Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: e3ldWxwDIMJzAqQAAEhnMYhMrCo8ao0XWXMwvkcb7hw=
Subject key identifier: FE:39:EA:0F:F2:D1:5A:1A:0C:A9:C0:E5:25:83:B9:18:12:2F:66:98
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 019A70A50AEEB0211740A323F8FCDCE02310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 02:00:55 +0000
Manifest this update: Tue 11 Nov 2025 02:00:55 +0000
Manifest next update: Wed 12 Nov 2025 02:00:55 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: Y2LBPswHwfndoPp7MHvSFWVsNT15TXKaHEIknjLnyT8=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0a:ee:b0:21:17:40:a3:23:f8:fc:dc:e0:23:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Nov 11 02:00:55 2025 GMT
Not After : Nov 12 02:00:55 2025 GMT
Subject: CN=fe39ea0ff2d15a1a0ca9c0e52583b918122f6698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:cd:d1:8e:86:cb:bc:05:44:ae:17:a8:87:
b4:dc:5d:e1:a3:7b:e9:3e:cd:f0:f0:a2:fe:04:21:
bb:f0:7f:34:08:fc:39:0d:f9:d9:ff:e4:eb:3d:ab:
c4:2c:95:de:cb:d0:01:fb:ab:5c:1e:ba:e0:08:3c:
08:2c:2f:ce:95:95:91:db:d6:f3:0b:35:78:4c:bc:
b3:6f:79:c7:8c:9c:d7:ba:9c:ba:1a:35:32:be:73:
db:57:df:fc:8c:24:ca:9d:e2:45:c9:dd:30:e0:c3:
e0:91:be:73:4c:3a:4d:79:de:89:e8:14:8c:36:4c:
f0:63:26:f7:fb:2b:d7:09:6e:a8:3d:62:a6:9e:1a:
00:1f:f6:d2:e6:d5:b9:c0:ce:62:96:67:7b:5a:8a:
58:7f:ba:d8:4c:75:45:25:19:2d:d9:f8:11:0b:9b:
20:7e:b7:97:1e:fa:fc:f8:e6:12:41:9c:f1:6a:be:
6a:03:df:44:86:61:c3:0a:c7:f4:a6:21:84:2a:69:
9b:20:b3:cc:a6:62:81:6f:3a:05:dc:3a:fb:3e:bc:
71:24:02:46:a0:7f:b3:a5:26:f9:07:e4:1e:b2:71:
a9:5e:a8:88:30:25:91:71:99:df:91:a2:fc:39:6e:
12:be:b5:b8:52:ef:58:13:1b:0d:1b:8c:c7:d1:66:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:EA:0F:F2:D1:5A:1A:0C:A9:C0:E5:25:83:B9:18:12:2F:66:98
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:5f:c2:9a:c2:19:fc:96:f9:e5:ac:7a:82:63:0f:60:e1:
c7:aa:41:48:59:0e:95:63:f2:a9:e8:0d:40:54:c7:5c:e2:fa:
88:11:56:56:31:1a:4a:1b:e0:0d:61:04:51:44:a4:1e:40:7a:
1c:c6:2c:4b:a2:15:9b:3f:48:ec:06:6f:96:a0:17:46:df:9a:
25:9c:6b:30:c1:25:bb:b5:48:98:13:b1:de:89:f3:fd:fc:d8:
17:f4:d1:98:75:ca:89:f0:ee:cf:05:ad:1d:50:50:25:fd:8e:
93:f2:c8:5d:73:75:9e:95:6f:2b:cd:7f:34:e8:66:bb:05:1a:
12:dc:9c:2a:5c:6a:70:ad:9e:a1:62:c3:69:9c:1a:3b:7f:fe:
2a:4c:ba:55:08:01:e0:36:7c:1e:23:70:54:b8:6e:96:73:1d:
0b:b9:c6:c2:3a:c3:fc:60:5b:49:51:f1:81:bb:91:b3:7d:0a:
b9:4a:ce:40:2f:2c:48:e2:61:ed:0a:fe:f5:d2:48:d4:82:08:
8e:7b:83:cd:3f:95:c4:55:27:d6:10:bb:f7:f8:1b:dd:c9:dc:
d0:eb:a3:7b:7a:a6:e5:a0:04:f5:74:7a:01:46:95:01:56:70:
b4:72:f7:8c:69:7a:ce:52:49:4d:d6:10:b3:c2:c4:86:1e:eb:
63:42:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:30 2025 by rpki-client