Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: l/jQhBbtpSsNfUHdHt2jRY3LjkI/dSFUXI8k83w+7vA=
Subject key identifier: 81:14:BF:1A:06:F4:EC:C1:23:A0:CB:37:11:FA:26:55:68:F2:E3:45
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019A72CA16EB1C773E822C294CBF475A55E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: rvJFo+NeK7c2zg0bSTkE0gUm/X2vzMlJA2P16BIyNws=)
2: G6K_DWhWU68de4ypb82fcRNbq1c.roa (hash: Gtd0kHs/yyYgjTN6WOR+S2KJ5GiQ71eqM+ooEqk1CdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:16:eb:1c:77:3e:82:2c:29:4c:bf:47:5a:55:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=8114bf1a06f4ecc123a0cb3711fa265568f2e345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:c9:b2:e3:53:27:a6:e7:4b:a1:6d:90:d8:
5e:c1:38:0b:bc:91:c6:6a:c5:5e:36:f3:26:3e:4a:
03:fb:7f:27:6b:ff:b6:e1:66:ca:c6:04:38:81:66:
65:84:45:d5:95:87:d0:23:33:88:99:94:15:0a:ae:
55:6c:f7:1e:e3:2b:14:4d:99:b7:07:4c:8c:93:e9:
84:ce:cb:8b:aa:af:06:a0:bb:04:b4:d8:cf:88:97:
ef:25:45:b5:fc:fa:93:56:ef:26:21:9d:46:68:1f:
de:6f:ec:4d:d3:e9:96:5a:d9:e6:63:e2:7a:5a:84:
1e:1b:ea:31:92:d6:51:e9:1c:25:18:e8:a1:75:17:
00:5e:66:24:c7:1e:d5:83:7a:55:ed:0c:cb:61:62:
2b:f9:ae:7b:72:1b:c8:df:16:bd:a7:46:9d:aa:7c:
92:52:ca:77:b8:1e:59:90:d8:02:6a:ad:9b:98:bd:
49:58:8e:0a:23:97:12:db:ca:54:5e:55:eb:bb:bb:
76:bc:55:20:28:22:cc:e6:99:46:65:7a:f6:5c:30:
6e:6e:9d:b2:27:ce:94:c8:21:a0:32:bb:88:13:0f:
0d:a7:a5:ec:eb:e1:f5:fe:65:2e:7d:2f:12:5b:0a:
2c:5d:03:62:2e:77:a5:1b:0f:26:5c:52:27:54:a1:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:14:BF:1A:06:F4:EC:C1:23:A0:CB:37:11:FA:26:55:68:F2:E3:45
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:07:73:d5:58:84:eb:17:b2:bb:a7:58:95:9b:f7:e4:61:6a:
18:46:67:d7:06:0d:5f:75:3e:bb:33:92:30:00:21:ab:67:15:
f3:80:aa:a8:ef:51:2d:28:4f:c7:5e:b2:5f:31:79:a1:b7:e1:
ad:17:28:d4:90:c7:32:72:c8:c2:4f:fe:63:6a:1e:0b:e5:32:
04:67:b6:53:5c:89:16:24:03:ab:d2:da:11:ae:25:81:6a:d1:
6b:b9:5d:26:9d:1f:0b:42:60:e2:3c:2e:50:77:6b:c9:91:fc:
39:1b:1e:6f:3b:24:f2:89:90:71:42:28:5b:2d:2a:62:01:3a:
c5:6c:5d:96:f9:cf:a5:7a:4a:ec:d3:47:e1:37:ac:b1:a3:40:
b2:49:2d:8a:69:9a:5b:55:8d:42:e1:0a:0c:49:a1:f8:15:21:
2d:9b:2f:3d:42:53:13:59:3a:71:08:3c:a9:29:e2:1b:6e:61:
1f:11:76:30:9f:77:4e:e0:aa:af:f7:dd:6b:a9:30:4a:a8:a5:
64:9a:96:16:e9:7b:0a:f3:da:c3:47:60:71:b0:91:8f:e4:52:
c1:4d:fc:fb:a9:f2:5b:de:48:2c:7a:ff:cc:a0:11:9c:c7:d0:
55:6e:43:76:af:c9:8a:8a:c0:15:2e:7f:4f:73:1c:ed:57:75:
b4:7c:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:33 2025 by rpki-client