Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: DgUFm9+RATslIQNfsGrhXEBv5OPX3Q9f0/ZLqEs61Us=
Subject key identifier: 56:F6:04:92:D8:09:63:89:8C:0F:12:1B:27:DC:D1:F0:93:C5:E1:55
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 019A251C6C67040586E150075F2CD609C826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 10:00:10 +0000
Manifest this update: Mon 27 Oct 2025 10:00:10 +0000
Manifest next update: Tue 28 Oct 2025 10:00:10 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: RgaoQsYm89iDUtbgNZar5JVKZyfssyRFciW98cQM1eA=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:6c:67:04:05:86:e1:50:07:5f:2c:d6:09:c8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Oct 27 10:00:10 2025 GMT
Not After : Oct 28 10:00:10 2025 GMT
Subject: CN=56f60492d80963898c0f121b27dcd1f093c5e155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:6b:e5:34:9a:85:9e:f4:0b:ba:7b:fd:3e:
21:01:7a:11:17:49:96:44:cd:f5:07:1f:34:bc:98:
61:02:81:73:cc:74:4e:40:54:ad:40:3c:c7:20:56:
b7:a5:8e:a9:cc:0e:14:97:0b:be:f8:60:8e:d0:2d:
a8:8a:da:bb:d3:30:74:4d:49:d2:db:43:50:82:29:
48:e6:34:74:25:fb:df:98:6c:4b:50:af:78:dc:3d:
c5:65:5e:97:b1:cd:06:01:b6:21:91:77:ea:20:b9:
30:e1:ae:94:e3:59:f7:6a:c3:da:43:a1:67:cd:04:
73:d2:a7:2b:5e:f1:fb:2a:4a:fd:e2:e3:2e:91:a4:
d3:f6:95:aa:ec:98:17:32:ca:f7:24:b1:df:cd:9f:
3b:3f:a8:b8:e6:a8:2c:bf:30:09:4a:a3:9a:c9:a4:
2c:e6:2c:4e:6e:19:be:fd:fa:c0:ad:77:b9:4f:fd:
15:3a:c5:38:b1:a8:80:fd:f4:75:6e:aa:aa:45:86:
ef:af:fe:bd:ae:fe:39:fa:9b:89:55:13:c2:f8:f7:
8b:d0:a8:d2:3a:ce:bf:94:53:65:39:ff:3b:5f:80:
5b:7f:23:fe:18:55:57:2e:97:c8:2c:31:c8:ec:8b:
a7:ad:98:0a:fd:cb:8c:21:0b:3b:04:c7:18:46:97:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F6:04:92:D8:09:63:89:8C:0F:12:1B:27:DC:D1:F0:93:C5:E1:55
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:10:28:8b:6e:e0:39:bb:99:ee:b5:f7:c5:f1:5a:27:8e:7f:
55:5a:73:04:0b:76:cb:6a:d8:f1:55:02:2b:c3:f4:f7:c0:5d:
8f:db:50:d8:4e:da:4b:f4:67:6b:a2:6c:36:39:ba:b7:9c:46:
77:34:3b:63:df:2a:c8:c2:1d:55:1e:eb:b1:fc:f5:4f:57:b3:
1d:2b:f6:20:95:1b:5b:4f:42:52:a6:fb:88:72:79:b2:36:a0:
f0:71:74:c8:d7:07:9c:e3:b3:33:09:31:8d:a4:0f:50:f1:17:
1c:69:a2:77:74:a8:7a:f4:4b:0f:fa:00:19:46:77:51:bb:69:
ec:2d:df:aa:01:a6:19:da:97:65:c9:9c:74:c8:f9:e3:20:3f:
ff:ae:1f:26:51:c1:a5:78:7f:e5:55:72:93:5e:11:71:f2:a5:
ae:e4:1a:2c:7e:9f:5e:bf:11:23:59:b5:4b:d4:67:e6:c7:7a:
42:d6:bf:a6:9f:16:fd:0a:c4:b6:6e:2c:98:60:b8:4b:4d:3e:
71:c3:c1:cd:37:12:3a:16:af:68:ce:54:c4:f3:f4:4c:dc:ab:
83:e7:b0:f5:cb:e4:60:41:5f:ae:e6:fb:18:23:4c:6d:46:12:
dc:ec:b8:65:ac:70:27:d8:7f:f6:b6:e5:52:06:32:e5:95:c2:
83:82:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:33 2025 by rpki-client