Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: dHk6fhNk7Spiubde0RYAbU5vXgV5CvT0shyTQkI2iS0=
Subject key identifier: 09:B3:00:70:72:99:61:79:4A:34:97:31:BD:C4:7D:F5:35:F1:B8:9E
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 019A71B8437256A8522B5003A0BD401770DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: TDpmXcNtEdtcth/mdoyCSypD+nZMwQjiWPv4YzqF7aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:43:72:56:a8:52:2b:50:03:a0:bd:40:17:70:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=09b30070729961794a349731bdc47df535f1b89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:e0:17:3c:e0:37:f6:25:d8:9e:56:bb:62:
f1:e0:e8:9a:f9:6e:0a:f8:cc:fb:cf:e0:c5:aa:dc:
a4:15:47:3d:b8:59:47:71:fd:ac:74:b1:0e:be:5c:
07:b2:52:a3:ae:4b:ee:12:3b:f3:4f:f8:10:aa:3a:
44:bc:85:3e:00:34:4f:37:35:65:0d:7d:fc:db:eb:
7a:cd:2c:08:2f:64:c8:50:c5:2d:3a:10:99:95:f3:
98:e9:46:5a:87:a6:fb:f0:89:66:92:5c:6f:c3:bb:
4e:a8:22:46:d7:1a:5e:33:a8:85:56:93:bb:16:33:
30:48:28:09:e8:ed:83:69:30:9a:6b:1f:1b:63:e0:
65:cc:0d:a4:17:f1:d8:43:27:90:e0:5d:f0:d5:7f:
a7:fa:cc:94:ed:0c:d7:09:57:68:03:31:a9:e7:f8:
61:c0:39:8e:e2:02:c3:bb:b0:7a:1f:c5:f9:d9:4b:
b1:4a:aa:65:6a:bf:f2:89:8a:de:53:6c:ff:26:99:
d5:54:60:d9:34:61:2a:51:fd:e2:be:53:bf:92:56:
26:f3:0b:20:6f:21:9c:55:77:f3:86:dc:ef:19:14:
58:29:16:88:18:16:c3:6e:a7:7c:13:39:ed:28:70:
a6:25:a1:60:c3:38:a3:93:cc:30:82:81:4f:ec:6e:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:00:70:72:99:61:79:4A:34:97:31:BD:C4:7D:F5:35:F1:B8:9E
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1a:97:a2:36:ae:ec:8f:c8:d0:4e:08:3b:8a:8d:c4:c7:cb:
eb:c9:de:bf:78:18:2b:4f:22:92:cc:67:e3:18:b6:d5:2b:7f:
4c:b3:ed:8c:d5:0f:25:73:c1:02:ae:69:a5:d7:f6:75:6d:e8:
ae:0e:15:92:85:7c:bb:50:db:5b:38:0d:25:7a:15:d6:c7:ed:
18:cf:40:a1:a0:c3:f1:b6:94:3f:a1:80:58:41:bd:3c:1f:80:
71:5d:82:23:a4:71:c7:37:74:8c:ae:0b:80:9c:ae:e1:ed:db:
48:f7:27:f6:b5:59:2b:4b:dd:df:83:2c:06:43:ba:8f:7d:f2:
a6:10:05:1a:c1:a4:e3:26:68:27:00:c9:c5:b6:cf:82:ba:3f:
ef:14:9c:1a:67:bf:cd:74:64:dd:4b:2c:a4:55:ba:f0:8b:0f:
2d:0b:9d:a5:2c:c0:bb:2c:45:24:f7:59:4c:3d:fa:b1:1f:da:
52:13:61:0a:ee:64:0b:a0:d9:1b:47:17:3b:82:d8:1a:eb:f4:
67:93:67:7a:0e:c6:fa:54:55:1f:e4:ee:3e:bf:6f:08:1e:b5:
f8:3f:be:48:72:21:c7:3a:d0:f0:32:f8:f1:23:0d:9a:f7:fb:
7b:05:d4:73:46:af:f9:8f:a7:1b:37:dd:71:dc:19:ba:8c:1a:
13:0a:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:53 2025 by rpki-client