Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: 2pZWfCdLH6tgVHjfbOg1G3RZMYimOMTJYBljTuTvt6k=
Subject key identifier: 68:93:DA:BB:BD:22:70:51:11:93:20:EC:44:B2:BF:44:39:E4:E7:8A
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 019A72263E0107468EBF4C7309D02CEF6283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: kEemgjsRmpE5GGIARZY6IyiMG3NZ9e0OszpF1RgESnQ=)
2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3e:01:07:46:8e:bf:4c:73:09:d0:2c:ef:62:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=6893dabbbd227051119320ec44b2bf4439e4e78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:7e:29:d9:32:70:55:66:62:91:9d:de:eb:
be:b7:d4:ce:22:3a:6a:a1:aa:e8:e9:4f:53:51:10:
e1:59:9a:ab:0e:d7:99:a4:72:f2:6b:9a:0b:1d:52:
68:a3:d5:53:68:2e:1b:5e:fe:10:11:8e:9e:de:48:
38:bc:67:80:0f:63:92:e1:d5:eb:7a:07:4d:b1:db:
6b:f9:04:56:f1:e4:91:a9:02:4b:54:c7:60:4d:97:
00:66:bc:bb:f2:2a:c9:52:fa:fa:a6:b6:12:4d:08:
23:fc:4f:c2:11:6c:35:25:6b:68:65:d0:7f:5e:74:
41:ce:61:c8:8f:8b:60:de:ea:87:8b:59:e6:87:68:
cd:6f:22:15:cf:ee:94:de:ae:73:49:b9:9b:fe:f3:
69:d3:3d:75:7c:6c:42:45:71:71:05:c7:cf:db:e3:
4a:e1:97:5f:8e:80:14:1e:b8:ed:63:3b:74:a1:69:
86:e5:a9:b2:a3:13:4d:8d:44:db:16:2f:6d:c5:6c:
c4:f2:e1:17:2e:74:66:b9:77:4d:78:4c:bf:b7:24:
e2:53:ff:2c:7c:c8:e6:b4:8e:a6:d1:6d:f0:49:3b:
6a:82:a2:3d:21:fa:e9:c0:e6:8b:a9:ee:68:e5:4a:
4c:eb:9d:03:a6:67:e8:40:29:92:78:6f:5a:11:ab:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:DA:BB:BD:22:70:51:11:93:20:EC:44:B2:BF:44:39:E4:E7:8A
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:a8:16:78:c1:2f:33:ad:41:81:ec:4a:d6:47:02:8a:38:
cb:b2:7c:eb:32:64:35:ec:26:ea:eb:9e:52:27:33:f8:49:7d:
c4:30:26:c8:a7:76:47:89:70:9e:a3:39:c2:bd:64:b6:ce:87:
5e:23:1e:5a:ea:42:67:3b:ab:9c:8b:42:82:a5:32:38:03:aa:
84:70:78:10:74:ae:3c:20:7c:38:cc:20:cf:5d:45:21:29:bb:
18:b5:21:95:00:bf:d4:09:5c:de:62:bd:82:12:2d:cd:22:59:
af:90:4d:51:0b:24:b8:87:7c:b4:a1:de:08:ee:44:60:fe:2b:
f6:0a:df:29:e0:77:cc:a7:73:e9:ad:cd:39:e7:58:eb:63:b8:
d0:3f:24:1b:4f:8a:80:2d:b1:10:64:84:32:6e:e8:90:a4:85:
6f:cb:7d:68:36:ff:37:79:e3:0b:bc:21:fa:35:8e:6c:14:84:
6b:08:fe:e2:12:49:e3:ee:d1:1c:5b:1c:30:50:52:1e:d9:ea:
c8:a6:8c:33:6c:26:fd:ad:8e:2c:9c:41:51:3a:b9:ff:d8:c2:
82:94:fb:ff:21:2b:39:df:ad:1d:2b:62:cc:86:56:43:69:d8:
c5:72:e1:a9:d3:da:c1:5c:13:2d:f5:98:2a:4b:c8:18:2b:9c:
91:9f:9f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:15 2025 by rpki-client