Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: IH0qWC3opemPeBHc92Qj6xLCQBqlNC6fzVGxLEdU2+I=
Subject key identifier: 24:44:03:10:DF:AE:7F:D4:28:C2:1A:55:7F:3C:5E:80:45:71:25:F8
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 019A72261C3C358A0EF190F01F63066A679A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: Nr6yLdFIps/C6UkgBh5Vcad4MD2ZqDOqqXyqTul5dw4=)
2: vf_PL7Z26am-bUWHqusGVLE57ns.roa (hash: lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1c:3c:35:8a:0e:f1:90:f0:1f:63:06:6a:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=24440310dfae7fd428c21a557f3c5e80457125f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:8f:41:6c:0f:bc:64:aa:21:b7:27:29:98:
eb:fd:54:c3:a8:43:4b:05:d8:62:f1:23:db:1b:f2:
23:b1:59:10:e6:bd:ec:c1:78:97:8e:01:e5:8d:65:
95:9c:82:6b:74:3f:43:ee:22:a7:31:72:1f:ee:52:
40:75:27:06:2f:b8:1c:42:00:a3:38:57:db:ae:6c:
bd:e7:ac:5f:ea:4d:9d:56:65:0e:69:dd:23:cd:d5:
33:d8:dd:f6:3a:9f:17:57:5f:3b:64:0b:70:6f:fc:
28:e7:e3:c5:7f:e3:51:5c:64:f3:57:81:6f:bb:2e:
79:f9:65:c1:d4:fe:d7:14:c4:9e:09:65:b7:e3:c6:
d3:fd:92:84:f6:95:75:3e:09:0d:63:b9:bc:d4:b8:
7c:37:dc:ce:28:77:70:e0:9e:4e:4d:68:9b:d3:b8:
29:d8:46:8f:2d:9a:1a:09:b1:cf:bc:06:b3:b4:fe:
c3:31:61:d3:64:52:da:5a:22:04:e1:c1:55:52:af:
e8:ab:ad:fb:0d:12:eb:1b:cb:27:30:30:e1:53:ae:
56:a3:1a:62:e5:10:37:ac:80:47:28:d4:94:75:75:
4d:05:64:41:9e:e6:80:da:01:56:dd:98:57:c4:c9:
5d:8b:b3:97:59:a4:f2:2e:38:c6:70:02:fd:d2:57:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:03:10:DF:AE:7F:D4:28:C2:1A:55:7F:3C:5E:80:45:71:25:F8
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b8:17:67:63:98:b1:53:5e:f3:d1:5e:00:ba:b8:e6:cc:30:
94:71:3a:48:a2:64:ea:f1:27:63:1d:41:40:01:ee:7c:24:cd:
cd:5e:22:11:f5:51:5a:65:b5:ad:1e:0f:01:8e:2d:91:97:be:
68:66:fc:80:68:94:31:27:e3:e2:f8:58:a1:d8:fa:a5:30:bc:
7f:37:1c:50:d5:0c:b9:c1:e0:8c:49:03:fd:8b:1f:b2:dd:ae:
7c:1b:db:b4:52:07:51:73:09:b7:5d:79:b1:86:6e:a9:4d:37:
3e:8e:fb:2e:54:0e:bc:12:d6:fd:4e:d9:ce:1d:48:76:ea:f4:
3a:10:53:e7:78:3b:82:7e:83:e6:8c:99:ae:6c:e0:06:ef:d5:
f9:ae:91:bd:63:fb:12:79:a4:ac:56:59:3b:8f:bc:13:a2:20:
ed:61:ce:ea:79:38:f1:45:7d:43:23:b4:da:11:36:0c:91:1c:
50:bc:dd:10:ba:c6:fd:70:0c:9a:57:c5:ed:04:6a:47:fc:13:
a9:eb:b3:37:43:d1:9e:77:32:95:0c:00:7e:bf:9c:01:5b:02:
83:1b:f6:71:42:79:98:9b:ee:e3:5d:82:12:e6:3c:bc:33:99:
a9:f4:f3:75:9e:f5:ee:66:0e:c4:5c:63:ac:b6:0c:5c:e9:ce:
75:4d:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:22 2025 by rpki-client