Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: 1u8Yz05L7l0PYyulAl73RO9fj6powJ2BKEvOdeD9y+Q=
Subject key identifier: DE:E5:F7:8F:B9:BD:C1:46:B0:6E:4E:69:B8:6A:94:EB:DD:D4:98:46
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 019A72263F4D795CF1FC95B48F42032A3181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: Y8SfzoATtbSxrvubByP0Wt6NIsbUbbXjHh5DZBI0Bqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3f:4d:79:5c:f1:fc:95:b4:8f:42:03:2a:31:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=dee5f78fb9bdc146b06e4e69b86a94ebddd49846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:b8:a9:ac:b9:38:47:12:07:45:fb:d0:1e:
62:3a:ac:af:0f:a1:34:5f:c9:27:60:57:35:de:3e:
e7:7b:6a:6d:62:e9:5d:2f:1b:35:47:15:3b:9f:6a:
a6:d1:be:0d:66:52:a0:25:bf:40:a1:95:97:27:ca:
f3:ad:a4:ca:eb:a7:0b:a5:bf:22:bc:de:de:5d:84:
25:2d:ee:38:e9:4b:25:5d:fe:7f:4f:a0:92:be:d6:
29:e9:4d:f5:fe:7b:ab:75:68:83:9e:90:bf:c0:c4:
c0:3b:fd:2b:9e:01:dd:94:b8:c0:5c:a5:ee:b0:f0:
8e:36:35:d3:72:57:e4:eb:e7:ed:33:18:22:70:b1:
da:cd:7f:9a:d9:24:56:1f:21:b7:25:61:6c:04:62:
11:16:7c:7a:ed:5c:3e:5b:29:77:69:be:52:97:26:
5b:74:40:f8:2a:07:05:e6:e6:5a:73:d2:79:4a:57:
ab:8a:84:97:63:7b:bb:f3:98:1c:6c:f9:e8:4d:31:
05:75:54:dd:96:24:a1:3d:25:fc:91:da:47:ca:f1:
e3:f3:13:ac:58:24:8b:e2:f6:41:82:4d:4f:ae:fd:
0f:af:b0:10:74:db:9a:e3:68:74:e2:83:d7:f0:53:
fa:63:2a:5a:15:8d:e8:31:04:6e:db:1a:3e:7f:fe:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E5:F7:8F:B9:BD:C1:46:B0:6E:4E:69:B8:6A:94:EB:DD:D4:98:46
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:53:36:4e:c9:f7:f9:b7:9a:ff:54:09:a7:48:b4:0c:ca:fa:
c4:58:39:25:f5:8a:b8:1c:5a:ad:58:e7:52:ef:69:a6:35:4f:
d6:70:86:fe:5a:34:db:6d:f0:40:b9:f4:ab:51:e3:24:50:38:
ee:d4:c6:30:0c:45:3f:5f:b2:14:cf:d9:a2:0f:73:3f:63:31:
4b:7c:93:22:cc:66:dc:5e:35:69:48:61:06:83:99:48:c6:fb:
25:26:f6:3b:63:28:e2:fc:bb:77:c6:04:1d:74:77:d5:ba:1a:
88:a0:9f:a3:aa:eb:98:a8:f5:65:07:e7:7c:62:37:e0:a3:d4:
e1:dc:8a:93:b1:36:84:08:73:b1:57:af:2e:64:5a:35:78:46:
d9:3d:d8:c3:74:e7:0a:6a:46:0b:ba:c4:28:14:6a:8c:c4:0e:
13:c5:ee:09:d1:27:3a:41:8e:1b:d2:10:f2:14:a8:f8:59:0b:
49:b3:7c:6d:a2:9c:77:6b:c3:12:77:d4:c4:60:ba:03:6e:73:
87:1e:77:10:bd:0e:fe:a3:df:64:74:7b:a1:08:7e:a5:ef:73:
33:09:ed:2f:e4:a5:05:3a:45:88:cd:f7:07:67:ef:e7:e9:e5:
5d:a8:5a:42:14:fc:50:f9:85:6e:6c:11:c5:02:b1:54:72:7b:
9d:58:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:56:09 2025 by rpki-client