Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: 6aG7xdTesnT6Z4q5J/S/MoenPkXwL8aopatLZ1a08vA=
Subject key identifier: DB:04:1B:9E:A4:95:E0:2F:1A:9F:7E:10:24:4A:01:51:59:92:F8:B6
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019A71B87C72C6A2E74D466A338D9597348F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0E16
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: ZBvs/TcHjQL7mbvWc+RGjEH9A3YN6boYkmt5T0EAT3Q=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7c:72:c6:a2:e7:4d:46:6a:33:8d:95:97:34:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=db041b9ea495e02f1a9f7e10244a01515992f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:59:76:1b:e1:d0:ec:cd:2e:26:80:08:7d:7f:
09:c3:f4:9a:b9:7f:67:ed:53:d0:ed:9c:83:99:37:
8e:6a:22:a6:ec:03:e0:33:ca:60:7d:ce:32:ca:fc:
6d:54:15:d3:84:ab:5d:e2:48:4f:98:69:eb:fd:53:
2b:a6:41:32:16:de:f1:37:51:50:37:13:9a:b4:75:
da:92:51:fa:22:b9:f4:aa:01:ea:4e:97:b8:c5:ee:
f6:97:86:47:57:e4:9c:f7:e6:81:f7:f4:eb:4b:c6:
7e:36:62:e9:32:12:5c:c9:ee:76:1c:59:d5:76:48:
0e:ef:8e:23:f6:09:15:b6:c4:fe:a4:f4:1a:0a:82:
55:16:52:db:ff:b6:41:4d:61:60:c3:56:5b:1c:3f:
26:7c:02:9c:66:ef:47:50:62:7e:b8:0e:ec:98:89:
9b:b9:3b:f6:8b:cd:1a:9c:f2:b3:e3:cd:57:ba:e3:
89:06:bc:fb:ab:d2:b3:26:7d:24:0f:be:ec:25:56:
c3:f5:a1:7b:bf:c1:25:44:77:0e:9c:85:c2:29:da:
f1:80:5e:34:08:a8:3f:e3:7b:e9:61:25:2d:45:36:
f0:7a:82:16:71:0b:15:30:3b:87:2b:b1:0b:bb:6b:
57:86:41:41:85:f0:39:f8:5e:0e:a4:6e:45:51:93:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:04:1B:9E:A4:95:E0:2F:1A:9F:7E:10:24:4A:01:51:59:92:F8:B6
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:64:6b:55:7d:a7:00:0c:b1:db:2b:d9:45:91:b7:e0:2a:
a8:da:36:97:8a:22:12:e5:4f:60:fc:7d:7e:51:ed:56:31:3b:
6a:50:9a:dd:7c:34:05:1f:1e:7f:20:94:38:b3:cb:72:04:7f:
0d:a0:57:cd:fc:eb:11:d1:82:31:ac:3e:39:50:ed:5d:fe:d4:
66:10:c5:07:07:a4:43:6a:84:e6:80:ac:e1:c9:5d:8b:fb:90:
29:fe:1b:3b:b5:86:59:9d:53:a4:8a:6f:89:1f:26:c1:35:a4:
7a:95:47:1c:f5:13:5d:e5:de:c4:bb:b6:c7:2d:56:6c:95:ce:
67:dd:97:12:78:07:fa:bb:eb:c4:1b:e5:4f:88:bb:99:80:c9:
e9:5b:f3:80:0d:d9:9f:de:4d:d4:ee:89:49:56:be:a2:d5:be:
f5:eb:6d:b4:fb:77:8b:53:20:ec:9e:6a:42:c4:97:b4:8f:f9:
20:c3:43:49:11:6e:ee:38:a0:94:91:b0:71:55:26:1b:4c:0b:
fb:72:18:47:17:4a:a1:d4:43:6b:1d:7a:a3:45:e7:c3:e3:a4:
97:fc:b5:a6:56:72:39:a1:37:7d:fa:d4:73:ec:c5:3d:92:d4:
0c:9b:01:58:ca:0f:ba:97:75:ad:2a:c2:f0:fc:03:1a:fa:3b:
c1:79:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client