Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: Rta4LsQsXIU7QTLQKWeuQa2Lh6Co4mcdo8qiF55IKoc=
Subject key identifier: 70:73:78:A6:BE:24:79:E4:C4:8D:EC:7A:2C:2F:6F:8D:65:B8:4A:5B
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019A714990E16F52674780DBBC41BAB80D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0B9E
Signing time: Tue 11 Nov 2025 05:00:37 +0000
Manifest this update: Tue 11 Nov 2025 05:00:37 +0000
Manifest next update: Wed 12 Nov 2025 05:00:37 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: 5IPcIo4flpCiKunlwM8FKebrZpRI+/4eRk8KiyEjGbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:90:e1:6f:52:67:47:80:db:bc:41:ba:b8:0d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Nov 11 05:00:37 2025 GMT
Not After : Nov 12 05:00:37 2025 GMT
Subject: CN=707378a6be2479e4c48dec7a2c2f6f8d65b84a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:d4:e0:ac:ce:19:4a:ed:0a:a7:4f:2a:fd:
8c:dd:7c:d2:32:6e:a1:31:ad:b5:12:55:35:92:c5:
8c:97:53:b9:bb:60:ed:a0:ee:5d:35:9b:25:24:b7:
1b:c2:46:8d:5d:89:85:7a:1b:f4:72:63:81:74:23:
75:33:f7:77:6a:97:c7:75:8f:6d:32:92:89:f0:a1:
9b:c4:e1:02:5a:92:7f:5f:82:0c:11:c2:09:0f:89:
f7:b7:af:1e:1f:55:09:14:2d:8a:5d:4d:c6:8d:4e:
25:1b:c1:fe:64:83:e5:05:4a:b4:00:90:99:9a:d2:
d6:61:3c:d6:ce:9b:ab:b4:07:2b:8b:39:34:05:58:
ae:9d:48:ef:bf:9e:7b:19:44:76:77:42:5c:cf:56:
68:ea:9e:5d:7a:e5:52:6c:a9:dd:81:8a:1a:bb:c3:
8a:5e:e2:e8:8a:bd:6f:86:a9:51:7f:f3:ef:7f:81:
7e:e2:d4:dc:11:ad:91:17:23:d3:08:30:fb:19:cf:
1d:15:ae:93:e4:e2:28:06:48:6f:72:90:64:a3:9a:
cd:e0:e3:9d:af:50:06:c5:ea:c4:76:ba:99:90:b4:
eb:c8:3e:52:23:b3:53:8c:e5:a2:52:b3:1c:de:75:
26:6f:1d:24:79:b6:32:f8:51:08:37:01:28:11:63:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:78:A6:BE:24:79:E4:C4:8D:EC:7A:2C:2F:6F:8D:65:B8:4A:5B
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fa:aa:4e:bb:73:4d:ab:48:7a:ff:1d:5b:fe:a6:48:93:b9:
8e:4c:f8:c1:ef:dd:3b:ff:e7:b6:23:ae:71:44:a7:78:b4:cd:
73:2d:1c:b9:46:e5:27:b4:25:40:3d:d9:b9:24:41:1f:2d:80:
f9:54:08:df:ab:ee:3e:bb:dc:42:bb:ab:ff:73:1f:08:87:da:
89:1d:fc:ae:0a:94:f1:55:e6:ef:b6:a4:b5:ea:a1:a3:36:40:
18:aa:34:b6:dd:2f:ec:4f:8b:09:06:a3:48:82:35:05:ac:6a:
c1:f7:80:08:04:4a:dd:56:fa:cb:54:62:92:cd:d1:12:3f:b0:
6d:1c:a2:c4:1f:af:27:fd:cd:2c:0c:7e:96:a9:d0:71:7f:b0:
8e:8d:c1:69:d1:eb:6f:6c:32:5e:83:27:3c:8a:25:97:ee:69:
16:72:35:d6:19:a1:a1:7e:b8:fc:3e:87:83:71:73:33:6b:60:
cb:be:1a:10:45:3d:9f:71:39:b5:8a:93:0c:ce:2c:2b:60:74:
ab:0f:51:c5:b6:7c:9a:63:56:0d:b0:2f:7e:0a:b0:ec:51:6c:
1a:24:04:17:6e:80:7d:57:e6:32:a6:ad:55:9b:c9:60:b7:66:
3a:09:8d:6a:72:b6:60:5e:e7:9d:03:72:f7:7d:5b:49:7f:19:
0e:70:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:48 2025 by rpki-client