Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json)
Hash identifier: /ZTddOW//BaGY8HmTozcZQiPAiNYDKWv+GeropWNR2M=
Subject key identifier: 73:D0:4B:AF:C0:50:41:C1:84:BB:71:A0:09:47:86:A7:77:F9:57:79
Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426
Certificate serial: 019A71B8114D285F88FEA1C2D28AB2BA67BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
Manifest number: 0230
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: UF2QZtWoiMCtELVc0AIee79rgtP4tO0Y/tP63tCbTzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:11:4d:28:5f:88:fe:a1:c2:d2:8a:b2:ba:67:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=73d04bafc05041c184bb71a0094786a777f95779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:0e:36:9b:4e:14:de:32:12:a2:6b:72:9c:
51:96:93:21:f3:9f:2d:f9:3d:14:64:ef:6c:f6:6e:
a1:09:a5:fb:a0:d1:d9:db:ba:1e:3c:7c:c1:6a:a1:
8c:bd:c6:e4:91:c4:84:7a:64:37:9e:4f:02:5b:db:
69:99:ec:64:cf:a6:fd:90:d9:e4:79:16:da:4a:38:
0e:39:bd:56:b0:84:00:92:9b:c9:44:bd:a1:5c:9c:
77:cb:d3:40:28:f9:19:1f:9a:c7:81:f1:66:76:69:
a3:cd:e9:7e:47:c6:fd:57:98:dc:05:b4:03:92:de:
00:d5:6f:cc:bb:20:c2:f6:04:28:e7:c2:37:a0:95:
33:dd:6e:7c:0e:ae:f9:7b:26:0a:e9:cb:9b:66:a9:
f1:86:a4:ca:4d:0f:21:ee:ae:be:dd:92:a7:73:27:
0a:5f:65:39:95:a6:57:b8:f4:65:94:4c:bb:6e:81:
b8:22:9c:e5:0c:c6:9c:9b:95:f3:7b:66:ea:6a:63:
b9:66:f8:3a:84:c2:aa:dd:18:df:c7:cd:34:a5:05:
16:50:c4:e5:df:b9:d1:a6:bb:07:53:b6:43:1d:05:
97:4c:7d:6e:41:f9:08:af:6a:be:0f:e8:02:d8:4a:
81:91:66:27:9f:a9:69:73:a8:a4:ef:1a:46:4f:d7:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D0:4B:AF:C0:50:41:C1:84:BB:71:A0:09:47:86:A7:77:F9:57:79
X509v3 Authority Key Identifier:
keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2d:48:d1:f5:2e:6e:17:27:17:6f:84:5e:6d:02:1f:2a:9a:
80:a1:c6:df:2b:c3:37:a6:46:dd:98:ce:cf:49:cb:f4:19:2f:
5e:5a:e1:2d:c4:e8:40:9c:35:d9:55:13:a1:48:7a:19:54:bf:
9b:4b:2f:16:2c:90:44:c0:1f:84:03:c9:25:94:a4:f4:49:1d:
a3:4c:40:80:4a:e2:f8:7e:74:55:55:c9:a7:fc:5e:4b:b0:4b:
db:fc:a4:6a:ad:e7:17:9a:db:64:a5:e7:96:28:86:eb:60:50:
51:d6:8c:cf:57:a6:92:a7:7d:81:fe:f3:d0:69:4a:ff:92:11:
85:28:94:00:a3:ef:2b:23:22:b2:35:ef:13:99:c9:8e:0d:e7:
b0:d0:77:aa:5e:94:d0:5e:a9:bf:76:ff:fb:b0:d1:63:04:8b:
27:54:5b:60:86:d8:d3:e6:e3:99:b5:d4:95:56:8e:71:01:fd:
95:10:f0:ad:58:d8:3e:ec:ce:f6:b7:1e:77:76:c5:ba:a5:ff:
78:1c:d7:64:a6:98:41:2d:37:3b:52:4f:ad:6d:ae:df:2f:c5:
5e:e6:29:35:ab:5d:22:41:46:99:83:88:09:34:5c:f2:28:94:
f6:92:c1:e5:31:2c:ca:19:64:6c:c3:73:fb:8c:46:25:0d:fa:
26:71:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:24 2025 by rpki-client