Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: xzXMEoKTOpmA5ZqAXWcf4g5npfFYC7+bpbLghoAbHTQ=
Subject key identifier: 42:9D:B4:C0:93:2F:9A:CE:20:33:3A:E3:72:1F:73:B0:B9:64:1E:4A
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 019A29304E33652E7DEC89AC39BA1D6A8992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 05:00:22 +0000
Manifest this update: Tue 28 Oct 2025 05:00:22 +0000
Manifest next update: Wed 29 Oct 2025 05:00:22 +0000
Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=)
2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: QNVuSlOcblUX1WN7I99/7jtSelkcr6J9mxi1yq9FDW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:4e:33:65:2e:7d:ec:89:ac:39:ba:1d:6a:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Oct 28 05:00:22 2025 GMT
Not After : Oct 29 05:00:22 2025 GMT
Subject: CN=429db4c0932f9ace20333ae3721f73b0b9641e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:24:00:61:95:39:52:62:04:a5:2d:11:f8:
c7:2c:d9:a7:f6:84:42:6c:99:db:01:97:59:06:f3:
b3:6b:7a:0f:c8:8b:9d:13:48:98:ea:6a:cc:ed:61:
10:38:dc:b0:6e:fe:bd:68:b1:c2:a8:0a:1d:2d:3c:
b3:62:d1:ac:48:44:f9:32:04:8c:6e:4e:fd:1c:48:
c0:32:f3:95:6a:ee:14:c8:b7:50:18:c4:ad:ef:80:
0c:7c:9a:a0:ea:a5:c7:cf:b5:23:b9:8b:52:c8:b6:
be:18:9e:9d:6b:02:dc:00:f3:75:db:d5:91:c2:1f:
b3:16:13:26:21:ab:0b:af:ff:e2:6d:b2:6d:a2:bf:
5d:88:40:59:26:d7:22:f8:03:09:e2:d4:bc:ae:53:
f9:a6:27:f8:4a:79:6c:7f:a2:9a:ed:ad:3c:2e:0e:
5b:84:36:fc:06:79:f3:34:d8:f5:01:9d:3a:f3:ad:
22:8a:37:60:1e:1d:af:41:89:99:1e:cb:c2:60:95:
b7:3f:4a:f2:ad:90:bc:e4:22:2b:a1:34:08:21:a4:
b5:ec:45:78:2f:c0:9f:82:77:7e:cf:80:e4:de:ea:
bc:43:5d:85:c2:20:bb:61:0d:8f:3d:a1:41:4d:40:
e9:ad:8b:60:96:9f:7f:22:c8:b0:bf:43:e7:1e:c3:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9D:B4:C0:93:2F:9A:CE:20:33:3A:E3:72:1F:73:B0:B9:64:1E:4A
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:14:f2:04:a0:23:13:a4:71:69:74:03:c8:3a:bc:8d:6f:ef:
ec:f9:d2:7c:2e:69:0a:76:0b:8f:90:55:5c:4b:f3:00:03:ed:
3d:08:06:b0:f5:0b:a4:18:36:a3:ae:1a:2b:bd:65:df:31:88:
44:03:d6:cb:64:51:fb:bc:de:b4:8c:3d:d3:4a:e7:01:5f:fb:
d3:f8:fe:ba:d7:4a:0f:36:59:09:51:42:f4:de:e8:6b:66:78:
11:07:14:d6:92:bd:07:df:e0:cb:c9:58:2c:12:e0:94:dc:e6:
d6:4d:10:23:e0:f5:67:18:6e:5e:c7:49:0e:05:4b:df:2a:21:
9a:7e:f4:1c:64:4e:3e:4d:9e:43:c8:68:f1:24:ca:ba:a5:ed:
6a:f3:7c:8a:cb:81:7c:6b:ba:c7:58:f1:4d:9e:79:e9:d3:25:
6d:02:68:6d:e9:c1:01:89:f8:e5:dd:65:dc:7f:e3:fd:d4:06:
89:7f:13:68:62:d5:ee:17:a3:7e:59:7a:3f:17:cb:e8:1c:57:
2c:fa:a0:50:e3:f2:78:3a:db:ea:99:8b:78:4a:d2:0d:f8:29:
95:53:eb:ef:3e:06:d5:c4:1c:7e:a6:8e:23:81:73:13:4a:35:
9e:e1:be:f5:ef:17:2e:61:7b:ae:b7:2f:79:e8:23:de:43:44:
aa:8a:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:39:31 2025 by rpki-client