Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: 1j1Hmbzx4zxRyepViTDpuiwlHBI2CWme8RlSPUH3HGI=
Subject key identifier: 2F:67:FD:35:04:D4:5B:C8:CD:93:B2:12:91:CE:33:46:00:5E:EF:97
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 019A71B923ABBB8F9A4F12584DDD22A0AC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 13B4
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: /yoA2qVbcLMu4PdEwKwoArL664/G449+tJVQ4l7+8Pc=)
2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:23:ab:bb:8f:9a:4f:12:58:4d:dd:22:a0:ac:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=2f67fd3504d45bc8cd93b21291ce3346005eef97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:e2:e2:29:80:da:96:3b:08:c0:d7:b6:f6:
5a:c8:ac:be:3a:2b:12:db:ef:3f:2c:ff:16:10:ac:
9f:5a:bd:16:68:2b:6d:fa:c4:13:fc:dc:60:70:61:
66:ab:30:32:a3:0d:cc:88:3d:62:95:4d:84:eb:f3:
0b:20:02:27:40:8b:7a:48:d8:a0:c3:be:be:ac:bb:
ba:53:c6:e7:27:8a:a3:d9:91:8d:70:bd:f2:94:d9:
8d:07:17:53:7e:23:0c:3c:5a:f0:42:2e:26:c4:f3:
0b:b6:20:06:f1:22:7a:3e:2f:b2:87:a3:4f:f2:f4:
7a:dc:8c:0a:e7:f9:77:3f:30:36:c3:7c:9c:bf:d7:
3c:bc:0c:9d:fa:bf:a9:c2:43:51:64:fb:17:79:73:
a1:9b:9b:be:fc:b0:6f:f3:f2:c7:e7:07:13:ca:2c:
93:1a:2a:78:8b:7a:a0:9b:16:64:78:9b:ad:6c:ae:
01:c8:10:9f:1e:68:07:14:07:a4:a0:f4:08:2d:f1:
40:f6:f5:9a:53:16:96:c4:17:57:97:46:f8:f5:9b:
0d:4a:fe:a5:2e:61:54:37:c2:b6:ae:b0:4c:8c:8d:
53:35:b7:7d:60:66:f2:f9:22:1c:ca:c6:ec:28:f0:
0c:d2:05:be:c3:d9:5c:f5:11:5a:60:22:74:f4:b5:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:FD:35:04:D4:5B:C8:CD:93:B2:12:91:CE:33:46:00:5E:EF:97
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:91:65:3c:d3:17:46:1b:66:c9:f3:44:ae:9c:1d:70:01:c6:
52:ce:56:93:71:ca:d4:f5:ac:85:87:74:04:ed:ee:54:ee:5a:
2b:07:61:07:ea:18:97:25:a5:c4:07:fa:37:d1:0e:ae:c4:24:
de:8b:3d:1d:ca:16:a5:1e:f5:6c:32:4f:ac:94:70:27:f9:fc:
df:ba:93:5f:09:09:cf:c3:de:19:0a:97:2f:6a:3d:2a:af:0b:
6b:de:21:c7:44:e5:48:99:25:2c:ac:ae:d8:6d:44:fc:01:42:
24:42:07:96:0b:76:7b:35:40:c9:b2:5f:76:a4:99:25:b8:b5:
ef:79:1f:15:94:03:4f:68:f2:1c:a6:15:46:26:70:aa:ef:bd:
03:f0:27:a4:a2:9b:fb:02:07:be:3b:8f:ef:12:1d:97:19:80:
bb:8a:3d:7b:5c:e4:67:24:81:27:78:10:bf:00:6a:8e:0d:44:
54:49:d2:85:c1:6f:8b:40:af:65:fc:e6:f8:e2:b4:50:c8:10:
7d:ee:55:8c:3a:1f:27:1e:b0:b5:c2:84:b4:b4:bf:0a:a9:78:
c5:7c:bd:30:6e:64:3f:35:aa:84:a6:cd:97:2c:0f:02:a9:ca:
8d:b5:7a:f0:f9:8c:46:a6:6f:cc:20:b0:3a:c0:7f:3d:b1:16:
a7:d7:8e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client