Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
File: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json)
Hash identifier: AR+OWTB7KzUv/loY7adDdkWg9LKi8CN14n6UiFwhmTI=
Subject key identifier: EC:F5:6E:DE:B6:E1:6D:D7:A9:04:52:2D:3D:6B:B7:14:20:37:0B:7A
Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
Certificate issuer: /CN=77c15521fed90d114e7635310b307f553f57d26c
Certificate serial: 019A71B89EA0A2BFBAE9F6CD53A59B798BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
Manifest number: 0F08
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: dGFxFXNwNsTpRQSKJ7rD8TK0DOZG4YhUwDBRyqp1Tw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9e:a0:a2:bf:ba:e9:f6:cd:53:a5:9b:79:8b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=ecf56edeb6e16dd7a904522d3d6bb71420370b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:ac:23:5c:4e:fc:70:69:33:54:5c:4b:d8:
db:af:d2:65:81:e6:18:45:ad:f5:1b:db:c8:2a:0f:
85:d9:8a:fd:ef:aa:4a:74:9e:f9:5a:98:f1:e6:12:
f8:44:6a:a0:e3:48:e5:ed:ba:8c:99:91:22:30:83:
07:74:b8:71:02:8f:d7:43:8c:fc:91:28:2e:69:9a:
00:c5:3a:ec:6a:cb:34:91:cf:ac:48:3c:dd:02:a5:
ee:29:23:a8:e7:ff:a2:a2:29:f1:67:3b:42:c5:88:
0b:3d:74:37:bd:b6:a5:ed:94:6e:e8:02:81:db:c7:
cd:10:47:2b:d3:79:f6:53:8c:d6:87:24:28:c1:00:
51:7d:e6:cf:c9:97:87:a6:2c:ff:1e:ab:9a:37:a9:
2a:48:31:86:f4:02:e0:e0:43:be:a7:64:59:e9:40:
58:43:23:05:ba:8e:9d:0f:76:45:4c:33:0f:c9:13:
8a:3b:cb:83:53:ff:7c:8e:73:17:3a:f6:85:0e:5d:
55:5a:38:65:4b:de:bd:89:54:ba:24:f3:78:fb:0b:
01:aa:33:83:84:63:e9:07:b0:06:6b:14:d4:8f:95:
23:90:bc:b5:2d:ef:2c:47:9d:5b:61:95:ac:ef:5e:
0c:48:92:99:c4:3f:32:ba:97:2e:c6:18:5d:6d:de:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:6E:DE:B6:E1:6D:D7:A9:04:52:2D:3D:6B:B7:14:20:37:0B:7A
X509v3 Authority Key Identifier:
keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bb:38:ab:f6:a6:86:f7:d9:a1:f2:04:ca:a2:31:7e:5b:03:
1f:07:d7:e7:40:a6:13:54:67:26:54:90:e5:f7:b2:ef:94:4f:
d1:34:f4:01:83:76:94:db:fd:1d:57:dd:40:9e:54:7c:79:93:
8e:84:41:92:be:86:4c:16:d0:f8:7c:04:3c:e5:65:94:f6:79:
4e:ef:ec:52:23:4b:d2:0e:77:18:31:ec:12:dd:e1:ff:0b:e4:
6f:d6:b4:20:17:e1:d3:8e:fc:68:45:10:2b:99:d6:47:8e:6b:
be:79:44:62:dc:41:a4:15:92:86:0b:cd:3f:5f:48:53:75:36:
77:a0:8d:71:25:3b:e8:78:4d:88:af:e8:e0:73:da:47:34:26:
04:33:04:d0:bd:09:0f:eb:ea:83:7e:f5:51:92:d7:02:fd:72:
45:91:b6:54:33:9b:a6:b5:5e:e0:44:61:28:b7:7c:42:9d:59:
28:d7:19:d4:40:28:b3:7d:ed:35:27:85:ac:ec:6a:5b:1c:08:
08:2e:9d:02:0d:77:0a:0a:29:66:15:cb:05:d9:98:44:4f:b0:
b4:6f:f7:7d:22:5f:72:92:fe:a7:94:94:12:65:ce:06:a5:f8:
01:a7:52:7e:22:f7:b8:6d:58:19:b6:66:3b:df:f6:70:c7:df:
a3:59:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:50 2025 by rpki-client