Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: rOTOymCBK8DfNKsF9n+yG94iRxZvV6IZwzqy6Oz2mdY=
Subject key identifier: 42:14:56:E9:F1:B6:55:B9:54:7F:07:52:CE:1F:2C:6F:BD:CE:AA:C0
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 019A71B8CECAE8CB82FD495D506433552DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 1117
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: FjMOuQzs/Bs5mVxXlbDfhhuJCCW0TJdFYIMIxa3TGS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ce:ca:e8:cb:82:fd:49:5d:50:64:33:55:2d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=421456e9f1b655b9547f0752ce1f2c6fbdceaac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:96:4d:bc:ce:da:e4:a8:be:af:32:41:63:
e3:bc:b6:b0:2e:f1:0a:c0:f9:39:f9:e0:ff:f6:b7:
02:53:b8:aa:e1:59:e9:9e:d6:05:62:01:a6:6d:b8:
67:43:48:f8:fd:bc:ad:ee:f5:2f:83:6f:c4:9b:b9:
92:15:2c:07:22:6e:b6:99:b6:dc:b6:bf:e1:13:cd:
2d:78:a7:e7:08:09:84:93:a9:93:ae:0b:07:24:dd:
86:7b:4f:c7:a0:46:be:29:75:89:09:7f:f8:0c:3c:
b0:78:d9:fb:21:ed:54:25:9f:a9:5e:a6:8d:9b:d2:
4a:76:1d:55:a5:f0:95:11:86:e0:87:6e:c4:5c:f4:
60:ec:85:1c:d0:2a:9f:04:0a:a6:f4:9a:3c:54:63:
3a:f5:0f:e8:c0:60:55:cf:b4:a3:39:5c:35:cd:9a:
14:e9:6f:21:e5:ac:b3:15:e4:98:92:6a:75:29:96:
aa:0a:6f:0c:44:32:30:9a:6b:88:84:04:44:74:84:
9f:58:e6:b9:5e:f8:ec:99:6c:e6:9a:fa:0b:8f:d0:
e9:96:00:6f:3c:e6:be:a9:0a:9f:31:05:25:75:9f:
27:26:10:94:cc:45:34:ff:da:27:20:06:cf:29:ab:
ff:f4:dd:26:b8:d8:c1:10:44:f5:86:57:be:b9:40:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:56:E9:F1:B6:55:B9:54:7F:07:52:CE:1F:2C:6F:BD:CE:AA:C0
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:77:a5:6d:ef:df:ad:0c:99:a3:d9:48:25:aa:45:c9:70:8e:
22:28:05:62:d0:6f:6f:80:f4:94:b3:d6:b2:2f:03:30:3e:fe:
6d:60:4d:26:6f:0a:9d:0d:ca:49:31:8e:fb:30:e0:27:9f:7a:
c7:b2:6e:d3:89:1b:1a:5c:71:25:fc:55:f5:77:f4:ef:f2:8c:
cd:a2:a5:71:39:ce:38:4d:05:df:b6:8b:92:bf:09:92:16:f1:
26:70:22:f5:cf:68:a8:4f:3c:c0:2d:8d:1b:a9:54:a7:11:c5:
cb:67:37:bd:ac:6e:37:1d:80:12:3f:8c:b5:1c:b6:9a:c4:dd:
c1:be:60:d0:2f:49:4d:ff:22:8d:fd:02:e4:0c:39:93:1b:2c:
13:aa:5c:5e:bf:69:c4:e4:aa:8a:d1:ae:5b:1f:5c:94:1a:b0:
a2:23:b8:f1:9c:e6:1e:76:fe:17:7b:dd:be:cb:60:7f:be:c1:
47:05:a7:0c:8d:9f:43:36:01:f0:64:72:4c:58:81:f3:a8:29:
34:e2:ec:7f:e7:76:47:ba:59:89:a2:28:34:e8:4d:2f:94:8d:
f4:39:27:e1:70:f6:5d:ff:e3:2c:1b:9a:a0:1f:a4:fc:35:02:
b0:e3:29:42:7e:1a:cf:32:f6:3f:ab:df:c8:24:32:28:30:91:
39:de:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:00 2025 by rpki-client