Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File: 8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier: mNXKnS3QSdSx5aFfQizeaFIZoK6whYzU9ciHgHUwWP4=
Subject key identifier: 87:59:DE:89:16:0E:41:A2:F6:0D:42:AC:45:0F:CD:96:7B:1B:81:B6
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial: 019A4F98C47BC47EB94C4734DF1F11834E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:03 +0000
Manifest this update: Tue 04 Nov 2025 16:00:03 +0000
Manifest next update: Wed 05 Nov 2025 16:00:03 +0000
Files and hashes: 1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: yxsswvJLBaD+5qazizAhcNiQjV5g1Y6AsIedlCo/CzU=)
2: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (hash: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c4:7b:c4:7e:b9:4c:47:34:df:1f:11:83:4e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Validity
Not Before: Nov 4 16:00:03 2025 GMT
Not After : Nov 5 16:00:03 2025 GMT
Subject: CN=8759de89160e41a2f60d42ac450fcd967b1b81b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:54:b9:c2:17:77:d9:8c:1d:6a:fe:b8:98:
38:6a:9a:32:1d:ee:f5:69:72:a3:bb:20:59:7a:2c:
94:bc:0f:7a:d3:96:7d:15:b3:fe:91:1f:3d:ea:4e:
95:45:49:0f:d3:83:b2:49:58:8c:d6:75:a9:37:74:
b2:7c:1a:74:c5:21:5e:47:e3:71:b1:97:7b:4f:65:
93:54:4a:bf:24:0e:7c:a2:b1:d4:2c:8f:80:d0:62:
be:4b:9a:31:4a:3a:2a:4f:61:87:67:73:61:73:a4:
85:15:0e:6f:c1:63:44:a0:cd:5d:84:1c:b2:76:e7:
92:6d:b7:a2:e0:6e:55:4b:d2:8c:65:3b:35:d3:7c:
8e:57:6d:9f:c2:e7:33:53:f6:18:c0:38:ac:70:92:
47:5c:02:cb:4a:62:a2:00:16:29:7a:91:33:de:a4:
1f:7e:f2:e1:03:77:1c:4d:6d:f3:b0:4a:16:b3:c8:
36:d4:1c:c7:b0:97:94:78:c1:3b:40:99:98:07:3b:
a5:95:df:4a:6c:c5:79:b2:b8:68:d8:28:43:01:a2:
d1:24:9d:a4:92:ea:b8:cc:6b:f1:7f:07:d4:f2:2b:
f8:f1:0b:a6:3b:7c:01:71:f0:10:7f:02:83:71:17:
05:3d:ae:75:4f:49:f7:91:5d:68:44:db:20:c6:0e:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:59:DE:89:16:0E:41:A2:F6:0D:42:AC:45:0F:CD:96:7B:1B:81:B6
X509v3 Authority Key Identifier:
keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d1:6d:42:d4:56:c0:01:2a:9c:a0:1c:3d:f7:af:66:99:e8:
bc:67:c2:1b:f6:86:26:d4:e3:c1:6f:32:16:0a:b1:c5:15:b1:
98:15:0c:c0:c5:38:11:b8:e7:64:e9:cc:ea:e9:88:de:38:19:
68:c8:ef:85:db:a7:d9:68:96:ce:bf:3a:8f:02:d4:e6:47:b4:
4a:8a:ad:62:0a:15:f1:90:b6:35:6a:56:ea:a6:d7:0a:ee:27:
f8:85:e1:1f:99:91:b2:81:28:69:d1:e2:3e:c1:9b:d8:c4:f7:
a1:77:b6:fb:3a:3a:9a:e8:16:87:51:11:0b:84:19:3a:30:42:
d6:4d:8f:00:c0:0f:91:38:d2:ed:f4:ab:f3:9d:09:ed:24:fa:
a2:9d:14:da:21:30:ba:e0:ed:5d:35:83:59:65:62:30:47:91:
37:e6:0f:04:80:09:33:c4:24:e4:b6:b2:85:07:ff:66:a1:fb:
bb:1d:ac:9c:3f:dd:ee:16:7c:02:19:ba:eb:aa:81:91:26:a2:
e1:30:22:84:64:b2:33:e9:a9:72:d7:f2:b2:62:73:b7:1c:86:
f3:c8:e7:82:30:6e:50:ec:76:2e:6e:2a:e0:88:fd:61:87:11:
60:36:8d:08:7b:da:18:6c:c0:f5:61:f2:e7:37:57:71:50:70:
a5:96:29:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:20 2025 by rpki-client