Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: 6CV76Xd69c+tzNT4dWl3Yjqm4VdCYZcrPdI4RZR4Tt0=
Subject key identifier: E6:63:46:C8:54:D7:B9:8B:88:20:59:A2:3D:AB:21:76:07:41:7F:E9
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 019A2A7A1A5E44ECA4488B0289D6852781DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 123B
Signing time: Tue 28 Oct 2025 11:00:36 +0000
Manifest this update: Tue 28 Oct 2025 11:00:36 +0000
Manifest next update: Wed 29 Oct 2025 11:00:36 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: prPoBKa9gfONv14ky1S7feypvAvP1+jOfhERkbK5WKs=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:1a:5e:44:ec:a4:48:8b:02:89:d6:85:27:81:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Oct 28 11:00:36 2025 GMT
Not After : Oct 29 11:00:36 2025 GMT
Subject: CN=e66346c854d7b98b882059a23dab217607417fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:5f:f6:a1:e5:30:8e:83:b9:1c:a0:a1:a8:
f0:6d:bc:a3:ed:8b:9c:fa:f9:c9:d2:d4:d6:24:90:
8a:0c:ff:2c:0c:fc:f8:bf:38:91:93:29:53:4c:af:
3b:96:7f:8f:4e:0f:b4:dc:55:94:d3:42:c3:06:01:
8a:91:53:73:01:84:e5:0e:b3:35:39:da:d8:78:df:
cd:a9:5c:96:7b:60:6d:c8:8e:5d:3b:6a:d1:e1:d8:
e2:17:fb:28:9f:32:e6:81:34:ea:a0:4a:19:da:27:
3b:36:e9:f8:f6:f8:7b:53:f6:11:18:61:6d:c4:6b:
1f:dc:bd:81:5c:bc:09:4f:76:d2:e6:7a:05:20:ad:
2d:3b:5d:65:0b:5e:3c:dd:d1:d0:20:5c:7e:c6:bb:
48:6a:86:8a:d7:cb:0b:df:51:91:cf:f2:96:80:db:
8e:ca:e7:68:78:5b:c5:c3:22:4f:e3:b4:69:62:6d:
39:e7:75:4a:cb:42:8b:ad:98:99:11:c6:ba:4b:d9:
88:5e:c2:d9:d7:ac:ba:53:ea:34:30:4a:91:ab:31:
9a:28:2d:47:4a:09:a7:b3:78:36:91:b8:35:5e:8b:
a5:b1:74:b5:9f:09:f7:54:6a:4f:72:2a:0c:26:0f:
0a:b2:84:e2:4c:7c:62:e0:49:a4:16:87:29:6c:e6:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:63:46:C8:54:D7:B9:8B:88:20:59:A2:3D:AB:21:76:07:41:7F:E9
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a5:35:91:af:11:90:73:19:68:d8:cc:f2:f0:e1:29:d4:9a:
06:8f:cc:f3:05:40:de:aa:6a:96:9a:a5:ec:dc:36:8f:2a:71:
fa:0c:75:81:66:35:c3:6e:de:35:5f:c3:b9:2f:b8:e9:9a:a2:
c2:97:7e:46:6d:10:51:f4:a3:51:09:71:c6:e8:72:c6:8c:b3:
67:56:00:3a:e5:03:e9:ce:2c:a0:fb:4f:66:ed:af:be:5e:ba:
6f:92:bf:92:1d:e6:0e:6d:74:0e:6d:08:a3:55:05:76:7d:c6:
82:a6:d8:e1:df:6a:fb:15:89:41:bf:46:2e:f6:df:aa:e8:8f:
ff:66:54:c3:17:bf:a1:57:bd:22:32:47:c2:84:f8:53:d2:6f:
61:ac:f4:68:c6:f4:57:83:e7:c8:1b:f0:50:55:9d:0b:0a:05:
ed:9d:d4:dc:89:d0:c6:13:da:f5:44:53:4b:11:d8:3e:f9:c2:
aa:04:11:59:11:01:58:6a:da:4d:8f:5f:58:75:ad:af:72:7c:
4f:8b:6f:7c:b5:97:a9:6f:a7:f0:0b:bb:c5:3f:49:f6:20:98:
dd:36:14:15:93:cb:06:b3:cf:50:c7:35:4e:d8:1e:4f:8a:c2:
9e:8f:9b:14:1e:9d:d8:8a:64:18:98:69:a2:63:e2:dc:d5:28:
36:a0:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:39:47 2025 by rpki-client