Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: jpBtileDGrBo5vJ9dwR6pIU+6Ue4IS9SfdG63lxDX74=
Subject key identifier: 7E:07:C2:CF:B9:6D:00:74:6A:7A:7D:32:CE:D9:41:82:DD:29:8A:F2
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 019A71B7EA6E832CD9FB7B1F06DE4B2074D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0AE2
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: zPifrZS6DW9YDK8QeS7Cb5Bnz0+5M2M9+eCzCMHI7yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ea:6e:83:2c:d9:fb:7b:1f:06:de:4b:20:74:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=7e07c2cfb96d00746a7a7d32ced94182dd298af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:8f:9f:20:ea:39:17:68:d8:29:7e:eb:5f:
27:7f:29:29:b8:07:3b:67:55:01:91:85:f0:13:61:
f2:ad:33:21:fa:9e:2a:12:b3:2e:4f:ee:1a:0a:b8:
cd:90:b5:18:53:33:37:da:b4:37:27:92:ba:53:38:
da:f9:ac:dc:4f:d4:01:f9:af:d7:b2:df:c9:df:68:
47:69:ba:30:c4:08:5e:51:29:bb:d8:eb:b6:c2:73:
4f:57:2a:d9:f4:0c:7d:0c:be:d2:64:27:8e:68:41:
ef:d1:97:f8:d0:1b:5d:f0:25:d2:4a:b9:32:d4:a3:
6b:c5:a9:32:9d:6c:4d:9d:55:d0:dc:2a:64:fc:d3:
e5:c4:b0:5f:28:d8:18:da:56:eb:1e:d0:0f:ce:e5:
f2:6a:67:00:5d:75:77:d2:e8:bf:5b:82:3c:32:f0:
fb:b6:9d:45:05:e4:ee:a5:6e:53:fa:d4:9e:b6:20:
1a:c3:e9:48:cf:6a:4b:3b:04:87:87:ac:60:39:26:
19:06:6c:de:8d:32:e6:7d:11:c7:5c:2c:f5:f6:d1:
89:0a:b3:e6:78:1f:41:a7:78:5a:e3:7a:ff:23:73:
48:7b:c1:2b:4c:e2:c4:b0:bf:28:1f:2b:54:68:e7:
80:57:fb:a9:1e:94:bd:92:d2:ad:17:28:4c:a7:05:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:C2:CF:B9:6D:00:74:6A:7A:7D:32:CE:D9:41:82:DD:29:8A:F2
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:20:a7:c7:60:9b:14:a0:50:61:d2:94:71:ba:e2:d6:41:ed:
40:94:b3:b7:ee:1c:11:3d:94:c1:6b:02:b3:a9:0c:f1:ab:0b:
d7:39:f1:1d:7e:73:f8:89:54:ad:25:c1:32:07:fe:8d:29:e7:
fa:ce:31:16:40:40:7b:fa:a9:2d:9f:c4:45:cc:73:58:cf:e3:
66:33:ee:07:14:01:33:55:f8:89:2d:2c:f1:c9:9f:62:8d:c7:
57:98:d7:a7:aa:b7:d7:0c:a0:28:28:ea:79:01:db:33:0f:ad:
fe:ac:fd:97:94:75:0d:25:98:6d:3a:9e:d1:8d:60:6c:35:23:
7a:04:45:c6:27:60:91:80:47:9b:e3:8e:84:8c:9a:7d:0b:77:
20:ea:ed:ec:d7:d5:58:4c:3f:05:60:6b:0f:65:bb:e1:2e:f0:
4e:92:fb:55:78:fe:2c:b2:42:2e:47:44:bf:41:8d:39:0f:fd:
4c:e5:34:9c:7d:ee:f8:c9:ca:b3:f2:20:db:24:53:7b:53:70:
a9:46:ce:af:10:ee:bd:f3:eb:6f:69:a2:3b:64:12:40:5d:5b:
be:1e:1b:3e:b0:c6:50:e0:86:c1:9c:35:f7:30:cd:6b:c6:4b:
e1:c7:00:20:dd:10:4d:d8:48:8e:a4:6f:62:98:cf:a0:5c:52:
9d:d3:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:42 2025 by rpki-client