Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: kuX0qRX0Army/g07qji9NbAqwgtVT3qHoL4XN9bqupM=
Subject key identifier: 3B:3C:94:DC:4F:D8:F7:76:95:1F:03:AB:46:6D:17:72:CD:DA:6A:27
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019A72CA25125887A6AAE7DD6997AA4B69D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0D7B
Signing time: Tue 11 Nov 2025 12:00:41 +0000
Manifest this update: Tue 11 Nov 2025 12:00:41 +0000
Manifest next update: Wed 12 Nov 2025 12:00:41 +0000
Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: GVI28ndhxoi/ZxAkbWBlqFJjRC0qZCCN6hAJWp8QzvE=)
3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:25:12:58:87:a6:aa:e7:dd:69:97:aa:4b:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Nov 11 12:00:41 2025 GMT
Not After : Nov 12 12:00:41 2025 GMT
Subject: CN=3b3c94dc4fd8f776951f03ab466d1772cdda6a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:8b:e8:cc:08:72:41:50:a4:61:42:97:b5:
0c:eb:05:12:41:ae:2c:38:07:22:c9:08:c5:1d:12:
5b:01:de:59:a1:ee:37:e7:0f:f7:78:30:bb:c3:6c:
3c:0c:bd:ca:6b:ca:48:e7:23:ce:e6:31:dd:ec:34:
e1:0d:7b:b6:0c:69:70:67:06:24:97:ee:29:3f:42:
31:35:6c:08:e4:f2:10:ad:30:68:52:44:3b:f7:3c:
12:bc:f0:d7:37:4a:fd:5f:97:9c:1e:42:29:e9:f0:
c9:bc:d0:f0:67:fd:d5:f0:09:b5:aa:d9:b5:d7:28:
a5:2b:a9:20:04:96:e4:fa:b5:d4:d0:1d:fa:ba:68:
7b:ce:c2:62:42:ea:0e:29:d1:33:96:78:6f:df:6a:
54:0b:60:c6:fd:4f:93:13:73:d9:54:63:00:b8:2b:
d3:2f:6a:70:e6:c5:44:83:ba:02:c5:0d:e0:b8:4a:
84:40:28:1b:ee:8c:4b:83:52:8c:7a:ff:75:4c:15:
60:9f:4a:39:93:fe:2b:28:5a:02:f3:0a:81:20:b5:
4f:db:fe:13:d6:0a:6b:87:13:7a:78:bd:4a:82:17:
28:7f:80:62:15:a5:b3:05:a7:d8:e6:a8:3d:86:91:
86:20:6e:69:93:b7:c4:64:45:19:06:e9:f9:22:71:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3C:94:DC:4F:D8:F7:76:95:1F:03:AB:46:6D:17:72:CD:DA:6A:27
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ae:35:5f:74:03:20:9b:24:4c:ff:63:c1:ef:cf:05:e9:75:
f2:70:3d:23:7a:0f:cc:4c:a2:d8:5b:97:9c:97:a8:77:10:9d:
19:83:a9:62:8a:1c:52:8a:ac:de:e3:f5:e1:83:2d:ed:27:b2:
33:a3:e3:3c:7c:8e:27:40:5a:0b:6b:ff:27:d9:91:45:72:a2:
a9:a2:46:85:98:84:40:0e:7c:a8:48:4e:57:8d:6e:c2:cf:e5:
cc:73:dc:07:44:de:50:d3:ac:01:00:33:34:8f:f8:f6:54:5b:
ca:66:b1:d2:94:05:85:b8:44:b5:a7:f1:2a:f2:47:8d:b4:d1:
1c:b2:69:87:94:88:a3:31:de:c7:40:7b:07:f9:de:05:9b:4b:
aa:d4:f6:30:3e:84:82:c6:7d:ee:1b:34:9f:eb:f0:11:e8:c5:
26:42:14:a8:80:c6:44:57:c4:87:62:97:79:22:91:50:23:d0:
85:70:81:b3:63:6a:83:5f:bd:55:47:47:c8:1f:e8:a8:04:f2:
b1:76:2e:2c:47:4a:aa:7e:c3:2b:f3:5d:fd:2d:49:42:1b:9e:
4f:df:a6:d1:55:41:53:f2:88:ba:d7:53:d0:d4:a7:88:d3:f9:
12:80:fc:73:b6:3b:76:3b:dd:89:19:2c:0b:e7:49:93:32:cc:
33:07:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:15 2025 by rpki-client