Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier: cjeBXcdyoGPRio+ilt8dv6xqWG2e7ZrxU5NFsWNgv+A=
Subject key identifier: 13:81:36:72:8A:D8:0D:07:66:18:DE:44:00:8C:5F:44:5A:48:AC:DD
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 019A71B88C02B3B1E6CAC0DF4FE155887D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: X5rksZ50IyjnCd/gjQ+weDy020FPvAwqkNZSfXeSol4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8c:02:b3:b1:e6:ca:c0:df:4f:e1:55:88:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=138136728ad80d076618de44008c5f445a48acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:8f:99:91:72:1e:15:54:5b:8e:e6:a8:dd:
74:e1:bb:40:1e:99:e8:11:70:7d:dc:d7:c9:2a:3d:
a8:4b:9a:3f:f9:2f:8b:78:5d:61:a5:a8:60:8b:91:
bc:a4:ea:66:32:99:7b:4c:55:da:3b:ff:d2:5d:de:
25:61:29:30:58:81:41:95:4d:3f:32:0a:4b:e3:bd:
2a:24:13:c1:04:1d:58:5a:69:6d:0a:1e:37:c3:66:
06:bf:ca:d9:97:c6:d3:5d:ac:a3:a9:a3:46:5b:cf:
f6:a6:44:78:09:ef:ad:0b:69:8f:f0:63:55:93:77:
1c:00:13:1a:e7:ee:e6:2e:bc:5c:9c:87:13:16:93:
d5:6a:ca:5b:36:24:9a:e1:26:4e:62:7b:64:37:9e:
8d:1b:28:99:c3:56:a8:36:cb:92:5e:e6:06:8f:a7:
6f:5b:f2:85:ef:ac:8a:82:ff:91:c9:b8:51:dc:48:
93:79:0d:ea:9c:78:f5:64:fc:32:a2:24:4b:bd:74:
33:61:f0:87:6f:34:6e:63:b7:1d:54:28:46:ef:9b:
4e:79:eb:e1:77:43:42:6a:84:ab:f9:78:6d:f5:31:
fb:07:71:fa:ff:6f:51:f6:a6:7f:bc:7a:3e:a6:c9:
c8:00:f8:81:05:0d:9f:91:e3:e1:cb:8e:b2:25:01:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:81:36:72:8A:D8:0D:07:66:18:DE:44:00:8C:5F:44:5A:48:AC:DD
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a0:4c:ea:f7:fe:d3:37:60:0e:6d:20:4f:2e:b8:52:df:8a:
a2:db:08:5f:7b:16:d0:1b:47:87:b6:f3:0f:24:fb:98:e9:b4:
ec:ed:57:bc:b8:1c:a9:66:07:c3:5d:9b:b9:c1:d2:70:d1:e0:
47:2c:e0:e4:20:1d:bd:4d:1f:e5:91:f1:c4:20:2f:27:9e:d7:
7d:00:b0:ee:82:34:bd:2c:83:41:ee:56:65:1d:a6:62:9d:7f:
9a:d1:da:02:83:cb:4b:06:23:c3:1f:48:36:af:c0:3e:67:61:
cb:98:07:e7:0e:fd:30:05:e4:8c:02:e5:0a:36:c6:1d:b6:0a:
a0:7c:ea:7f:c8:e2:06:83:b4:c3:00:58:f8:0b:72:41:8e:bf:
54:c2:27:57:cc:27:1a:71:67:72:19:2d:e9:9a:a8:d1:1c:5e:
40:11:17:da:57:ac:1a:67:74:b4:0b:02:63:b5:01:6e:b9:e7:
9e:60:de:83:2b:7c:bb:81:da:13:38:2d:0a:ae:47:40:02:d8:
03:53:dd:76:04:1a:26:37:a5:4b:56:28:9c:a3:11:56:a8:8e:
34:b2:be:b6:c4:f7:9f:0f:f5:7e:1a:99:b7:25:66:5b:f8:f1:
31:74:1e:3d:9e:c7:bd:23:ce:c8:df:4a:23:0a:02:15:b8:5e:
03:98:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:07 2025 by rpki-client