Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: PzAH/+c5dK75cvYGGHOXZ+cZvR9WPou/nbLU6lPwBcE=
Subject key identifier: B3:12:EB:D1:9A:95:3E:6F:69:70:D9:5C:A5:E9:5D:A1:90:61:F4:80
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 019A7113515D9FCA3C11CCD4521490604975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 069E
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: isAoPdRSpnnZIwHyWjcSJv9/dwCYkBjgCZHtq8dmj5M=)
2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:51:5d:9f:ca:3c:11:cc:d4:52:14:90:60:49:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=b312ebd19a953e6f6970d95ca5e95da19061f480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:70:2c:37:00:a4:8d:80:6d:5d:65:45:92:
a0:70:a5:17:b7:f1:53:b1:19:f6:10:55:f9:52:1e:
44:85:02:5e:e3:b7:ba:c9:19:e5:1e:15:9b:f2:34:
88:42:33:00:bf:e9:68:2c:18:76:c0:86:5a:fb:fa:
89:b4:01:f3:7a:35:5b:af:67:96:eb:31:94:4a:5d:
82:9c:0d:11:09:41:df:72:b1:84:65:a4:fa:e1:6c:
29:ae:2b:6f:6c:39:b8:a0:b8:0b:88:b1:9b:f6:14:
6d:20:b2:5e:0c:73:53:9a:15:41:83:46:cd:26:76:
ad:3f:13:50:bb:37:7a:44:42:fa:81:79:ea:a0:f7:
95:d1:71:7b:6f:fd:4a:9a:ad:90:3a:b7:dd:19:54:
c4:59:5a:24:e2:92:87:26:f2:22:47:e9:f9:04:c7:
9c:bc:8a:be:19:de:63:7d:91:ee:c5:a2:a9:16:8a:
34:d3:07:8f:96:e6:70:61:83:a2:ab:e6:a1:f5:e4:
48:4e:68:01:4e:10:cf:54:a0:cd:c7:71:ad:c1:62:
d6:91:13:67:1c:d8:f8:8f:02:99:c0:8b:11:36:66:
d5:90:f0:cd:21:3e:2a:44:1b:df:9b:cd:b8:7e:07:
bd:eb:f7:ad:27:40:3a:e5:f5:89:08:bf:4f:17:a5:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:EB:D1:9A:95:3E:6F:69:70:D9:5C:A5:E9:5D:A1:90:61:F4:80
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fe:ae:8f:1e:1e:88:24:bc:9a:be:86:a3:da:25:4a:45:bb:
42:f3:2c:f9:db:6b:bb:5c:0f:25:10:cb:af:3a:5d:ec:ac:3a:
0c:58:96:e0:81:25:04:18:0c:6b:b1:ab:ae:17:ed:1f:fb:1b:
e1:c5:a1:25:25:b0:b0:4d:43:44:48:ea:ce:95:28:e1:4c:32:
a4:7e:51:dc:7b:4a:d3:f7:91:16:b6:84:f5:32:cd:3a:e3:6f:
43:82:a6:98:83:70:7f:1f:72:53:fb:41:d9:dc:19:db:29:6c:
87:b3:e0:1b:68:d8:2c:d3:87:78:28:30:47:69:17:c0:95:47:
e1:8d:9b:a6:70:00:dd:24:39:b1:f4:3c:fd:97:44:83:75:33:
5c:b1:1e:72:85:79:a6:f3:d3:5a:0a:5a:08:01:74:0c:10:2a:
22:b4:31:55:46:8e:9d:20:74:c6:fa:7c:c5:39:98:85:7f:fa:
ea:88:0f:e9:e7:cc:fc:d2:60:a7:60:0a:f3:71:be:e5:ed:6a:
60:fa:a6:4f:23:4b:94:98:5b:1a:9d:83:d1:1c:ab:79:4a:aa:
00:93:6d:03:96:f4:75:bd:0a:95:ef:86:05:95:af:18:1b:50:
de:01:01:fa:c7:91:f8:06:9f:f3:07:c0:c3:e2:3f:13:78:60:
cc:d8:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:02 2025 by rpki-client