Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: kSVAMnta5p4EcK+k08v4uyDo+KiikIOIn+gzzKgP6kU=
Subject key identifier: DD:32:C1:22:E7:20:7A:A6:21:AC:68:42:CD:7C:C1:66:AD:00:A9:DB
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 019A7225F7D68EEF16F828CD4D14AF07ECC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 1418
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: xmcPNMwPp9INL45jUT/hFuWpiaMHJojB/Hf5BZR8mJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f7:d6:8e:ef:16:f8:28:cd:4d:14:af:07:ec:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=dd32c122e7207aa621ac6842cd7cc166ad00a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:e3:8c:8f:4f:57:cc:f4:d3:08:0d:ba:7f:
55:5a:40:ae:df:93:cc:8d:5e:41:18:0c:71:c1:5c:
d5:73:5a:0c:c1:f0:83:ca:4f:6d:2e:3f:78:3b:76:
e9:d3:07:4c:37:67:97:b8:e8:72:97:72:5e:cd:4f:
93:cf:df:ff:9a:cc:3c:58:80:21:a2:4f:2a:31:e3:
26:62:9e:9b:34:07:85:46:40:6e:fc:f9:f5:00:3b:
32:da:fc:5e:b5:03:05:36:0a:dc:b6:f3:51:d2:16:
5f:f9:b2:52:66:ab:1a:d8:83:57:cf:37:d3:d6:61:
be:52:80:6d:e2:82:b1:4f:18:c0:4f:6a:f3:64:6e:
73:92:27:48:c9:eb:54:65:e6:90:e6:1a:a8:a3:fe:
07:82:ea:b1:71:e5:67:75:e4:79:fa:da:e4:0b:31:
c8:4c:7e:bf:9c:8c:de:e4:ca:a8:c5:16:15:5d:f3:
c4:46:54:72:e1:ce:58:32:db:a1:73:07:e9:11:fa:
6e:30:36:60:3b:01:90:07:fb:64:c7:56:cd:03:52:
80:cb:ac:3f:b1:b3:81:47:c7:dc:9a:dc:0b:a4:ab:
91:e0:42:1b:10:b5:99:85:6d:ea:6a:55:31:77:18:
a9:3f:22:13:2e:bc:08:82:ea:56:46:17:85:b6:6c:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:C1:22:E7:20:7A:A6:21:AC:68:42:CD:7C:C1:66:AD:00:A9:DB
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:40:c8:22:ff:bf:94:16:c6:59:17:80:bb:d5:3e:03:eb:b4:
59:87:aa:08:b9:06:bd:ba:41:64:de:63:5a:97:21:51:00:2c:
c1:e5:a0:ae:42:ac:d6:4f:a4:3f:5c:07:0f:73:a7:74:9c:e0:
ea:c5:16:92:77:c3:e5:27:ce:ab:1b:a8:9b:52:e9:02:1b:84:
28:1b:be:b6:75:3c:f8:4d:1b:fb:44:f5:69:72:29:a4:b1:76:
79:c3:b5:8c:95:b3:e5:d5:84:e6:35:3b:22:dc:9c:67:a1:e5:
19:92:fb:dd:c4:50:04:89:e0:98:46:91:16:22:e7:16:1e:d3:
87:b5:16:16:ab:bd:fa:22:a0:c4:9e:7f:46:82:b5:69:4d:d9:
79:2e:14:94:80:93:65:6d:3b:03:40:e1:3a:81:fe:cc:81:11:
1f:c3:12:08:42:8c:15:ce:7f:25:e7:18:56:fa:1e:74:26:a2:
8f:11:e6:a6:b8:0d:ef:96:03:32:45:2e:b1:b3:18:45:81:e7:
35:41:a2:93:0d:da:08:46:40:ce:ad:26:05:15:cb:a2:0a:84:
38:a4:d0:80:8b:c3:9e:2b:20:bf:45:7f:89:dd:0b:8b:d7:c1:
e6:28:33:72:a2:6d:f8:ac:5d:89:d2:f3:d6:c7:9a:35:af:c7:
28:6f:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:44 2025 by rpki-client