Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier: 4M377NcxKKLGFsUsepHUnQ4ENOU9v1+w2PmviWonc6M=
Subject key identifier: 1E:63:F2:0B:EE:D6:9B:BC:D4:82:3B:35:3A:04:E7:01:A9:C6:7E:54
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial: 019A71B8C6B7368D8C092F8EE9DE0EA7C321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number: 1678
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: RWMuA6Rp0gIsSaiFc6veAegigot783nZSxBkw0TcHSU=)
2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c6:b7:36:8d:8c:09:2f:8e:e9:de:0e:a7:c3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=1e63f20beed69bbcd4823b353a04e701a9c67e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:37:f1:72:45:d1:66:d8:a2:35:77:2a:d5:
1e:e2:08:7a:2f:c3:96:0f:6e:15:7c:3b:00:e3:e2:
e6:6b:c5:eb:1a:f2:fa:92:22:05:e8:e8:6f:65:80:
e8:2a:0c:be:41:52:40:98:95:64:8b:d5:24:65:05:
68:55:11:b2:5a:86:44:7b:c1:f6:a5:b9:d9:df:c6:
cd:e1:e7:d0:47:32:d4:b6:39:e1:6c:11:11:f0:43:
fe:8d:87:5d:66:fc:ee:f2:d7:81:bf:3f:9c:38:3b:
7f:70:a5:ba:e4:16:58:c7:b5:87:b0:1a:fd:3e:d1:
54:af:28:62:bf:84:2a:4f:00:3b:cc:b4:c5:5c:f5:
7a:97:32:84:3e:36:f4:2c:31:f2:2c:96:12:74:c2:
5d:1c:b3:45:2e:7a:bc:e7:18:13:68:61:a9:2c:05:
80:c6:2d:bf:d3:cc:c9:88:2c:f0:4f:d0:68:af:7f:
dd:b8:58:20:4e:3e:7b:b5:92:e5:96:7b:6b:6a:9a:
8c:7d:62:65:49:34:cf:4c:18:94:20:b4:87:84:a3:
dd:db:ca:fa:83:63:0d:43:8b:8b:40:52:d6:88:13:
ef:23:0e:3a:b4:e3:5f:0d:65:61:be:0a:a3:12:98:
4a:c0:25:5f:fc:d6:ae:1f:e1:33:ce:af:80:92:23:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:F2:0B:EE:D6:9B:BC:D4:82:3B:35:3A:04:E7:01:A9:C6:7E:54
X509v3 Authority Key Identifier:
keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f8:8c:83:52:ab:54:11:27:2f:53:25:01:0d:f8:21:4f:5e:
7f:0a:af:98:49:49:01:5c:8e:16:e8:9b:18:b6:33:cb:20:4f:
1b:80:e3:66:7a:dc:bb:92:68:bf:dc:24:9e:6a:89:f4:31:c3:
33:2c:d6:b2:97:6d:e1:97:c7:d3:e9:7e:f8:01:f8:39:fd:4a:
0c:a8:7d:72:f1:6c:e5:80:59:e2:db:86:54:8a:34:52:1c:16:
57:7d:15:d3:63:6c:a1:0a:3f:2c:10:dc:22:0f:a0:59:dd:7d:
1f:0f:06:3d:a9:e4:8d:d9:cd:29:f0:95:ae:6c:5e:a9:2d:e8:
a3:ab:38:74:5b:6e:47:63:db:c7:36:7a:02:65:08:ad:a3:9c:
b9:59:0c:f7:0c:1d:98:ed:da:ae:e5:e7:84:1c:0f:fd:29:6b:
42:8d:58:dd:18:3e:ce:b5:6d:de:26:9f:f0:2c:d4:a7:68:0c:
fd:33:e6:90:6f:ef:8a:0e:66:17:48:d4:72:18:8b:65:4d:48:
c7:be:fb:fe:43:78:29:35:e4:72:39:a7:f1:e5:ff:6f:ad:25:
29:f1:e5:fa:a1:b3:b9:1c:5d:98:a0:2e:64:d8:f6:f9:36:21:
5b:92:b7:80:dd:08:7b:bb:68:82:9b:8a:a4:aa:1f:1d:de:25:
d1:a0:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:19 2025 by rpki-client