Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: 9OnG4rk+YDFiCAvSj7K1Sm6aJKq0uID4cMIViMj7x5k=
Subject key identifier: 7E:79:B4:09:6A:28:99:4C:60:C5:F5:C3:72:F6:65:80:92:C3:D0:49
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019A0A12F80FEB79DEE3C37AE7307E11A2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 15E4
Signing time: Wed 22 Oct 2025 04:00:06 +0000
Manifest this update: Wed 22 Oct 2025 04:00:06 +0000
Manifest next update: Thu 23 Oct 2025 04:00:06 +0000
Files and hashes: 1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: ubvVHJdfUnlkv0jEa6AOCV2SQfUhHjUcHFlhhlFOlwQ=)
2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:12:f8:0f:eb:79:de:e3:c3:7a:e7:30:7e:11:a2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Oct 22 04:00:06 2025 GMT
Not After : Oct 23 04:00:06 2025 GMT
Subject: CN=7e79b4096a28994c60c5f5c372f6658092c3d049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:db:29:5a:5f:90:6e:f8:1c:bf:6f:ff:d4:
b3:b9:a8:05:78:70:c5:3e:9c:59:00:9a:77:16:74:
11:cc:4e:d0:ae:f6:93:36:b3:b0:44:aa:ae:89:03:
35:56:11:2b:91:d1:45:43:dc:0d:4d:84:02:c6:1a:
a9:6c:7f:45:1d:18:69:e0:1c:ed:46:33:bc:3d:1c:
99:4f:f3:92:57:30:19:f0:92:9f:37:f9:31:c6:39:
34:77:53:1b:ed:53:1c:71:31:f2:4c:ea:b2:bf:88:
f2:34:0d:6d:9c:c9:f5:0d:64:dd:ee:00:13:f1:73:
24:d6:f7:0a:0e:56:cb:af:9e:36:18:b3:b2:ed:38:
f9:89:96:8e:b4:1c:71:7a:31:12:3d:1f:24:27:ec:
d6:3d:ce:b4:07:fe:9d:58:fc:f4:bb:5c:5b:3c:a2:
0b:81:b4:b9:73:1d:e8:98:bb:3f:fe:c9:77:ef:14:
56:ed:32:ca:51:5a:2d:be:1e:d5:1b:14:c3:b5:33:
82:d1:e8:99:23:dc:19:41:58:78:b2:89:fc:bd:38:
6b:82:0b:13:87:08:fd:ee:c2:d4:c7:0e:88:6a:a0:
eb:3c:9e:f9:42:81:a8:9d:c5:86:d1:8f:65:ce:b8:
9e:13:92:a4:0f:ff:ab:13:c7:f8:1d:37:32:d1:0f:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:B4:09:6A:28:99:4C:60:C5:F5:C3:72:F6:65:80:92:C3:D0:49
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fc:4c:dd:34:a9:9c:c4:32:f4:16:51:7a:23:30:f4:10:af:
2b:2b:dc:c4:63:fb:2e:e7:6d:40:43:77:a4:fb:8b:84:f2:f3:
83:6a:3e:e1:07:6c:a5:56:65:fc:db:60:22:8d:0f:69:7a:01:
97:f0:37:2e:2c:75:af:bb:d2:53:06:53:dd:27:36:f8:88:af:
29:b1:9e:0b:7b:58:a4:b4:85:9c:b0:6e:dd:d0:f7:48:53:1d:
a7:f8:eb:25:ea:9a:d2:be:c3:29:a1:7b:26:2b:ed:56:db:30:
4f:31:fd:2d:d2:b0:c3:b4:b2:a1:90:b3:66:df:8c:8d:59:e8:
38:2c:9e:09:2b:87:90:16:1d:90:ff:21:92:cd:e9:ea:d4:2d:
33:6f:88:6b:b0:55:c9:de:8b:4f:85:17:f8:85:d1:54:ff:9e:
9d:c7:71:cb:0d:0f:37:dc:3f:8d:db:18:ea:30:e7:ae:bb:d7:
a9:ca:c1:5f:13:80:79:de:f5:fa:15:6a:37:c4:57:ef:ea:d7:
51:c8:f8:49:8d:ae:cb:84:49:46:ca:48:80:59:3a:52:0f:da:
25:77:e8:e9:03:15:87:78:31:83:23:1f:41:be:f2:a7:f7:30:
a0:f7:b1:f5:6a:57:f8:2b:de:5e:f7:e4:40:a1:fa:47:5d:08:
eb:2b:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:31:46 2025 by rpki-client