Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: x6/IwOREfXJiGCRaf1D/RBctjmsPhWz2tMYCfc9Fumo=
Subject key identifier: FD:CC:EB:A4:D9:A9:07:AD:41:03:AB:C3:6E:FA:57:A8:78:50:23:68
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 019A71B905433EF023BE8C6A12865DAAB87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: Y5t04PFlylQ72LHpR45gSYHmKnz+tTY68mZNmhO8xVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:05:43:3e:f0:23:be:8c:6a:12:86:5d:aa:b8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=fdcceba4d9a907ad4103abc36efa57a878502368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:e8:3b:ec:7c:8b:55:e4:9e:06:e0:72:0a:
0d:fb:28:4b:59:2c:95:f2:54:23:63:33:9a:0f:c4:
49:02:0b:c5:c1:d4:a9:7f:e5:23:8d:75:74:45:c7:
db:fa:5f:25:17:e6:7c:9c:6b:1a:ef:6d:a1:30:c4:
d9:b4:48:70:c5:3b:0e:5f:ee:c9:ad:fe:87:05:d7:
5c:6d:7a:02:88:7a:f4:69:81:03:2f:17:90:88:4e:
b9:77:15:e0:88:23:c0:cd:3d:f9:cc:77:75:de:f2:
0c:02:be:d9:f0:96:b0:52:ff:60:52:46:e5:91:92:
45:c3:1a:18:59:be:1a:b7:d6:9d:ec:ad:37:02:4d:
39:36:7d:51:d9:6a:54:94:df:e0:f8:58:51:d1:ec:
dc:16:33:22:69:05:77:32:dd:60:1f:7b:4a:23:6b:
51:59:c9:e4:05:ad:f0:a8:ff:9b:2a:db:e0:4f:b5:
cf:1d:a7:9e:7c:f6:f5:1c:b2:0c:e8:53:15:2c:92:
31:0b:70:9d:e2:4f:7c:31:64:e0:c1:d3:7f:96:a1:
f1:30:df:55:0a:e1:61:27:bc:a3:b8:fa:c8:5b:36:
81:6f:b0:81:6a:cb:ed:35:f6:90:a0:3c:bb:4a:a3:
42:64:12:59:2f:d3:c0:25:a5:35:44:14:83:7a:f6:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CC:EB:A4:D9:A9:07:AD:41:03:AB:C3:6E:FA:57:A8:78:50:23:68
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:99:5c:64:3e:bf:9e:52:47:df:2f:dc:3d:ad:3d:90:4c:14:
c0:d7:8e:2d:93:80:fc:cb:66:2f:48:f9:09:df:d7:39:de:6e:
40:cd:39:aa:57:e1:c3:bd:63:ab:ee:83:50:60:67:fc:09:78:
83:c9:2c:cb:87:a9:3a:f3:65:b0:ed:4e:6e:9e:d3:27:46:a7:
d1:c9:23:5e:fc:af:a0:13:51:a1:c5:e5:c2:a7:8f:16:03:7c:
3c:1e:9c:16:0f:94:3a:73:7a:b5:05:09:16:f4:8d:43:e1:c6:
78:71:55:34:ca:9d:68:5c:16:1e:bf:cc:53:bc:99:fd:22:2d:
69:a4:71:d7:94:1d:d0:86:ba:50:ff:70:2a:39:1f:55:5c:4f:
a3:ca:bf:2e:a8:9a:5e:90:82:05:52:10:7e:4f:34:8e:38:da:
3e:c8:c5:de:c4:e9:35:4f:8c:e0:e5:3d:e3:ad:f3:64:69:25:
94:9e:4f:ff:69:74:13:7c:5e:af:5c:2a:1b:c6:89:86:01:52:
2a:8e:cc:cd:71:de:fc:20:c3:8a:85:d7:fd:da:ce:65:ab:96:
3b:b8:1b:9e:e6:0b:83:f5:66:1f:81:ce:96:af:75:e9:6a:16:
53:a9:1d:44:2a:d2:19:32:eb:a7:02:fd:74:fd:84:64:1e:c7:
3a:49:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:06 2025 by rpki-client