Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: THpKKpkXqJfJBTNi0mbLTWHFof0WJn2MIE2VPF4zFlk=
Subject key identifier: AB:97:21:02:1F:79:71:3A:14:AC:FB:54:B4:4F:B2:0E:45:6B:33:DD
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019A1FF6282316D901D87F0272E370198E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 10:00:16 +0000
Manifest this update: Sun 26 Oct 2025 10:00:16 +0000
Manifest next update: Mon 27 Oct 2025 10:00:16 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: qFegr09GTd3mV1ahKb2Px5TPiHBZt0QRtAJDsRmKaOs=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:28:23:16:d9:01:d8:7f:02:72:e3:70:19:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Oct 26 10:00:16 2025 GMT
Not After : Oct 27 10:00:16 2025 GMT
Subject: CN=ab9721021f79713a14acfb54b44fb20e456b33dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:42:29:22:c6:ec:d4:8b:b4:3b:41:ae:c1:
42:27:9f:e2:66:3f:b8:26:76:49:97:98:88:cf:c7:
51:2a:f6:a2:63:52:f1:cc:42:fb:24:81:15:4a:fc:
fa:42:fd:c7:65:c7:4a:71:62:73:e2:23:54:e5:4e:
4a:ab:8b:23:21:81:29:df:ee:ca:0a:a2:14:a3:70:
69:e3:9d:7f:da:2d:27:31:55:11:f5:94:bd:ab:df:
a5:2f:7e:4c:19:51:39:33:8a:d7:b4:5f:bf:a4:f4:
46:4b:7f:f8:11:b8:30:69:77:b0:70:09:52:3c:05:
78:d9:22:8f:62:cc:1c:5e:7d:d9:52:47:a0:a9:7f:
73:8a:e3:ba:df:d8:33:c5:48:d8:4a:1b:87:f9:ee:
b5:07:91:d8:e5:73:c6:ea:72:15:06:f7:81:1b:9a:
16:b5:57:18:91:a7:55:97:fa:3f:ad:c3:bd:87:a2:
06:f6:a7:cc:5a:8c:a5:93:dd:46:0a:54:37:3c:e3:
23:d6:8c:f0:f3:28:42:f1:85:8d:fb:0e:a9:85:e9:
cd:55:c5:9d:6c:79:93:86:b6:32:26:c5:29:a0:f1:
23:8d:21:b6:0d:8e:20:5b:49:d4:1f:28:e0:24:b2:
99:93:ad:d5:5f:8f:8d:8c:3d:ba:0f:fb:53:82:72:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:97:21:02:1F:79:71:3A:14:AC:FB:54:B4:4F:B2:0E:45:6B:33:DD
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:0f:c7:28:a1:0e:fc:d6:14:f5:b1:6b:79:e4:1e:79:2b:
c1:76:c1:80:e0:0b:af:68:ef:87:1b:28:d4:63:f8:2b:dd:80:
b5:2f:63:5d:5d:f0:cb:96:a8:8e:65:88:26:1a:f0:7e:f5:af:
df:11:80:5b:de:cc:9a:ec:80:c9:94:fe:34:b5:09:1b:1f:06:
09:e2:b5:2a:c3:a9:85:b8:53:0e:af:88:56:26:2b:29:dc:7d:
50:24:de:24:48:82:b5:7e:48:39:e5:c4:fc:bd:a1:a5:ff:c3:
66:36:b8:59:d2:55:b9:1d:84:25:d3:9b:52:d5:5f:63:b6:82:
46:92:56:0b:90:b4:a7:e2:9b:3e:64:f3:17:a5:53:fa:a3:27:
f9:69:54:ae:4d:25:88:1a:3d:38:fb:b2:3a:bc:75:18:18:44:
7e:bf:74:88:c1:27:44:39:29:e7:b8:94:1b:97:b5:41:28:ed:
65:3c:3d:d6:b8:3d:f0:15:d4:94:8d:9e:06:ed:95:57:52:3a:
e5:0c:93:a7:0d:ce:ba:4f:00:7a:07:41:fb:e1:83:61:ce:aa:
39:74:73:02:2b:0b:d2:09:bd:32:23:22:95:cb:d6:f1:a2:6c:
01:17:91:6a:09:e6:bd:ab:8e:2d:fc:81:0f:8f:15:61:53:3c:
6d:c8:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:06:18 2025 by rpki-client