Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File: 8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier: Z20ZXO5kXxIGufniGnlDGc032l/Tjf9bRiTWd64Uk+k=
Subject key identifier: 07:72:91:74:5A:61:56:B2:8E:31:0B:88:93:11:43:C9:80:8F:64:9A
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial: 019A706DFF32199D60BF8B49BE75AF2E2F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 01:00:48 +0000
Manifest this update: Tue 11 Nov 2025 01:00:48 +0000
Manifest next update: Wed 12 Nov 2025 01:00:48 +0000
Files and hashes: 1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: yvwLxrIjz14VAD9enZG3riNXRwIiarPjvrRpueLcYbk=)
2: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (hash: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:ff:32:19:9d:60:bf:8b:49:be:75:af:2e:2f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Validity
Not Before: Nov 11 01:00:48 2025 GMT
Not After : Nov 12 01:00:48 2025 GMT
Subject: CN=077291745a6156b28e310b88931143c9808f649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:86:52:87:89:c5:34:43:2d:99:cb:2c:89:
5d:61:9d:e3:16:e4:fa:b6:f1:3b:e3:47:c8:8f:c0:
dc:38:1b:bb:73:de:f4:de:34:16:b0:06:33:16:67:
0c:5a:eb:60:80:4a:71:42:95:c4:a3:b0:e0:1b:96:
19:18:73:6f:c7:be:79:bd:94:84:7d:2b:37:fa:ad:
19:3f:28:db:57:33:01:88:c4:a0:3f:f2:2a:44:71:
bc:46:e6:d3:cc:99:a7:35:33:59:a0:08:8b:b0:35:
96:3c:17:e2:17:41:fe:d6:ea:b9:65:1f:cc:dd:f9:
bf:2a:dc:74:04:de:fb:ed:05:95:01:5f:3d:2b:a9:
df:f6:05:32:95:0d:89:aa:81:a8:67:3f:60:17:34:
98:cc:b5:e8:97:a7:00:00:50:a9:76:d5:52:09:76:
c5:92:30:0a:68:ec:70:5b:95:4d:ab:b8:37:1e:f3:
23:40:06:7a:92:44:fc:1a:a7:2e:d8:42:14:97:87:
ca:1e:1c:7d:ca:93:cc:fc:0b:c8:6d:91:81:94:c7:
6b:df:d4:bf:87:cc:75:03:20:43:4c:81:dd:3f:4a:
f2:6b:eb:a7:dc:63:f1:ac:2b:d6:e5:e8:28:1a:80:
0d:64:97:8d:17:44:ba:54:e9:b5:00:87:61:89:39:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:72:91:74:5A:61:56:B2:8E:31:0B:88:93:11:43:C9:80:8F:64:9A
X509v3 Authority Key Identifier:
keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0d:9a:7a:b8:1f:9f:89:b5:17:23:b7:fc:51:76:ce:73:33:
2b:23:79:72:12:a7:6a:4e:a6:dc:58:5d:16:8f:fa:c5:51:2f:
34:a9:9b:1b:f1:ce:1e:9d:a0:c1:65:72:c4:2e:9c:32:95:ca:
f5:f8:20:3a:a4:77:fb:31:18:7c:e8:47:ae:64:5d:22:65:9e:
50:5e:cc:50:f8:40:c7:cd:bb:94:7e:af:d1:52:de:4d:9d:d4:
41:2d:82:37:c5:e5:76:93:dd:f3:04:46:38:33:0c:4d:ac:1d:
28:d7:5b:b6:02:27:73:7d:ed:3c:37:30:63:01:1e:36:a9:5d:
14:9f:ae:df:33:5f:7b:7e:9b:0c:7e:42:95:97:d2:9c:89:6e:
5a:a4:25:a0:a2:7c:fa:d8:c2:f3:d3:33:0a:2e:ec:c9:2d:69:
fd:ae:2f:a8:2c:ce:bb:fa:76:1b:0d:21:3b:4a:71:5a:22:8b:
6d:c3:2a:c1:11:1d:ab:a6:dc:bd:bc:04:3d:f0:12:d6:96:dd:
32:f1:93:61:22:aa:ee:ec:30:ca:f5:45:cb:84:69:16:30:2b:
95:1a:ab:e6:9f:cf:5a:2a:88:13:2d:56:d9:96:b3:c3:21:bb:
99:79:4e:6d:38:cc:f7:46:24:f7:6a:8a:55:2f:44:34:66:4b:
41:18:f2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:12 2025 by rpki-client