Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: t757DWenGGfYZoUIpZOjx9vLhquGfIsiF4qMwj1e0dw=
Subject key identifier: 75:02:A9:A2:E4:6F:38:F7:2C:64:CC:93:48:37:87:B4:24:72:72:A6
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019A70A530A4D71F979DC49FF461D8AB3FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 11C8
Signing time: Tue 11 Nov 2025 02:01:05 +0000
Manifest this update: Tue 11 Nov 2025 02:01:05 +0000
Manifest next update: Wed 12 Nov 2025 02:01:05 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: orkV4QwFi5zlkWn9tF73ue+hSjJoHkqBHFZKg60HMoU=)
2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:30:a4:d7:1f:97:9d:c4:9f:f4:61:d8:ab:3f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Nov 11 02:01:05 2025 GMT
Not After : Nov 12 02:01:05 2025 GMT
Subject: CN=7502a9a2e46f38f72c64cc93483787b4247272a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:fa:0c:65:2e:24:43:93:66:76:94:c2:77:
2c:00:7b:6d:9c:1c:61:07:04:3c:f7:6a:d2:63:02:
72:e6:3b:a2:f5:ea:04:00:16:5e:28:bb:1d:f3:e2:
05:2d:0a:56:3a:1e:5c:00:77:ce:d8:7f:c1:34:a5:
5c:36:9f:0a:fb:35:a6:ec:e3:e5:96:a8:88:57:24:
00:e9:d4:7f:dd:53:f2:55:be:01:d9:78:13:23:47:
12:b4:2b:23:8a:be:aa:45:b1:c6:36:6b:6b:57:cd:
08:94:47:a9:19:03:11:51:6a:3a:c5:95:45:33:94:
cf:02:79:d4:57:77:9a:08:4d:98:4a:ee:e9:f6:61:
61:5b:4f:c6:65:13:48:3a:7e:44:0b:a2:d3:b1:34:
8c:b6:8b:45:0b:14:9a:80:e6:11:f4:fd:90:de:f9:
9d:b4:2e:b4:49:06:32:c1:00:b5:56:e8:41:54:e6:
bb:f3:a4:17:65:be:29:9f:4b:54:cc:2b:c7:6d:42:
39:6d:80:c8:88:5d:5f:7a:49:d6:3f:ea:fe:81:7e:
e0:ab:a4:cf:61:b4:58:59:b9:98:4a:2a:7d:a1:c9:
a8:47:f9:aa:85:12:11:cb:cf:9f:bb:4a:1c:a6:44:
90:4f:92:1c:8a:f0:3b:03:ce:9b:b6:67:49:92:f3:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:02:A9:A2:E4:6F:38:F7:2C:64:CC:93:48:37:87:B4:24:72:72:A6
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:bd:55:ec:84:3e:ed:76:da:8c:1a:93:37:89:0f:0f:65:7f:
f9:19:fd:b6:d1:44:e6:8b:85:87:9e:6f:18:b9:2e:64:c7:9c:
51:dc:49:b4:f6:dc:eb:af:f1:74:b6:3f:72:a9:c2:0f:53:d6:
d9:fc:fc:19:01:91:60:7b:59:2a:ca:b4:4e:9f:02:c9:c7:8d:
43:23:4d:69:47:4a:6c:78:0b:c1:b6:22:3a:f8:c3:27:b0:0c:
fd:65:ac:58:52:b2:f6:bb:c3:91:e1:6d:2d:9f:f8:19:91:fc:
d9:a8:08:8c:e4:60:08:04:04:65:a6:7b:25:92:07:c1:de:d0:
14:cc:a3:56:e0:77:ab:8a:49:eb:46:b6:b9:af:a5:c5:ba:b8:
30:81:e8:22:f2:d1:0e:90:b0:23:46:2a:97:62:5a:7f:ab:5b:
b8:a0:c9:54:b0:54:70:10:77:ac:72:ef:cb:f0:89:06:6a:8d:
86:fc:1b:c9:fb:d3:47:1f:df:0c:dc:68:51:24:04:f4:22:7f:
60:81:a5:a4:33:95:1a:52:82:9f:81:be:58:9f:80:ee:92:c1:
18:86:da:97:c7:25:75:00:92:c9:1d:2e:66:23:09:dd:cd:c7:
67:3c:72:c2:76:8e:b6:da:01:48:20:9d:a1:ae:d6:b6:96:5d:
4f:0d:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:53 2025 by rpki-client