Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: QC2zxBTx1CULm+O8/xe6o+DjxS5dmmzAjJUX/WuEuz0=
Subject key identifier: F7:F3:8A:50:98:0E:FF:B1:CC:A0:26:C5:4D:A8:DB:A6:C4:F2:6A:2C
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019A7112ADB3F03B751E5629DFF2A831F182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 11A0
Signing time: Tue 11 Nov 2025 04:00:40 +0000
Manifest this update: Tue 11 Nov 2025 04:00:40 +0000
Manifest next update: Wed 12 Nov 2025 04:00:40 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: ZJXLulIBxMXwOAP3ZnVqnEMfILkS+h2OwhYL4maddjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ad:b3:f0:3b:75:1e:56:29:df:f2:a8:31:f1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Nov 11 04:00:40 2025 GMT
Not After : Nov 12 04:00:40 2025 GMT
Subject: CN=f7f38a50980effb1cca026c54da8dba6c4f26a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:92:f1:6f:38:29:10:26:9c:83:c2:6d:f8:
84:78:32:10:9e:01:ef:6f:40:7d:71:83:80:a7:a8:
13:26:ab:ee:af:79:f4:3b:99:1b:1b:ca:0a:c1:ef:
92:23:19:23:72:3b:4c:5d:f0:f5:eb:77:e4:32:7f:
4a:17:20:18:c0:28:75:49:23:ac:34:0e:8f:39:99:
e4:64:1f:db:6e:c4:e5:fc:b0:15:fd:80:66:80:92:
f2:60:ee:8f:c2:08:7d:64:17:60:ce:af:85:14:1e:
93:0a:99:0a:12:a0:75:03:6a:91:4e:79:1e:00:d0:
f7:35:17:fb:5b:c7:9e:e5:39:aa:18:9e:86:6f:55:
1d:29:5f:23:68:f5:03:ff:55:44:d5:ef:64:92:7a:
27:b9:41:46:38:c3:57:c9:8e:69:c3:18:b2:af:98:
39:02:10:67:1b:16:85:00:bc:86:62:89:52:90:4b:
56:18:4c:64:bc:34:92:d3:00:f5:81:e3:9e:d3:32:
92:11:63:81:92:56:a5:47:fd:f8:e5:11:54:bc:90:
a0:7b:e7:af:e6:65:92:c2:3d:29:01:85:d3:c9:49:
a9:96:5d:07:8b:7b:b7:e1:b7:78:6b:b8:20:ab:a9:
57:b2:fc:2b:3d:37:e1:ae:a8:f5:1c:42:39:39:5e:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:8A:50:98:0E:FF:B1:CC:A0:26:C5:4D:A8:DB:A6:C4:F2:6A:2C
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c4:82:7e:f3:28:ce:97:03:54:28:22:16:f1:7f:55:fb:a9:
80:45:cf:ec:e6:e0:60:01:c4:b6:8f:77:08:c5:e2:95:e6:82:
8c:eb:44:da:15:e8:7d:96:46:da:86:a1:6d:21:cf:43:2e:da:
71:13:47:36:aa:e3:8e:fc:cb:37:5e:e9:82:99:05:5d:ce:2e:
be:2b:b4:0c:a1:8e:08:24:ba:44:56:f3:32:66:24:31:3e:ab:
f0:c3:a0:67:24:d6:a6:5d:e0:55:3b:ae:e0:98:c1:31:1f:64:
1f:ef:e0:be:97:b3:7a:40:3f:7b:e5:b3:3f:5c:51:0c:46:45:
1a:93:2f:a4:9d:b2:a8:b2:86:81:bf:d1:b2:fe:c0:fd:2e:c5:
63:34:77:f0:30:37:0f:86:8a:f3:a1:85:74:c8:1e:fc:b4:e3:
36:a6:2d:a0:bb:ef:25:ea:22:7a:0f:e5:9a:5b:92:6b:83:be:
88:e5:b2:08:1b:67:3b:47:0a:b6:c7:f9:02:67:ad:0a:f7:ce:
1d:1e:da:de:56:3b:05:15:b7:fc:be:70:9e:f6:d3:e3:77:23:
c6:26:f1:04:34:00:8e:de:fc:f0:b0:88:f3:16:c4:b2:de:c2:
59:83:40:6d:97:40:57:43:91:47:0e:38:1a:44:f2:0b:8f:b7:
a6:38:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:33 2025 by rpki-client