Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: xWO50BtxiJwDv2E+wtOcGoCYMGHxgIo1FVOwTfOVacQ=
Subject key identifier: 2C:DE:53:E7:9F:89:0A:51:FE:7A:24:BF:0A:93:FC:13:D6:87:9F:E7
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 019A70DC592CFAA8BB9DF73E6B772E25B219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 04EF
Signing time: Tue 11 Nov 2025 03:01:20 +0000
Manifest this update: Tue 11 Nov 2025 03:01:20 +0000
Manifest next update: Wed 12 Nov 2025 03:01:20 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: ly8Us/YmTjfIPudHsI9xOIxa/zE8GxVcItOB2C8Xl0Y=)
2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:59:2c:fa:a8:bb:9d:f7:3e:6b:77:2e:25:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Nov 11 03:01:20 2025 GMT
Not After : Nov 12 03:01:20 2025 GMT
Subject: CN=2cde53e79f890a51fe7a24bf0a93fc13d6879fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:1e:81:d7:b6:63:8d:04:dc:7a:16:24:54:
ea:03:ae:0f:1f:4c:7a:a4:e4:a6:e0:2b:f7:90:46:
ae:29:80:f8:3b:13:a1:24:42:39:9c:15:02:42:3a:
d8:f9:d5:0d:fe:cc:97:b5:52:ea:5a:b7:24:9f:09:
2f:95:7a:a7:76:39:ef:0d:bc:d4:6c:72:95:e5:78:
74:35:61:f6:ac:c5:3d:7f:28:ae:8b:46:a5:55:d9:
1c:97:28:15:c5:20:e3:3c:ef:f8:e7:90:fe:ae:82:
0d:bd:82:2a:4f:ea:fc:db:c9:ec:ae:9b:99:fc:71:
32:63:a0:74:c6:1d:07:22:46:68:58:50:bd:05:f6:
b0:c0:36:e7:7d:de:52:09:22:5a:03:db:38:7a:e9:
39:39:97:f7:b5:b7:f3:66:03:e2:cd:df:5b:c9:d1:
a2:8f:e2:24:66:f6:3a:93:c4:b4:e1:16:62:83:a0:
51:ae:97:3e:c5:af:63:10:53:16:ee:31:fd:c0:69:
86:67:ad:b1:b8:21:83:b3:0c:5c:d7:f7:66:fc:34:
a1:37:c5:8f:23:ad:52:00:3c:5f:0f:72:69:b5:68:
ae:59:67:70:66:c4:53:e5:97:5b:f8:6e:11:5e:12:
ce:ae:55:29:d4:77:1c:57:f8:4f:47:4a:98:d5:63:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:53:E7:9F:89:0A:51:FE:7A:24:BF:0A:93:FC:13:D6:87:9F:E7
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:67:8a:17:55:15:44:df:96:0c:d5:fe:20:5d:ae:3c:79:0c:
94:b4:c2:4d:8d:90:43:8d:96:1a:d6:65:db:29:e0:75:e1:58:
d6:11:cd:7f:a3:be:5f:df:2b:a5:35:23:ea:76:49:1d:b5:ba:
74:c4:a5:e5:3b:b0:cd:69:b4:6f:63:50:c0:05:bb:6b:01:96:
56:7e:fc:44:93:02:6d:77:06:dc:f3:2d:b4:ba:e4:ba:29:6b:
8a:1c:21:16:2f:86:d8:f0:01:33:0f:39:37:03:36:c9:48:af:
4f:cf:cb:5f:82:fd:f6:56:a7:04:aa:d2:3d:99:8a:4c:dc:d7:
c5:2d:c5:3e:fa:02:b0:a4:02:c3:56:49:47:48:cb:1b:c7:e5:
ae:0f:4f:9a:25:84:a4:c2:dd:50:3b:22:11:57:8e:04:a0:ae:
9a:15:ff:ce:8c:52:e2:3b:bd:75:66:8c:61:b4:47:41:ca:a0:
4f:d0:e6:ea:f6:35:1b:af:18:f0:86:6b:b8:e0:b3:6f:d7:c7:
c4:49:e3:e9:9f:38:2f:df:a0:21:06:b3:a1:63:8f:15:0c:df:
1b:49:f1:8e:6a:98:19:b3:94:cf:bd:18:ca:e5:41:9d:43:3e:
d1:5d:f8:2e:c8:26:b4:b8:ea:b3:02:bb:cc:2f:96:91:1f:57:
47:e0:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:46 2025 by rpki-client