Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier: Ea3Ms/G8y5deNxT8XNvzP54CASb/EcoltRhkNfmhhEc=
Subject key identifier: E8:A3:CB:6F:98:A5:76:C1:55:62:40:08:DB:4A:7E:B8:77:82:25:4F
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial: 019A71B811B4B590F5B69F56B7B280153E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number: 03F0
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: T/qZhIYmbGZAOg+GSShfpqZpkhWEfXQD1eNBo2d8LX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:11:b4:b5:90:f5:b6:9f:56:b7:b2:80:15:3e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=e8a3cb6f98a576c155624008db4a7eb87782254f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:2f:be:9e:de:fc:66:b5:b7:6d:69:6a:28:
8d:4b:42:d6:c8:ae:23:13:bb:c1:4e:0e:e6:e0:2e:
20:68:7e:b8:2b:1a:01:81:09:12:a6:b4:42:55:42:
8b:45:2d:6e:e9:c0:47:de:c3:2f:19:55:37:f5:2c:
68:1a:eb:35:b5:4f:a5:e0:31:af:c8:4c:54:e2:b3:
fd:4a:93:06:3a:74:e5:51:52:f4:56:c3:cf:1a:ae:
ed:cd:ca:60:7a:c6:fb:ec:d4:44:15:69:de:19:89:
7a:9a:cb:e3:f6:60:e1:a4:7b:16:d5:31:ab:4c:fa:
05:ae:62:74:04:bd:5e:c2:be:8c:d7:9f:7e:f4:d4:
f5:ac:ca:9d:d4:6d:9e:e5:7e:39:2d:59:32:21:81:
ea:b1:ad:4b:8b:b6:a2:bf:a9:43:0d:ba:b9:5a:79:
2f:9e:bb:04:03:12:7d:e5:d5:18:c7:f0:f5:2a:3c:
4f:fb:2d:af:a2:78:bb:0f:8e:6f:62:f9:21:44:f2:
39:7d:f1:39:04:af:5e:a8:a9:a9:14:e7:77:47:84:
a1:f8:c8:95:96:ed:8c:1c:bd:60:9b:d5:27:38:7d:
1c:78:56:97:b3:96:95:dc:af:cf:7c:c9:cc:11:92:
fc:67:4b:3a:4a:d0:29:bf:75:a0:4a:a4:e0:e9:2d:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:CB:6F:98:A5:76:C1:55:62:40:08:DB:4A:7E:B8:77:82:25:4F
X509v3 Authority Key Identifier:
keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:af:1b:b9:5f:dd:53:2e:0f:3a:1d:5f:08:49:da:7b:51:b0:
b8:c8:5a:c1:1b:c4:b2:fa:57:96:85:ea:dd:66:ec:0f:81:e9:
88:c9:43:10:9d:cb:c2:57:fd:0f:00:52:79:c8:15:1f:94:81:
f5:b8:ed:78:7e:97:02:4a:de:93:8d:79:3b:bb:3b:1c:54:be:
4e:ab:bf:ca:7e:5a:32:0e:7c:1e:89:27:03:51:17:44:a0:43:
5a:f9:9f:3f:c4:a4:f3:83:6a:f0:88:65:08:f4:35:bd:a0:1d:
29:a7:89:df:97:3d:07:a3:ea:ce:cf:2f:cf:eb:cd:46:be:a9:
4b:fb:49:aa:f2:2e:95:d9:36:67:ca:04:a6:2e:77:42:a4:ea:
1b:12:3b:15:95:21:5c:6f:45:47:83:01:33:43:71:1a:71:ca:
54:23:01:f3:ec:6a:a8:0c:24:7f:38:da:23:00:27:a7:d3:55:
3f:21:a4:54:d7:14:41:e5:12:ae:c1:33:f9:d1:ff:af:ae:8f:
7b:d9:71:2e:92:1c:19:af:c8:67:4f:0f:76:5b:ae:3d:7f:db:
d4:e8:e0:8f:1f:1e:df:fe:c7:3c:b4:94:93:9e:c4:09:25:af:
b7:0e:52:70:8b:ff:2a:55:be:74:52:e3:21:e0:e5:8e:78:9d:
c5:8a:be:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:05:56 2025 by rpki-client