Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: jCpQkXL9nj9T4V7HHA1nKPE2KVHG4iYGRgN4r65seA8=
Subject key identifier: F8:33:CC:B0:F1:5E:5D:E2:F0:D8:88:CF:E8:71:DD:A3:77:3A:DC:EF
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019A2C31ED265487AB8BC62C84F01988DFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 16FE
Signing time: Tue 28 Oct 2025 19:01:00 +0000
Manifest this update: Tue 28 Oct 2025 19:01:00 +0000
Manifest next update: Wed 29 Oct 2025 19:01:00 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: Hvn0ykZg9xwczWzV/xkb42JlZbBd/eucCA0/dWxqT3A=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:ed:26:54:87:ab:8b:c6:2c:84:f0:19:88:df:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Oct 28 19:01:00 2025 GMT
Not After : Oct 29 19:01:00 2025 GMT
Subject: CN=f833ccb0f15e5de2f0d888cfe871dda3773adcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:62:c9:52:68:97:14:a8:d5:ae:81:82:dd:
ad:6f:2c:03:bf:f1:58:fd:97:53:c6:be:dc:ec:e3:
38:ab:e0:77:7f:3d:f0:b7:ee:dd:a0:5d:32:50:96:
5f:d2:c4:56:d2:45:85:4c:7a:7b:88:ac:b1:bb:5f:
10:ce:a9:53:74:4c:92:22:1c:f3:74:b3:a5:a2:76:
44:c6:de:9a:1d:02:e1:fd:0e:4f:71:34:96:44:9e:
d0:2d:ae:58:af:bc:cc:0c:33:96:6f:fa:a5:5a:48:
8f:c4:74:f2:32:69:32:82:f2:48:1e:fd:65:aa:0e:
f8:ea:43:c8:61:9f:e5:28:02:15:a5:72:bd:93:45:
e3:f8:20:a1:f0:8e:bf:bc:85:ea:42:e0:b2:93:d4:
11:ed:f3:3a:62:82:7d:61:f7:58:de:83:99:73:74:
f5:aa:e6:80:f8:82:c8:d6:0c:d4:6e:eb:83:ca:42:
da:b9:8b:41:67:72:6a:1d:63:31:2d:02:df:da:28:
a1:8b:a2:5c:6a:65:2a:a2:23:df:1e:a1:73:77:f7:
7a:f2:9f:fd:03:c5:e6:70:51:bb:6b:f2:38:51:b6:
71:8a:2d:1e:ed:f7:14:43:34:85:f6:aa:13:5f:f2:
b7:7a:8e:d2:6a:b9:c1:fd:1c:c6:23:69:b0:cb:36:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:CC:B0:F1:5E:5D:E2:F0:D8:88:CF:E8:71:DD:A3:77:3A:DC:EF
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:97:5d:96:9a:da:67:ff:7f:d9:e5:a5:6e:41:bb:bc:5b:da:
d1:a4:8d:de:be:d0:b2:d0:d4:03:1f:d0:b4:f9:ab:fb:f2:2a:
99:be:8b:51:1f:89:d1:a5:2e:45:f1:4b:52:33:07:a1:e2:8f:
7a:3e:aa:7a:15:8c:85:d9:57:ca:03:c7:dd:76:d7:1a:e3:db:
6d:9e:cd:22:4b:47:7b:b7:79:28:20:60:88:de:6e:c3:4d:a1:
ed:ba:4c:32:ff:da:d3:66:ad:ed:9d:d6:bc:fa:5a:0f:99:b3:
dc:76:38:09:82:b3:68:4f:79:b0:25:14:f8:d6:1e:90:6d:9d:
a0:d0:87:5e:8a:33:f4:e2:9d:ce:89:76:03:da:47:a3:2f:a8:
e2:fa:69:34:d5:c8:9e:23:45:10:7b:95:ed:66:a5:8c:08:6d:
54:8a:2b:70:16:e2:b4:cb:d9:6a:24:a7:cf:67:53:74:4f:28:
29:63:f5:03:6f:fd:67:b8:82:c3:8f:e1:cd:36:a3:70:14:46:
8b:e2:44:33:f0:b5:8c:f2:64:be:7d:31:b9:5d:38:0e:6f:81:
3c:45:57:46:eb:a1:62:9b:7a:a4:b1:fe:1d:b9:e1:5a:3a:11:
13:0f:0b:3d:ec:cb:03:f1:36:9e:6a:88:06:1a:78:9b:cd:27:
d0:3d:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:22:44 2025 by rpki-client