Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: /jeRTIJEIFt5TmQo4ZHQqZm5vCQHGQ0pTghVXI9Cmwo=
Subject key identifier: FA:06:1A:91:E7:DF:FE:FB:37:83:83:1D:18:BA:6C:F3:50:E4:1D:62
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 019A730122F5DD2BE30A8A5491537D35E0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 0932
Signing time: Tue 11 Nov 2025 13:00:45 +0000
Manifest this update: Tue 11 Nov 2025 13:00:45 +0000
Manifest next update: Wed 12 Nov 2025 13:00:45 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: mbnn9Z5zA0hn7ARhNPbHwltHrdfkBzZreoLuX63P5GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:22:f5:dd:2b:e3:0a:8a:54:91:53:7d:35:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Nov 11 13:00:45 2025 GMT
Not After : Nov 12 13:00:45 2025 GMT
Subject: CN=fa061a91e7dffefb3783831d18ba6cf350e41d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:16:9a:92:9e:72:3b:11:54:10:3f:09:f6:
7a:0c:5d:d9:ef:7b:35:cb:cc:57:38:b9:e1:38:8d:
c0:ba:10:8c:d3:4e:95:12:9e:a1:c4:99:92:92:4b:
4c:2e:2d:57:9a:81:87:fb:85:57:14:12:42:78:1c:
9e:01:69:0e:9d:fc:14:58:d3:26:9e:b8:4c:f3:ee:
e2:c0:66:95:5d:e6:7d:1f:ae:1f:20:2a:63:25:17:
ef:81:f5:49:0e:ad:cd:e5:95:3c:f9:e8:8f:29:06:
47:37:e7:3d:75:43:bc:9d:36:1a:b9:f8:52:bd:1a:
d6:69:0f:c2:2f:d2:87:3a:ba:56:94:ba:4a:7c:47:
9b:bf:e0:46:80:cd:e0:a9:a9:31:15:f1:39:dc:7b:
3c:cf:3e:8b:37:08:31:15:e7:4e:63:9d:04:42:99:
30:b2:35:87:13:3d:c2:f7:1d:3f:c3:be:dc:69:4f:
db:48:e9:81:9b:c4:3e:b2:03:51:01:91:ca:8e:9e:
b8:d2:f1:d3:97:f0:65:9e:7e:d5:76:9b:98:5a:6d:
86:58:f5:af:9c:93:40:9b:fb:c5:a2:d5:78:b6:49:
14:96:c6:ec:92:82:3a:9c:f8:ba:e4:ef:7e:3f:b4:
a4:38:f1:5e:eb:6a:4e:c4:cb:16:37:e4:b1:e7:8a:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:06:1A:91:E7:DF:FE:FB:37:83:83:1D:18:BA:6C:F3:50:E4:1D:62
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6c:f9:0f:00:2c:84:b3:39:41:7f:35:9b:05:ed:c7:39:dc:
42:66:d9:3d:8c:69:a2:40:72:c9:cc:94:87:91:f7:3c:3d:98:
38:3e:54:66:f9:50:cd:0c:d3:eb:36:d8:91:ea:52:8e:96:d3:
05:db:37:1d:df:6b:e2:54:3b:f8:42:a6:90:c4:e5:50:b7:3a:
f9:c9:9a:15:d2:a3:c3:0a:60:a5:27:97:36:22:b5:2d:f7:33:
ff:0f:f5:bf:fc:3e:59:76:58:d5:af:7e:6a:1b:d0:b5:d7:34:
ad:9d:0d:38:05:dc:dd:91:98:9e:9f:dd:eb:fd:48:87:85:af:
bb:38:bd:33:fc:65:24:0b:49:47:62:cb:94:bc:57:b3:18:5d:
32:e6:4b:34:38:69:0a:18:66:03:3a:85:fd:93:98:65:83:57:
5d:f7:8f:60:57:5c:6c:d2:48:96:a1:58:d6:88:a9:80:e5:8c:
fd:4c:95:05:95:2e:2c:8d:de:d5:73:08:9c:2f:b0:88:8c:56:
05:93:f5:c1:f5:7a:49:7d:5b:23:48:6a:7b:62:8d:66:21:98:
95:15:04:c2:57:27:1f:10:22:d0:37:53:66:83:d3:ee:9b:a6:
b9:f1:55:c1:5f:64:a0:db:69:ee:13:fc:6d:e7:9e:98:06:2b:
39:97:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:51 2025 by rpki-client