Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
File: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json)
Hash identifier: S86dh9g8w2KZiNJLgqPdj8j6W+qrEgaIONIU0wDlIKY=
Subject key identifier: 93:F2:1E:6F:B0:FC:81:C5:F9:6E:13:25:EF:D4:64:72:49:CC:FB:D6
Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
Certificate issuer: /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Certificate serial: 019A71B8CB285D63B3603B41522C9BCB6A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
Manifest number: 0205
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: 8yiJMNKbcrdXwVxSIn2te9T3FlO2L3Kn05Qa79EyC7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cb:28:5d:63:b3:60:3b:41:52:2c:9b:cb:6a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=93f21e6fb0fc81c5f96e1325efd4647249ccfbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:34:87:32:ae:53:4b:81:9e:54:06:c3:47:
1f:a7:72:f9:e5:d4:9d:8e:2c:98:77:2d:b8:4c:84:
98:c6:a1:40:92:4a:b0:e1:96:03:0e:90:0a:45:c8:
7d:68:f3:68:c7:1e:0e:55:a6:0d:e2:08:94:8a:86:
69:7e:30:43:2b:84:d6:78:ee:eb:fa:6b:9f:ea:2c:
f9:f1:06:37:b3:2c:24:66:36:04:d0:cc:00:e4:f6:
17:6c:f0:50:ea:d8:43:23:23:7b:b8:41:41:41:b1:
ac:0d:29:c0:94:fb:84:c7:29:4f:90:5a:16:b5:9d:
36:7e:41:6a:d8:67:ba:dd:d4:77:e0:6b:f7:9e:ad:
26:d7:cc:91:33:fc:33:75:04:64:88:6a:a4:e4:7f:
56:3b:c9:8c:f6:80:7a:ff:65:ac:5b:15:47:9e:60:
b6:ba:7b:79:76:d0:49:16:2b:4f:98:f3:ea:b6:6f:
81:12:6d:f3:16:df:c3:46:14:a6:b5:e9:ab:ba:ab:
fc:44:61:1e:40:ea:dc:93:6d:e5:8e:27:e9:92:98:
58:59:ca:35:12:fe:4e:a6:82:c9:29:2d:45:0e:fe:
e2:76:19:38:ec:44:76:68:78:c8:d2:2d:44:f9:ff:
c8:3e:95:7e:04:24:6a:70:58:77:1e:6a:93:c8:b8:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:1E:6F:B0:FC:81:C5:F9:6E:13:25:EF:D4:64:72:49:CC:FB:D6
X509v3 Authority Key Identifier:
keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:e5:60:09:8f:e1:5f:e0:f9:35:48:91:e7:e8:48:e9:69:
ab:8b:25:f8:4c:3b:bb:9a:30:41:e8:86:24:18:8b:e0:12:44:
03:3c:3d:e8:2c:8b:61:5e:cc:3f:ab:a0:96:43:54:c2:93:c3:
21:10:4a:b6:2d:16:4a:5b:dc:cc:65:f0:5b:38:5f:43:ca:a4:
33:d6:59:0c:15:3f:52:37:25:54:5e:6f:30:46:0c:3c:d2:dd:
09:dd:6a:59:fc:93:92:e4:55:c0:c7:80:73:2c:6c:2a:6b:6c:
9a:36:df:eb:fe:19:0f:82:8e:46:c6:d0:89:4d:89:9d:78:3b:
be:69:b0:16:af:5f:88:c6:f3:58:e5:0b:85:32:86:d8:55:3b:
95:4a:97:25:94:ee:18:af:38:17:55:70:61:1f:1f:dd:ed:8b:
39:a6:18:1f:54:79:50:e1:b4:48:00:2e:cc:68:10:5c:1a:14:
a4:53:c0:bc:1c:a5:ec:ae:a2:74:e2:85:72:16:81:90:06:93:
12:5a:b3:a1:f6:59:c9:38:a1:46:50:b8:df:d1:07:19:13:79:
86:14:19:60:17:5a:83:b2:72:5b:8e:9d:2f:86:12:38:fe:63:
7e:36:a2:b0:e8:29:61:1f:1e:4c:60:26:16:4e:16:25:b9:8e:
a6:a6:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:14 2025 by rpki-client