Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: SYdtGawleao1ik7eK2WbFOzizHpbyZuCr4elqR/1VO4=
Subject key identifier: 45:CA:FA:A3:2C:87:19:2A:4D:78:32:FA:61:1F:D7:E8:55:5A:B3:26
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 019A71B83E5B7F42281F8B552369F5D571EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: RgKkXH56hI9e2spW98Q8I9QF92SKWI+e3nMIPGg/vko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3e:5b:7f:42:28:1f:8b:55:23:69:f5:d5:71:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=45cafaa32c87192a4d7832fa611fd7e8555ab326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:6a:8a:15:ff:a1:fc:a9:cc:77:2d:f0:af:
7f:dc:23:30:68:eb:e2:06:3c:45:36:0a:95:15:f8:
9a:53:0e:30:9b:05:29:e3:64:6d:df:5b:ef:22:0e:
81:28:93:13:3e:26:dd:24:99:40:7d:9a:cf:d0:56:
8c:58:bd:66:3e:ec:70:0c:fa:8e:c4:da:25:45:7e:
fb:f8:e2:82:f6:11:0e:60:b8:05:bb:b8:ac:38:93:
4c:3a:e9:0b:a7:1e:07:b9:be:de:57:2e:9d:77:b2:
5c:da:22:2d:f6:1f:f3:fc:c1:c7:c2:89:3d:39:53:
d2:e5:1e:61:fa:eb:1d:93:ff:cb:1e:c5:02:8e:e6:
e7:ab:12:78:dd:35:36:c7:79:c4:53:ad:77:a3:47:
f4:c5:20:95:7f:d9:6b:af:e1:ec:86:b5:70:ea:5b:
30:59:b9:96:be:a8:44:36:86:02:1b:9a:5d:0e:8b:
64:ad:d1:1e:8c:4a:25:ce:e4:40:3c:ba:dd:d2:1e:
74:8e:63:a5:7c:ed:a5:01:bb:57:57:0b:c3:ab:98:
5a:67:0e:e0:ed:77:04:9d:59:ab:91:34:12:0c:3b:
88:b4:28:a3:36:8e:cb:24:87:7e:69:6c:4c:96:d2:
2e:7d:a3:6e:64:6c:e4:e8:bd:49:38:ca:d3:92:40:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:FA:A3:2C:87:19:2A:4D:78:32:FA:61:1F:D7:E8:55:5A:B3:26
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:3a:5d:2f:2e:8c:d3:cc:f8:16:54:66:1e:b9:b5:12:e3:
b6:e1:2f:e6:15:c7:c4:39:89:7c:32:91:fc:8d:9c:2a:94:00:
2b:ac:4d:46:48:9a:69:78:24:b5:c4:50:19:50:9e:da:f4:43:
55:b5:48:fe:20:e3:8e:ac:0b:e5:47:d6:ff:a3:38:38:4e:8d:
af:c9:63:25:ef:a9:67:a2:c4:af:90:e8:f6:a5:3f:f2:f0:d6:
35:46:38:cf:15:24:ed:35:f6:38:eb:17:30:58:9f:5b:de:e0:
f8:9e:e1:73:0e:50:cb:96:06:32:20:b1:96:bb:dc:4e:39:d0:
0c:7a:8a:59:17:e8:ff:87:3b:a3:b8:b2:0a:df:ed:92:55:8f:
ed:13:3b:a3:30:13:88:4a:98:6d:50:3b:6c:a5:d2:4a:cb:2e:
41:0c:bc:7e:28:b2:15:2d:37:3a:7f:25:b6:73:1e:ce:c4:6e:
5f:ca:27:a9:d8:9b:da:38:fd:fe:7e:c2:65:c3:56:ae:26:fb:
2e:17:24:74:e6:ba:80:99:df:bd:49:33:a8:20:61:9a:2c:71:
f0:88:1b:a4:39:68:b9:a2:1b:24:b0:da:36:15:cb:28:0b:4e:
4f:76:cb:12:86:27:a9:cb:28:6a:93:1d:33:65:3e:d3:61:5d:
f2:05:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:43 2025 by rpki-client