Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: eH0QrWD2N0txFaGS+DDA65Q95mG6R/M3nounwMb8HZM=
Subject key identifier: D3:EC:84:A9:2B:C1:C1:A9:56:C9:2E:B9:20:B2:AB:F6:7C:DE:D7:37
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019A51198CFC21806E9B153E57B65B756C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 23:00:20 +0000
Manifest this update: Tue 04 Nov 2025 23:00:20 +0000
Manifest next update: Wed 05 Nov 2025 23:00:20 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: fh6oyfuctbVC7s/2tv0UB709h5Zl6S3n4YV+dPrk1rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:8c:fc:21:80:6e:9b:15:3e:57:b6:5b:75:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Nov 4 23:00:20 2025 GMT
Not After : Nov 5 23:00:20 2025 GMT
Subject: CN=d3ec84a92bc1c1a956c92eb920b2abf67cded737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:e1:8a:0d:5a:aa:ee:9c:db:47:34:9a:cb:
67:82:98:1c:d8:ee:fe:c8:69:1a:c5:da:b0:87:87:
b0:51:1a:0b:c9:69:38:5f:72:e1:22:5c:a9:64:2c:
0d:6a:71:ad:8b:ec:b6:25:f4:94:73:f7:5e:30:fe:
43:fa:17:87:df:12:66:df:93:0f:6a:ea:4b:df:44:
4f:9a:ba:62:8e:d5:46:9e:d8:94:1d:77:28:cd:70:
89:ea:69:c5:c9:96:8e:4d:a9:1f:06:4f:c7:92:10:
67:e7:a5:e6:09:51:0f:25:3f:52:28:0e:08:13:f6:
05:e6:8a:b4:3e:03:e2:89:53:f7:ee:fc:71:95:7d:
4e:c6:e6:3c:8d:ae:92:fd:93:8c:e3:13:21:72:fa:
f1:b6:aa:3a:8d:a0:af:10:43:67:07:f2:5d:08:cb:
24:e3:6a:f6:d2:10:d4:5e:d5:b7:99:14:90:97:82:
b1:00:86:f6:57:66:22:6c:7e:a6:2d:a3:ee:f9:ad:
9e:a7:37:a6:83:b0:67:8e:9c:13:90:bb:ba:62:9d:
44:67:8a:74:e0:9b:c0:aa:d6:98:b7:6a:5c:7a:a2:
4d:f2:0e:73:81:d6:23:d8:4c:3d:ed:b0:b3:57:20:
50:9b:71:eb:35:e3:35:67:55:cb:0e:f9:39:97:fa:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:84:A9:2B:C1:C1:A9:56:C9:2E:B9:20:B2:AB:F6:7C:DE:D7:37
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:70:89:96:58:d1:78:d2:b5:32:2f:3c:ca:13:0c:67:19:4b:
a9:cc:81:99:38:67:44:13:30:45:e1:98:7b:04:ee:60:24:39:
9a:cb:a3:63:04:f8:58:be:a5:34:10:de:00:fe:4c:42:ce:c0:
2a:ce:2c:db:6f:82:1c:75:bb:40:8f:75:00:e9:37:0c:cb:df:
a4:c8:38:6d:3f:61:68:c7:5c:70:d3:49:9d:2c:b5:69:94:5e:
b6:f0:a9:2f:2f:59:16:06:30:16:a6:8e:0a:7b:7d:20:cf:83:
75:8b:c8:43:ea:3c:aa:85:00:38:fe:ba:83:01:1a:46:a5:53:
29:5a:58:ad:56:ae:00:71:50:9d:dd:ce:78:86:9b:b6:57:30:
5e:7d:f2:17:66:84:97:6e:40:1c:91:2b:b4:86:cd:dd:b7:d0:
b2:90:34:d9:8f:e9:94:52:7e:b3:54:4f:61:33:f3:43:98:2c:
80:4c:a1:c8:1e:ca:1a:6a:e1:90:49:dd:ea:de:88:76:7e:80:
85:93:2b:04:06:d5:1c:f7:70:d0:77:7e:7c:05:c0:6a:95:08:
68:14:8b:4f:2a:1b:6d:12:a4:9e:6b:33:f1:61:1b:49:dc:80:
ce:f7:ab:61:a7:02:b2:c0:61:65:2b:d6:eb:9e:da:52:21:67:
b6:f6:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:45 2025 by rpki-client