Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: Kb4YXJJkQlxOCzNtZe4F+ZKS818GsTAJclP6zaVQoAU=
Subject key identifier: 97:0B:78:53:96:6B:9B:BD:DE:34:9E:75:63:21:90:CE:28:F5:0D:68
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 019A7225F76F703BB8CADB7CF4920940B247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 0576
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: ieUTphJ86w+yEnKE7qgbTPBaQeZCTMtIEjWsN6KezF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f7:6f:70:3b:b8:ca:db:7c:f4:92:09:40:b2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=970b7853966b9bbdde349e75632190ce28f50d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4d:52:dd:73:74:9e:5a:cf:7e:05:b3:bd:f9:
74:6b:3c:11:85:5a:8e:9f:ce:79:da:da:0f:48:16:
f0:56:1f:5f:0e:7b:6f:c3:fc:7a:66:93:de:55:96:
ce:91:a0:8f:3e:b4:e4:8f:9a:c6:d6:9c:78:99:79:
59:6d:5f:49:20:47:08:f1:a0:ba:7a:e7:22:3c:79:
fd:d8:95:77:73:17:c1:72:f9:14:2d:62:01:ae:57:
42:7f:af:2a:7c:d3:42:66:da:53:81:8e:72:0d:69:
3c:0f:48:5d:97:e8:e2:cb:48:88:1d:99:11:05:c6:
43:87:e8:9b:a7:87:b6:e8:62:b4:de:bd:60:25:c2:
a6:d0:d1:c3:e8:12:a7:e2:ce:56:23:84:08:e1:ca:
f3:ae:6c:48:32:f5:91:16:63:54:38:3c:ef:ef:56:
d2:24:30:e9:0d:f9:32:75:db:b7:b9:35:a9:d0:b9:
d9:e5:fd:9f:1c:ef:9b:7e:07:2e:5c:05:bc:e4:2c:
47:55:57:2b:17:ca:21:2b:c2:5c:55:74:96:24:af:
27:2f:86:77:bf:42:73:02:bf:28:50:b2:24:ba:f9:
7a:ac:1c:e0:c8:50:79:2a:fe:ca:94:48:9d:a8:8f:
56:ea:df:4a:48:06:3c:67:87:6d:f6:47:0a:19:b4:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0B:78:53:96:6B:9B:BD:DE:34:9E:75:63:21:90:CE:28:F5:0D:68
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3a:de:82:00:a3:a5:06:b8:c6:df:16:c1:ad:f3:9e:da:4d:
ca:e4:bf:83:5b:4c:5e:6b:30:ac:0a:6d:8f:2e:8b:b4:a0:f6:
23:58:0f:bd:ef:e4:1d:6e:72:c7:61:4c:08:6c:d0:f2:f8:36:
fb:d1:fb:72:2f:91:f5:d6:07:04:24:f3:05:84:51:26:f9:54:
61:24:b4:84:11:6d:45:5e:8d:f1:2c:29:2f:a6:a5:bd:73:d1:
42:9a:7c:e5:f2:a3:a8:94:2c:72:72:12:30:3a:73:d4:f0:7c:
46:b8:fd:26:26:6f:0d:a8:64:73:9b:38:5f:36:3a:55:89:07:
5e:33:cf:75:ad:58:7e:78:55:52:62:16:8b:81:0d:54:34:89:
7b:05:52:fe:51:a4:c0:70:fa:a8:fd:58:2b:f6:98:da:76:3e:
b6:68:48:44:d1:f6:17:d2:31:26:31:b8:63:12:0f:28:9f:cf:
0a:03:af:14:92:8c:64:61:2f:a8:35:fa:3f:44:b6:4e:78:60:
83:b4:56:d8:65:bc:1c:22:4a:98:3d:2b:18:ac:97:fa:b0:9b:
13:0c:16:eb:46:ec:fa:d8:dd:1c:5c:d8:9d:df:bf:58:bd:bf:
22:df:69:22:52:72:a4:a0:53:7e:f9:ef:4d:81:25:02:fb:0e:
5f:f2:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:52 2025 by rpki-client