Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: O03UpUSap6ZMbU4vvMU085xqaOHQ0hkL74s0GxjEctQ=
Subject key identifier: 5E:EE:73:5C:59:B2:91:2C:F4:FA:0E:0E:19:F4:97:39:47:A0:E5:53
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 019A706E4CBD66597368FCE3DB570D84EE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 0608
Signing time: Tue 11 Nov 2025 01:01:07 +0000
Manifest this update: Tue 11 Nov 2025 01:01:07 +0000
Manifest next update: Wed 12 Nov 2025 01:01:07 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: 9g2eSrMNOxLW6Q/xFoS3qbt9nfbHq0swvK0OYxfmPAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:4c:bd:66:59:73:68:fc:e3:db:57:0d:84:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Nov 11 01:01:07 2025 GMT
Not After : Nov 12 01:01:07 2025 GMT
Subject: CN=5eee735c59b2912cf4fa0e0e19f4973947a0e553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:3f:ce:48:5b:71:a0:85:ae:0b:65:ae:94:
53:ba:ff:6a:73:b4:1a:24:70:0e:57:0f:12:00:f9:
dd:78:34:2c:8c:ed:c0:92:30:ee:89:3f:e1:46:a4:
f2:bb:51:1b:f5:ce:e0:ac:f6:4e:92:c7:0f:d1:3a:
6a:44:39:fd:52:60:90:a2:6d:cd:9b:c6:ee:3b:3f:
08:5b:d4:be:7b:02:1c:33:b8:13:23:d3:71:71:bf:
4e:cb:16:50:4f:07:38:45:cd:2d:d7:08:f6:9b:b3:
bd:d2:70:1f:55:d4:e1:58:50:f8:fe:2f:ed:33:d6:
6a:14:29:b5:a6:ec:05:26:44:7c:6c:47:93:7b:83:
16:83:95:b0:66:0e:bf:0f:a3:17:ca:a4:20:47:82:
26:dd:db:c4:69:0e:7b:d6:4d:1a:8a:fb:27:ed:7c:
26:a3:a3:2d:b7:ce:24:1f:a9:49:71:53:d3:08:7a:
63:fe:2b:3c:15:87:74:cd:1d:f5:cd:82:e1:b4:73:
0a:2b:89:86:e2:f0:33:d9:93:fe:20:08:c7:b7:64:
5d:c1:28:d9:7d:e0:05:1b:92:b6:70:02:8f:89:1f:
1f:2e:e5:ad:00:3a:cf:3c:5c:d3:bd:8d:0b:af:cc:
05:6b:ef:2d:73:ef:3f:83:f0:94:0e:11:26:12:66:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EE:73:5C:59:B2:91:2C:F4:FA:0E:0E:19:F4:97:39:47:A0:E5:53
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b5:32:d3:55:ec:bf:b1:a4:86:c9:26:90:0a:86:a4:d3:a6:
ec:73:e6:bd:56:ce:a9:b7:0d:7b:26:ee:43:b0:8a:12:9d:81:
8a:da:d1:76:b8:eb:45:e0:89:5f:2f:c3:99:67:26:95:c6:50:
ff:b9:c3:3d:99:83:41:74:c5:6f:5c:05:b6:21:e3:97:19:25:
76:f1:ce:d1:b4:d3:27:b4:96:81:67:09:69:4d:15:97:eb:55:
b5:c5:8e:3e:98:50:2f:a7:77:f9:c7:86:95:51:8c:ae:2e:b1:
8e:a1:87:c0:2f:29:70:12:07:c0:df:fc:8d:58:79:b4:6a:ab:
46:bd:35:99:2f:91:e3:43:b7:b4:c9:ad:26:fa:a2:27:b9:7b:
86:c8:11:f5:a9:58:7f:ae:52:0d:23:2e:8b:c4:53:08:b9:16:
00:14:d6:70:c8:3e:42:19:bb:f5:fb:67:c1:27:79:fb:74:8d:
fe:32:c9:c6:b6:0f:c9:40:f0:60:e9:05:30:e3:43:d4:02:d9:
aa:e3:d7:39:85:86:f9:c2:2a:77:24:30:e3:f6:8f:a1:97:38:
2a:10:7e:2e:28:98:88:c1:58:92:77:34:76:c2:80:fe:77:7e:
50:84:40:6e:9d:dc:6a:6a:5f:56:aa:d8:04:c2:06:f0:5d:94:
6f:f1:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:19 2025 by rpki-client