Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier: JZk5fn7bHLm5AmXTFept/BJlsuMaYhXxM3QYxFpRKPk=
Subject key identifier: 8F:84:C1:8A:C0:DB:27:F3:57:5B:2D:FD:CD:A2:AD:00:B7:D8:CE:85
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial: 019A047EC52B8B06370A5FB6B0192F71868B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number: 1679
Signing time: Tue 21 Oct 2025 02:00:08 +0000
Manifest this update: Tue 21 Oct 2025 02:00:08 +0000
Manifest next update: Wed 22 Oct 2025 02:00:08 +0000
Files and hashes: 1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=)
2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: HZG9y8hflsFSQgvyb26HUx+Lfj0IFpRhF0PUOzhZeF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7e:c5:2b:8b:06:37:0a:5f:b6:b0:19:2f:71:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Validity
Not Before: Oct 21 02:00:08 2025 GMT
Not After : Oct 22 02:00:08 2025 GMT
Subject: CN=8f84c18ac0db27f3575b2dfdcda2ad00b7d8ce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:a3:f6:f5:82:65:73:e8:b8:3d:97:67:ff:
b5:b5:1e:40:c8:b0:70:56:a3:67:3e:44:30:e0:1c:
42:21:51:79:28:3f:bd:cb:06:7c:83:e4:2f:ec:1d:
b7:f4:a9:03:4a:ff:79:4a:d1:72:8b:e2:6d:87:78:
1b:c8:2f:74:d5:12:65:4a:3a:ea:5d:c2:7e:9d:6a:
3b:6b:33:2a:30:34:31:7e:de:03:09:87:a0:41:47:
15:7a:7b:62:31:b6:9a:1f:82:b4:03:20:18:54:e8:
dd:cb:63:41:b6:76:aa:a4:7e:71:74:78:60:6f:69:
f2:64:56:e4:0f:e2:4e:89:61:46:2d:51:0e:8e:a9:
3b:5c:ec:d8:93:2c:cd:6a:4c:c7:48:4e:0f:49:0f:
d4:80:26:4e:5f:ff:24:a4:ce:c9:04:0c:e0:f9:01:
10:5e:33:f5:6d:9c:39:4f:af:57:45:3d:e3:ad:8e:
13:0e:80:66:ad:33:c7:f6:64:4f:46:19:ac:ee:22:
fe:95:39:7f:83:7c:09:3b:5b:7f:c6:78:46:14:d0:
76:ed:0e:b7:c4:bb:9c:da:52:af:3d:58:d9:bd:a1:
51:b1:aa:2d:55:78:c1:86:2c:4b:7e:0f:17:2a:53:
45:5e:55:69:4d:aa:ea:e4:9f:f1:cc:bd:ca:bf:6b:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:C1:8A:C0:DB:27:F3:57:5B:2D:FD:CD:A2:AD:00:B7:D8:CE:85
X509v3 Authority Key Identifier:
keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:64:57:82:39:22:e0:1b:08:ec:e9:7d:0b:72:3d:45:c3:31:
41:c8:fa:a7:51:87:4e:8a:74:a8:e2:14:b8:3a:4e:cc:00:03:
3b:25:78:34:3a:cf:80:a4:40:88:88:89:de:e9:cb:a0:1b:6c:
4b:3b:05:87:e7:34:7e:41:9a:b5:50:6c:38:9c:61:cf:3f:85:
d5:76:f5:b3:a6:d3:19:69:4b:68:f3:c6:a8:e6:11:04:92:53:
eb:7e:9d:2a:66:0b:8e:f5:cb:ad:a7:10:87:f2:58:48:dd:4c:
fc:ea:bc:11:e5:af:fa:48:c9:85:01:e0:8c:e5:f3:5d:74:21:
23:95:47:2e:4c:f2:13:d3:0c:42:e9:27:0e:20:3a:9d:c4:90:
a2:c8:60:91:0a:a1:66:78:6f:d5:5d:d5:9d:40:ea:32:0a:04:
73:37:22:aa:d9:13:7f:22:f2:1f:83:9c:b5:08:49:4f:b9:dd:
07:3b:99:c8:e6:8d:f6:69:18:c7:12:5f:b0:f9:3d:b8:bd:8d:
e8:c2:d3:14:78:4f:b6:c4:30:be:31:6f:30:fd:51:da:e5:28:
15:18:fb:2c:f9:df:12:7a:9b:3b:d7:ed:7e:d7:74:81:af:4e:
ae:5d:52:15:f2:61:fd:fb:d1:79:78:c7:0e:03:c8:ed:18:b5:
09:2e:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:25:45 2025 by rpki-client