:51:ca:
44:41:b1:11:54:4f:d0:e6:81:08:0a:ac:0f:74:2c:f5:63:19:
60:26:d7:aa:ad:47:8a:06:d4:de:26:bf:6f:fb:6c:95:64:5a:
6f:9a:d3:a4:a7:d7:ac:c9:d5:e9:3e:44:fa:09:c2:58:cf:74:
4b:6a:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:28:39 2025 by rpki-client