Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: 4ZyxhOXKerOzwu9NLu5jfP/abxSfWlSYU5lsGXtD/9I=
Subject key identifier: F4:30:3E:9F:71:D7:3B:4C:B6:C6:F6:24:DC:11:5D:0A:2B:FA:F5:31
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 019A4D3D3EC516354BA50082761EAFD8C980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 161E
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: tdlu5QEAtpsjRRd5H8Vdoa32IPMsYMyU/caCrN8iCWE=)
2: m0jbiHxRktR_kE-i3D3woRX2ZsI.roa (hash: fSOohTJ+oYWg/YD/VykP7b8U7lIYd4B0MDv4mOCNuT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3e:c5:16:35:4b:a5:00:82:76:1e:af:d8:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=f4303e9f71d73b4cb6c6f624dc115d0a2bfaf531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:19:65:ab:c3:92:22:b3:d8:9e:79:7a:ab:
84:1c:23:81:80:bb:04:ea:be:ef:5a:bf:d8:dc:4c:
5f:e0:fc:3a:52:26:39:3d:02:c8:3a:62:59:d1:e9:
22:0c:62:b8:b5:93:42:e6:0b:ff:6c:06:a6:03:1a:
50:44:ab:b5:90:04:1b:0f:a7:58:e9:aa:9d:f5:c6:
d4:e0:b3:64:6e:27:df:bc:a2:0f:1d:44:3f:32:76:
35:a2:58:7a:00:6e:4c:e7:58:7b:4a:e9:8e:b8:bb:
90:90:50:37:e6:27:1f:91:18:92:f1:3b:a1:00:df:
6d:83:94:1c:64:b1:f9:cb:a4:d6:6c:1b:10:06:31:
d5:3c:01:95:96:b5:b2:93:d1:2c:93:25:a8:7b:dc:
de:b7:87:21:fa:4c:01:f4:a7:c1:61:4b:18:a6:59:
93:16:f8:ef:19:05:1f:75:d2:1a:03:04:ae:a7:52:
61:fe:da:49:9c:61:be:9a:95:cf:a6:3a:59:a3:50:
e0:6e:ab:6d:80:d1:e5:db:5a:47:40:ac:aa:85:42:
0c:75:3c:fd:69:02:89:70:9e:a3:e0:64:cf:b8:67:
83:b2:04:75:9f:05:c9:94:ef:1a:97:15:34:5b:87:
0d:49:7f:d6:14:91:9c:9e:c0:91:2c:c6:f8:ff:c0:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:3E:9F:71:D7:3B:4C:B6:C6:F6:24:DC:11:5D:0A:2B:FA:F5:31
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:65:25:1d:e9:31:a7:74:30:b2:6e:8f:c1:bf:74:ba:ec:29:
ba:51:57:00:4e:bc:52:51:64:85:ed:1d:dd:ee:17:4a:ff:0d:
7c:6b:aa:c7:11:db:54:df:9b:32:46:23:41:25:b9:ff:a6:0c:
28:fd:5b:17:bb:34:2f:0e:a2:e4:8f:c5:2a:34:bb:38:e1:a5:
62:cc:8c:2d:a1:8a:ee:39:d1:b9:c4:b9:5c:b6:53:03:0a:ba:
76:16:2b:6b:fc:61:da:a4:f8:53:8c:a8:34:2a:f7:14:e5:ad:
b2:7f:b2:cd:72:99:0c:b2:3f:20:fd:a1:2f:6a:38:f3:dd:a2:
3f:3f:d1:7e:d3:42:58:dd:25:d2:d6:36:f2:da:1b:f9:5b:0a:
a4:03:03:55:97:ba:40:05:0d:0f:1f:9b:0f:bd:fa:ff:88:f9:
b9:19:89:32:36:64:9f:b0:15:30:f9:72:5c:8f:50:95:c1:55:
ae:26:59:a1:fe:cd:77:97:35:27:3c:8d:8f:fb:8f:0d:1e:52:
4f:61:73:6a:28:5a:40:1a:48:09:f9:39:9d:d7:fc:62:2f:5d:
a1:e9:78:db:df:35:02:90:00:12:4f:76:3f:d1:72:e5:8f:90:
10:8b:f8:27:03:31:f5:11:c2:de:73:09:c1:a6:f4:ae:b1:1d:
3c:38:71:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:46 2025 by rpki-client