Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: CMGRCFC1bktVJQQUvN+5lc2x4yYbrA6Ar75WUqNFllw=
Subject key identifier: B5:70:E1:F4:87:87:71:15:E2:0C:E4:E8:2F:C8:E8:87:22:62:63:BA
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019A73A727CCCE52BDD9CE55BFFEE31EB86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 1456
Signing time: Tue 11 Nov 2025 16:02:05 +0000
Manifest this update: Tue 11 Nov 2025 16:02:05 +0000
Manifest next update: Wed 12 Nov 2025 16:02:05 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: X2wCiTWpJZiz0du9cqZb/nTdsICaxfCZjyKMRrtkHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:27:cc:ce:52:bd:d9:ce:55:bf:fe:e3:1e:b8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Nov 11 16:02:05 2025 GMT
Not After : Nov 12 16:02:05 2025 GMT
Subject: CN=b570e1f487877115e20ce4e82fc8e887226263ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:c7:30:cf:bc:bc:65:e1:ec:03:36:e7:26:
fb:4c:fc:7e:ae:53:cd:cf:20:b4:05:f5:cb:a7:84:
1d:14:a0:ca:8f:d3:38:0b:e9:ed:46:af:cb:d7:7c:
71:83:d0:21:da:77:44:4b:e3:d1:5e:1b:09:af:f0:
48:f3:37:8b:22:c2:7a:2a:df:67:a0:26:75:0f:16:
aa:6c:25:0d:9a:60:66:e1:a3:93:8e:e7:ad:1a:9f:
84:95:1f:19:ed:85:d9:14:b7:f1:00:14:70:6e:9a:
a5:40:54:63:12:64:3e:34:1e:6e:87:4b:7f:a6:68:
f2:0e:c9:49:0f:24:68:73:4b:5f:70:f8:fa:31:2c:
9c:48:85:fa:e9:0a:ad:b7:fc:cf:b4:17:48:13:21:
58:76:50:e1:74:5d:93:e9:2f:70:fc:f7:37:5d:b8:
43:58:4e:43:1f:fe:f0:a5:59:89:cb:b9:e0:f2:c0:
25:7d:ed:b3:a2:86:6c:2b:19:bf:20:20:c8:93:e2:
b1:6b:bf:27:19:d7:49:aa:64:02:53:31:5d:92:bb:
05:63:07:4b:57:e0:8e:b9:c0:e2:88:1a:85:3e:ed:
5e:65:23:88:7b:1f:e7:7d:f4:d4:3d:a6:bf:2c:9a:
e4:68:d7:48:0a:25:a0:5e:a0:8d:1a:05:34:14:93:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:70:E1:F4:87:87:71:15:E2:0C:E4:E8:2F:C8:E8:87:22:62:63:BA
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:75:74:85:a7:6f:fb:17:d6:a4:34:77:51:38:9a:63:08:32:
8e:e7:5c:ba:db:87:b1:78:ff:a1:12:7a:44:ff:46:c1:e0:2f:
e3:84:33:9f:9a:30:03:f6:a1:60:de:13:1d:15:03:88:d7:fc:
a4:6d:6d:52:8e:81:1f:19:43:84:f6:28:7e:0a:c2:53:68:4d:
5f:d6:cc:42:9c:b6:cb:f0:ce:3d:4d:07:20:82:a4:82:12:1c:
d5:97:da:53:ea:b3:61:fc:31:6d:c7:28:20:c2:cb:ec:05:33:
88:4e:eb:0b:3a:e3:64:e5:75:20:b6:06:5f:fa:33:22:b3:4a:
93:aa:c9:e7:2a:d3:9c:b8:e3:d7:49:e5:87:98:68:cb:41:ab:
8c:66:57:be:ed:09:45:70:0c:6f:49:48:fe:d6:ff:1c:35:6a:
46:95:bb:4a:96:09:65:76:c1:8b:bd:78:00:ab:79:73:fd:99:
22:5e:fc:5b:96:67:67:23:ac:14:6a:89:7c:e7:6e:d8:de:41:
3e:cd:b2:4d:68:7a:14:e6:dd:13:ed:40:60:6a:49:b2:1d:ec:
bf:57:1f:17:af:6d:82:64:b9:ad:b2:95:a3:c7:48:58:d0:d7:
97:a2:4f:24:3d:6d:dd:d3:ba:fd:96:75:19:5a:6f:ac:64:fc:
a3:d5:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:52 2025 by rpki-client