Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier: JzuJ4CDBSNdDXGjtkXEqIa5tUS8TZD/CdgotRkZCZmk=
Subject key identifier: 14:CE:86:41:2A:D2:E3:66:1D:7B:AA:A3:9D:8A:32:2E:AA:2F:8B:20
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 019A7112C44919EF2133312535F6BF156847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number: 16E8
Signing time: Tue 11 Nov 2025 04:00:46 +0000
Manifest this update: Tue 11 Nov 2025 04:00:46 +0000
Manifest next update: Wed 12 Nov 2025 04:00:46 +0000
Files and hashes: 1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=)
2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: dqv7UGmnvSKwilVo1ztT0f+i+kytwT/4ISQQlIboggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c4:49:19:ef:21:33:31:25:35:f6:bf:15:68:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Nov 11 04:00:46 2025 GMT
Not After : Nov 12 04:00:46 2025 GMT
Subject: CN=14ce86412ad2e3661d7baaa39d8a322eaa2f8b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:c1:b1:33:97:1e:56:9c:27:8e:c4:85:d0:
ea:f3:8d:e0:a6:c9:e0:91:49:21:cf:29:8b:b6:ff:
d3:b6:0c:54:a3:f4:bd:b9:dd:7c:db:d2:17:1c:3a:
ea:28:ef:91:ea:dd:37:53:9d:94:9a:27:8b:70:c6:
bd:a8:cf:71:80:76:68:8b:3e:dd:27:a4:78:f4:ff:
5f:3f:94:6d:fe:7c:dd:2b:5d:b1:83:4e:7e:1f:78:
09:6a:f8:02:b4:2d:2e:ef:0f:57:1a:0d:39:92:80:
53:75:29:1d:6e:9c:e0:9f:42:82:45:3a:61:4f:67:
10:0a:cc:e7:66:bf:da:5c:ac:16:7b:8e:9a:55:cc:
0e:8a:2e:b5:44:62:11:49:e5:cf:38:b4:c1:05:ae:
30:a9:8a:de:99:95:d5:6b:dc:e9:13:34:12:7c:64:
91:60:51:4d:8c:05:e8:c7:8c:68:1a:29:75:b2:b8:
8c:17:56:a5:34:ea:a1:49:88:14:21:b9:e7:07:2b:
02:ec:0b:9b:7d:f4:35:95:87:36:1b:28:dd:21:f6:
84:28:75:7f:3e:44:96:96:e0:fa:6d:cc:63:51:2e:
5a:7b:84:bd:e9:d2:7a:22:30:1d:4d:08:27:7c:e7:
d5:94:0c:a1:4b:dd:1b:a4:d8:2f:3b:d3:05:4b:32:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:86:41:2A:D2:E3:66:1D:7B:AA:A3:9D:8A:32:2E:AA:2F:8B:20
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:87:ff:36:15:9c:ab:70:8b:b5:00:b3:08:41:cb:07:11:9a:
61:57:d5:7e:03:13:1a:82:53:fb:19:c9:31:8b:21:a1:e4:89:
5c:59:d5:59:04:f7:62:0b:09:8d:81:d8:4a:c7:82:c0:53:3d:
0f:4d:28:d3:bd:ed:e2:b1:37:c5:eb:1c:34:c3:51:af:c1:01:
90:14:0d:9f:44:a5:71:eb:90:8d:d6:14:ea:d5:30:de:93:20:
19:02:0c:8f:94:86:24:54:40:a4:96:63:d0:05:84:27:0e:c4:
36:fa:2c:3c:65:23:58:1b:67:cd:66:e9:95:56:ff:fc:24:58:
b9:3c:ad:62:13:5a:2c:f3:75:49:49:6f:86:ce:bb:4a:0b:7d:
df:df:63:f3:7b:25:cb:78:af:7c:e0:32:aa:2a:0c:57:fc:49:
6f:a9:91:e6:68:46:f5:dc:41:ab:b5:54:5a:dc:6a:1c:40:22:
c9:5a:f3:85:f5:45:3c:57:21:f8:e7:57:9f:b2:02:3d:29:bf:
69:26:8e:b4:42:e5:93:be:da:93:76:df:f7:12:e1:3b:f4:39:
b1:0f:f0:b2:b3:c0:6a:73:4b:34:ef:18:91:68:01:82:84:6f:
bc:4c:51:2a:65:2f:f0:00:7a:ca:76:c2:b4:77:e7:2d:3e:e3:
93:14:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:58 2025 by rpki-client