Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: oSbG4db9wVDVh7nEeOiZ0S+Q9FZE6UZhKFvjXgSMKmQ=
Subject key identifier: D9:2A:28:F9:DD:F4:23:8B:48:F4:E7:66:C4:B5:6A:B7:4D:FF:47:23
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 019A270B0CA68437BFE3A27BFDFB8DEC720A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 19:00:26 +0000
Manifest this update: Mon 27 Oct 2025 19:00:26 +0000
Manifest next update: Tue 28 Oct 2025 19:00:26 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: r9kOq6whqRo0n5dfnM4oTeMkmUDDNNH0TvBZu/TSPyk=)
2: r1YhKFt6xgygnUNlQ8RZ7x72_gw.roa (hash: e219ZrluMTaPryCaTBAQMAezZgBHvQfx3T3Sk01I1mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:0c:a6:84:37:bf:e3:a2:7b:fd:fb:8d:ec:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Oct 27 19:00:26 2025 GMT
Not After : Oct 28 19:00:26 2025 GMT
Subject: CN=d92a28f9ddf4238b48f4e766c4b56ab74dff4723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:90:51:47:ba:7d:46:c2:c7:01:65:6c:d5:
14:49:5a:05:6c:ec:4a:81:d0:4f:1f:a4:a2:ab:f4:
a4:7f:ab:cd:6d:ee:61:ca:d4:f7:5f:32:a0:96:1c:
d2:c7:a2:c4:c9:15:25:e7:5b:c3:6f:9f:81:40:26:
f6:c6:b7:34:89:68:3e:08:aa:18:28:10:f0:9c:52:
3d:18:02:62:36:3c:8b:33:51:d1:0f:09:46:55:58:
76:9b:70:eb:25:95:6d:f1:2d:3b:46:8a:ba:51:ad:
6c:1c:16:6c:d6:83:fd:bc:09:63:fd:03:62:8e:d5:
4f:e5:ae:f2:fd:fe:fa:43:4f:5a:be:b6:70:94:31:
75:82:58:8c:b4:01:4b:eb:80:6a:fc:0c:4a:a5:10:
df:b6:d7:6e:f1:f1:45:d9:0f:45:bd:46:22:fe:49:
74:76:69:dd:8e:47:18:cf:c7:3b:ac:d6:0d:62:b1:
e2:52:7e:8c:7c:9f:f5:40:6d:80:82:16:d9:a5:86:
be:97:ac:85:65:a4:ad:88:b6:42:6a:a3:e2:46:54:
e3:b9:79:e8:24:7e:68:fd:d1:9e:ba:b3:36:6f:00:
0d:21:26:1d:4b:10:18:f8:7d:8e:6a:b8:9d:67:8a:
4d:96:a2:de:f2:6f:af:52:ef:bb:49:38:fb:c1:d4:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:28:F9:DD:F4:23:8B:48:F4:E7:66:C4:B5:6A:B7:4D:FF:47:23
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8b:35:0c:73:a8:da:e8:44:ff:97:86:99:eb:0a:e8:d8:f2:
13:da:c4:47:2b:5a:e0:85:6f:75:39:e5:14:ff:34:6a:53:cd:
1e:35:26:37:de:40:61:44:d5:27:2f:4b:59:32:32:a1:3a:30:
77:48:af:bb:40:ec:6a:42:9c:e8:b1:88:ff:33:c2:08:68:06:
86:96:67:90:8e:6c:b9:49:42:2c:09:98:5f:b2:29:79:22:eb:
23:75:33:60:96:2a:22:ce:89:16:f7:ef:f0:bf:8a:2d:1f:e9:
b5:66:ba:f2:dd:3e:58:bc:4c:15:fe:4c:87:ab:7e:16:78:46:
7e:4a:f6:22:a4:94:cd:71:14:7c:4b:07:33:75:f3:92:7e:d3:
c3:26:0f:89:5a:13:1f:6b:80:da:f8:ff:03:25:ba:3f:a7:ba:
24:47:fa:d1:ca:43:fe:7b:c2:61:c8:78:60:13:b3:a3:05:89:
62:46:1a:26:43:c2:02:9c:a5:0f:bc:9a:c9:2a:99:48:de:1e:
7f:ec:e9:7d:0d:b5:db:26:a4:a7:03:ca:50:48:4d:97:4e:67:
de:40:4c:d8:7d:8c:74:1b:1b:36:25:45:26:72:69:90:ba:e1:
6c:d1:cc:89:03:db:2b:00:f6:53:74:8c:50:b6:89:38:e4:71:
4d:ed:97:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:22:31 2025 by rpki-client