Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: zCRCaXlYldMa8S8NRrk83jggfFJkSfJSmug6QNQP+7o=
Subject key identifier: 7B:5C:58:0D:4E:FB:FB:49:2E:B0:41:C3:15:CA:F5:FE:0F:06:09:77
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 019A71135BB1361A49E0622EAE2668FC7C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: q9AgrczhGOaSvhwsA9G40CMQ7XEsNCkCt7dwnGiBRvc=)
2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5b:b1:36:1a:49:e0:62:2e:ae:26:68:fc:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=7b5c580d4efbfb492eb041c315caf5fe0f060977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:a4:c6:eb:e4:42:61:e6:03:7f:6f:7d:5c:
a0:61:23:dd:37:06:f6:71:92:65:75:61:cd:66:05:
fa:8f:2b:85:65:e4:5d:a5:98:26:e6:a8:ed:77:16:
01:03:01:16:e3:18:cf:bc:b0:bc:80:01:82:c2:e1:
a0:6d:49:c5:22:ff:b1:fd:dc:ee:51:50:77:99:6a:
d0:50:6e:42:bd:af:01:c9:92:ba:a5:f6:a0:24:a3:
aa:3d:55:76:01:17:d6:1d:6f:2c:cb:f5:34:67:f3:
eb:f1:8c:c8:80:7b:3b:fa:8e:16:d0:0c:36:9a:ec:
2e:b6:c8:25:62:d9:8f:33:93:b5:03:e8:a8:91:89:
57:06:95:ca:87:21:ed:4f:b5:ea:d9:d0:e7:59:ed:
2b:a8:22:d6:3d:61:c2:51:63:bb:4b:03:74:2e:3e:
53:fd:8a:17:e6:77:4c:a1:89:19:2a:9c:05:ce:ef:
95:96:1b:7d:25:e2:0e:bd:83:7a:3a:4e:e0:03:50:
da:fd:a6:e9:2c:c0:a3:64:1d:ef:63:61:a2:cb:c2:
37:ae:d6:b7:cb:57:c7:c4:36:22:1d:b8:c0:de:aa:
0e:17:f6:16:51:71:2c:e7:3f:93:db:88:8b:79:de:
6c:bb:38:cb:09:a4:49:c9:de:39:00:81:e2:ab:87:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5C:58:0D:4E:FB:FB:49:2E:B0:41:C3:15:CA:F5:FE:0F:06:09:77
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:74:15:46:53:54:0e:1c:cf:26:36:9a:91:ed:10:fc:2e:cc:
31:c0:79:2a:0c:aa:c5:e8:5a:25:a0:1f:08:6e:12:f6:17:bd:
49:85:c6:42:5d:81:c0:55:68:0b:5d:62:28:d4:74:fd:5e:72:
af:dd:4f:64:9a:de:a0:f6:4d:6f:ef:73:a4:48:b7:6d:34:88:
d9:e3:dc:66:51:44:70:17:40:d6:f4:6f:e5:a0:bf:ab:b8:52:
14:a0:ea:7c:ad:c9:4d:16:23:2e:78:1b:6a:cf:5f:b4:9f:03:
fb:3a:1b:d2:c0:5e:5b:6c:42:9d:bb:28:73:28:ec:b8:9f:cc:
75:8e:46:d1:20:e6:c3:1e:e8:28:d6:58:f6:2a:59:90:be:d8:
ac:47:b4:6c:b3:18:48:3e:47:09:47:28:fe:4f:d9:59:37:af:
b9:06:f9:83:6e:8d:2f:0b:be:2f:4f:0c:f5:00:f1:04:25:b9:
3f:a8:f5:07:3e:1f:25:ca:97:35:4a:27:41:f8:8c:45:4e:9f:
d2:b6:cf:db:3c:dd:59:53:3a:a5:99:cc:c1:47:72:4d:61:9c:
b9:76:66:68:8b:6d:94:9a:4b:4e:0a:a9:40:1f:f9:41:d4:4d:
cc:42:a0:d1:04:50:db:db:14:58:f8:4c:37:9c:3d:b3:c3:af:
db:e5:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:32 2025 by rpki-client