Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: 05mWqmwtWkYH4oytQ33iE3BAqedcqV5xplxRurhqX4Y=
Subject key identifier: FF:38:38:56:E1:10:BD:58:4F:74:3A:AB:DD:D0:9F:CA:5D:98:2A:56
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 019A71B8195C21CB2561736A7B24CD7B5796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0CF5
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: dffztzpOa4Ir3KuE+rtKB6Gn7I+c669OcMJ4CRrtrp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:19:5c:21:cb:25:61:73:6a:7b:24:cd:7b:57:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=ff383856e110bd584f743aabddd09fca5d982a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:fe:a9:08:e0:2d:55:bc:a1:5e:02:56:b8:
a1:2f:81:45:ee:7d:a4:5c:74:71:8b:19:8c:ca:68:
7c:0a:34:ce:0e:f4:98:50:71:7d:6c:c3:40:68:1a:
a4:67:1f:1b:25:80:3d:5b:5d:17:b7:6f:82:e6:74:
53:4d:10:d4:8c:2d:ba:7f:82:e5:7b:3a:f6:92:c0:
af:a1:79:35:26:56:ee:d1:a4:c3:a6:f6:a7:fa:77:
ff:3f:aa:21:f7:8c:fa:a0:c8:dc:5b:9b:3f:99:ee:
64:67:b9:0c:e5:92:1d:ef:31:b6:8e:86:f4:b1:10:
4e:7d:55:6e:65:dd:42:39:7d:5c:aa:37:11:7c:22:
74:1b:59:2c:6c:10:57:be:2f:53:6d:dc:33:65:e0:
0f:84:68:53:bb:72:eb:39:ed:d6:c8:b2:23:32:14:
da:f4:b9:53:b7:7a:39:d4:f2:74:45:05:bc:41:06:
54:c7:01:ef:a3:24:5f:56:94:af:ba:c1:cc:48:6e:
78:7d:8f:c5:8d:a4:a1:16:15:a4:e6:bd:69:5d:69:
f7:00:8d:4c:54:69:46:bf:fe:b5:f5:d3:82:27:96:
99:23:09:28:cb:48:69:5d:a6:29:d1:9b:22:3b:ed:
7b:cd:14:b9:83:e8:f4:64:4b:f2:62:dc:92:de:24:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:38:56:E1:10:BD:58:4F:74:3A:AB:DD:D0:9F:CA:5D:98:2A:56
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:92:db:1f:66:f4:cd:7a:2f:44:ae:5a:64:69:a7:6c:66:43:
94:82:44:ce:c4:7c:8c:eb:5e:f1:37:08:11:4c:85:90:07:30:
bd:af:a3:6f:24:ce:30:7a:f6:21:a0:1f:db:b4:48:c2:63:1d:
ce:92:d7:c6:12:4c:1a:e6:2c:35:22:a1:86:5a:f3:11:42:8a:
4c:1f:71:32:8f:7e:37:b3:b5:5e:14:59:9e:04:47:6f:e8:1a:
6d:c1:2b:b5:cb:f1:1c:73:56:9b:fb:be:23:35:09:ee:09:dd:
2e:62:f3:52:29:f6:13:0e:ed:76:43:51:a1:1e:8c:ff:59:4f:
67:70:1e:a2:73:a8:09:49:a7:21:cc:e2:b0:76:14:72:0a:79:
6f:2a:81:80:39:a2:30:eb:42:0a:9f:11:57:ce:5f:fe:98:5e:
48:9e:95:df:d7:34:6f:a9:7e:ad:62:22:44:61:0a:47:47:d2:
df:ba:25:40:a4:ed:ca:bc:93:40:4b:6b:1c:eb:cb:5f:3d:bf:
84:ce:3a:81:20:70:21:05:8c:6a:c4:86:ce:f5:7f:10:6b:73:
43:e4:a2:6d:06:3c:54:ee:8f:b8:bd:c2:d0:e7:cd:e5:ce:e6:
61:b7:ac:79:02:04:3d:20:50:af:c5:65:97:6b:d7:58:a8:8c:
87:33:1c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:07 2025 by rpki-client