Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier: 7iJtZYW4HSTpEdl2822WZRIddOzpOoWC+IogLcxwjoI=
Subject key identifier: 3C:77:86:11:1F:0C:71:74:98:86:66:67:13:E9:F3:D7:CF:3B:ED:C8
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer: /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial: 019A2477F7B553CF43801614AD2E71CDD7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 07:00:33 +0000
Manifest this update: Mon 27 Oct 2025 07:00:33 +0000
Manifest next update: Tue 28 Oct 2025 07:00:33 +0000
Files and hashes: 1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: fU7Go9SS5oyPRAt0ZlJjlcChjqybYQQWPAxal2MHJCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:f7:b5:53:cf:43:80:16:14:ad:2e:71:cd:d7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Validity
Not Before: Oct 27 07:00:33 2025 GMT
Not After : Oct 28 07:00:33 2025 GMT
Subject: CN=3c7786111f0c71749886666713e9f3d7cf3bedc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:0b:a0:5f:08:7b:4f:cc:83:3c:5e:d6:83:
44:d6:2d:74:8b:d8:c5:a6:99:f3:d2:14:0a:95:1f:
54:18:3a:f2:50:94:d2:e4:66:40:0e:36:f0:18:63:
cf:e8:72:a4:f8:31:3d:64:4f:6f:6f:a4:cb:83:af:
dd:da:38:36:63:bf:74:93:fd:4b:fb:a2:f3:26:dc:
17:07:13:d1:d8:9e:f5:8b:43:19:43:13:df:f4:3c:
1d:32:9c:b2:c0:67:f6:63:ff:83:f2:63:2f:90:d9:
cf:9d:a6:a4:df:28:92:ee:c2:de:aa:a6:dc:71:23:
fa:31:45:5e:55:83:fb:6a:01:8c:64:b9:bb:47:8d:
2f:d4:74:bc:1d:2f:ef:9c:2d:36:6c:1a:15:58:3c:
a6:b2:99:89:a1:0b:01:4f:32:60:02:fb:29:2c:ae:
ed:00:1a:b3:8b:d4:d3:e5:fd:60:93:02:8f:58:2a:
5a:d6:ee:2b:59:ba:21:c5:12:c6:1b:45:1d:0b:b6:
70:89:32:76:12:fd:ae:77:28:50:f0:f5:85:a1:0c:
b1:5f:32:ce:d2:e1:2f:c2:f3:1c:81:ee:f2:5f:d9:
de:72:5c:f1:f8:eb:23:36:30:98:cc:98:03:37:b4:
46:59:3b:56:48:57:42:9c:38:8a:9f:85:3e:87:7d:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:77:86:11:1F:0C:71:74:98:86:66:67:13:E9:F3:D7:CF:3B:ED:C8
X509v3 Authority Key Identifier:
keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7b:2f:20:c2:3d:28:53:0b:8a:3a:69:20:56:70:ee:78:64:
00:1f:df:47:83:f7:5c:50:90:9d:dd:9f:97:1e:0b:05:60:7c:
cf:70:61:4a:ff:43:22:78:c8:dc:43:f9:c4:d4:7b:c1:da:7d:
73:9b:b1:cf:3f:ad:65:83:29:5e:da:57:6f:e6:f8:e7:f1:60:
b1:0c:bd:a8:e5:1b:0a:15:5e:e0:87:5a:1f:db:f1:30:a3:f0:
e6:8e:cc:08:27:75:45:17:5c:b5:7d:7b:e3:b2:16:07:53:77:
76:ce:a4:11:f1:49:74:ee:ca:ff:11:87:0e:b3:c4:9c:7d:56:
5a:98:45:54:6c:eb:05:6b:d4:ce:cf:fd:1e:f9:6c:ce:c8:e1:
b4:0c:95:af:8d:63:eb:94:9f:8b:8d:49:1e:9b:27:2d:e4:d4:
fc:47:57:43:23:e0:a3:8b:e6:cd:61:f0:eb:90:ce:8f:f8:9c:
d3:06:c9:1e:9a:91:9d:8d:e2:ac:0c:43:c3:6e:8f:04:96:83:
63:54:3b:56:c1:0a:dd:70:34:04:fe:38:63:2c:82:a3:26:62:
20:2b:a4:67:91:2f:51:37:6f:85:d2:6f:3d:5b:f8:76:20:7a:
d1:9c:db:80:b1:d9:4a:c6:53:29:88:e3:36:c7:aa:ed:87:47:
54:36:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:06 2025 by rpki-client