Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: 8Xw6BKABDOeLbvZKg8VoIyWWdeFZxLA7wW6BVeh6KaU=
Subject key identifier: A1:3A:F1:30:7B:77:AA:C8:8D:12:3D:7D:E8:FB:76:AE:13:1A:ED:9C
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019A71B864FBA5A911A5CB22BDA369DD0A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:40 +0000
Manifest this update: Tue 11 Nov 2025 07:01:40 +0000
Manifest next update: Wed 12 Nov 2025 07:01:40 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: 5i5xZuM/8PbyaQ7PmMvOD++0wPsPy+F/sYMOmdh0/bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:64:fb:a5:a9:11:a5:cb:22:bd:a3:69:dd:0a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Nov 11 07:01:40 2025 GMT
Not After : Nov 12 07:01:40 2025 GMT
Subject: CN=a13af1307b77aac88d123d7de8fb76ae131aed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:74:eb:76:99:6b:7d:de:37:f2:1e:5f:24:
be:59:20:56:1f:e8:43:34:9a:e3:cf:9b:ff:4e:e7:
32:5b:4e:fe:71:49:c4:5a:e1:0f:87:1e:48:61:44:
4a:55:f7:22:cc:b5:60:ff:0e:27:99:51:84:ab:25:
b7:b5:a9:88:7c:17:32:fa:41:70:99:b5:d7:14:60:
59:f0:71:3d:44:69:c4:04:b2:95:47:50:83:fa:84:
62:af:d7:37:95:f0:6b:86:ca:ba:1d:bc:c6:3d:16:
a5:4d:e8:43:61:7f:df:70:99:c8:e5:b5:2c:2c:64:
92:7a:40:ee:5c:bd:c3:9e:82:42:7a:f1:09:1a:a8:
ee:3d:c0:72:33:47:f9:81:23:79:36:47:7a:58:46:
89:45:0d:09:dd:52:0a:0a:be:7d:0a:94:5f:59:7d:
c6:ae:0a:1f:2a:65:4b:4d:9b:09:49:a4:43:66:4f:
b5:31:e6:27:d4:d8:8f:b6:c8:79:9c:cf:3b:05:e6:
03:1f:2c:4f:9c:bd:29:a1:eb:ad:60:97:47:a1:ce:
2d:b9:9b:be:6d:51:80:89:03:4e:33:af:86:6b:b6:
61:43:eb:b4:19:13:e4:39:04:a2:22:18:8d:f2:c5:
b0:32:59:63:eb:cf:fe:39:3f:af:20:b4:c6:5f:b5:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:F1:30:7B:77:AA:C8:8D:12:3D:7D:E8:FB:76:AE:13:1A:ED:9C
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:93:15:e1:c7:b3:f2:d8:0b:0a:30:03:62:9d:f2:54:06:2f:
79:47:d8:32:35:84:a2:98:a3:7c:2a:8f:df:d7:0f:30:27:55:
d8:e4:66:9c:4a:1a:03:0e:62:be:b6:1e:51:03:22:54:76:d1:
81:04:3b:7a:a9:07:8c:b5:f7:7b:a9:d3:36:cf:e0:d6:6a:8c:
71:73:12:53:ba:97:6c:f7:d5:a0:8d:1f:d3:01:98:2a:c5:90:
9e:fa:7e:11:2c:5e:2e:ff:d8:50:df:79:46:eb:af:60:b9:65:
1d:99:bb:9a:1e:af:4c:4e:86:a6:25:49:0d:56:28:fb:df:02:
b6:2f:46:81:6c:b6:1b:5c:fd:de:2c:b9:33:62:cc:09:ef:e3:
1a:8b:9b:2a:d6:a3:fe:fd:62:5d:c2:3c:31:6e:71:4d:47:b0:
ed:f9:ef:09:46:72:51:c5:0c:53:0b:33:23:68:65:85:5c:3c:
ed:53:04:f8:7a:11:aa:36:38:84:b0:8f:1c:0f:a2:9b:c3:3c:
53:a4:e2:7e:86:bb:06:ec:2c:5d:3a:3e:08:23:22:5d:99:1d:
7f:b2:cd:ba:4f:75:cd:0b:17:a9:ef:8c:68:01:d8:3e:85:81:
6c:de:0e:ac:f9:96:95:58:1f:d6:98:d3:9f:cf:77:bc:ad:cc:
26:3c:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:09 2025 by rpki-client