Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: qQtWj66wKg8qZlTHyxV723uvsuxwatj7m11ssegVovk=
Subject key identifier: EF:0B:A9:CE:A8:02:80:36:27:03:92:F4:21:95:1F:26:EA:5F:E2:26
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019A71EE71AB79080E6FB333D4D055AB93A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: xScqjBoGPNv/eqpknHsW0i7+ekAL+UdRe7ePK7VEg2U=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:71:ab:79:08:0e:6f:b3:33:d4:d0:55:ab:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=ef0ba9cea8028036270392f421951f26ea5fe226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:e1:67:c5:77:5b:04:83:3d:a5:ce:bb:0a:
d8:4e:de:a7:34:0e:df:39:5e:c6:76:af:92:91:bb:
da:02:fe:3e:3b:f7:04:70:2b:9d:26:4e:a5:48:79:
73:1b:5e:1b:9c:4c:fd:7c:5f:b8:8f:e9:89:ac:24:
e8:74:29:26:d8:dc:59:b7:74:89:ff:4a:0c:62:2d:
0e:cd:49:24:49:88:fd:5d:84:d8:68:87:a9:c9:d8:
54:07:cf:84:3e:6e:71:e3:f2:8a:4f:9b:58:8c:e9:
21:9a:cd:99:04:91:16:6c:28:5f:a6:61:e2:7e:5c:
bc:09:e5:39:24:64:5e:1e:de:14:a9:85:cc:7d:e2:
b6:3c:8c:f6:22:3a:1a:00:b0:ff:44:66:ae:64:bc:
a0:79:a9:3c:eb:d1:c2:c3:82:e3:a4:94:b6:fa:1c:
5f:d0:7b:43:b1:20:53:d0:b1:9b:f4:e2:cd:82:3c:
58:38:29:58:2e:34:79:93:79:ff:87:b7:2f:c9:6b:
0d:a2:74:9b:4e:b6:89:b4:e1:42:7a:ab:48:9b:ae:
15:9c:d5:12:0d:30:e2:de:a0:46:e8:4e:f8:69:df:
b9:23:24:92:a2:dc:48:41:61:d6:3d:c6:f3:0b:ec:
1f:c0:e7:06:d5:43:84:07:6f:f6:f5:16:cd:b3:08:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0B:A9:CE:A8:02:80:36:27:03:92:F4:21:95:1F:26:EA:5F:E2:26
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:14:50:f0:f8:ec:1b:cc:23:10:4c:88:36:bc:2e:fc:da:03:
52:6e:ac:86:a6:af:d5:4a:7a:2f:cd:be:5c:b9:73:34:e6:f6:
3a:17:3e:dd:cc:78:f0:47:50:23:31:fa:6b:bb:96:2c:51:e3:
0d:28:89:d1:d7:9b:18:e8:71:16:90:92:08:ce:af:6c:c8:e6:
75:35:62:e0:a1:c5:71:2a:1a:29:21:4e:1b:20:0d:dc:d5:9a:
83:bd:86:c7:3a:d3:48:cb:9f:04:0c:e9:26:49:c4:c6:d2:73:
57:e0:79:46:d7:40:f0:0c:c6:50:dd:ed:99:60:5c:8e:1a:85:
7b:13:0a:fc:36:88:e6:69:15:29:f6:27:80:8c:26:65:a3:78:
92:f8:c1:d7:bd:59:b7:fa:0b:cc:db:26:31:b1:2a:9a:6b:96:
5e:8f:1c:a4:40:2c:e5:81:5f:bc:91:8a:cb:1f:ca:0e:3a:79:
b2:76:66:f3:f9:8d:60:c4:8b:ae:dc:fb:4d:39:70:81:0b:f8:
8e:f8:ff:99:2f:a4:f4:8e:81:a1:01:cf:13:e0:5d:0b:af:8a:
a1:4e:3f:3d:91:80:5e:33:7e:88:2f:58:58:ed:25:ea:63:76:
66:5e:2c:db:f0:80:c0:ec:84:f4:50:40:cb:1e:e4:f1:98:ba:
c4:d9:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:20 2025 by rpki-client