Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: oiQXMYheQax2QoZyWIMsHeDNHiCcgY/JdjrHm9iofxs=
Subject key identifier: 21:96:62:C8:06:C1:F9:B7:55:18:73:25:8A:46:D9:79:11:FC:BD:7C
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 019A725C7A9342D32D340B90A291CDBCD722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 1393
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: AZ/7ZE1s6Fun5wE6+aC1ZkDT3u0rRn1vll2jqDpiDg4=)
2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7a:93:42:d3:2d:34:0b:90:a2:91:cd:bc:d7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=219662c806c1f9b7551873258a46d97911fcbd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:8d:6f:08:e4:29:18:50:7d:01:16:93:e2:
ff:0a:a8:d4:28:5f:e6:5e:bd:e2:b6:19:81:5b:1b:
9e:c4:ae:d4:7e:60:dc:61:7c:76:ee:04:cf:e3:60:
55:9c:bc:a2:72:a0:db:fb:64:e5:e0:3b:03:d7:5d:
0b:3f:d8:27:f6:63:b8:9b:41:22:3e:e3:ca:88:fd:
a0:84:82:3d:a4:88:3a:7b:10:95:ce:03:73:28:8b:
47:1d:f7:23:56:13:2e:06:6c:0d:43:da:ab:22:45:
27:07:58:fa:c7:63:2e:28:dc:18:a0:f2:ca:ea:26:
ee:42:ca:da:fd:67:4e:cc:39:27:e1:2c:54:d1:6f:
0b:2c:f9:1c:b9:b9:01:a6:10:35:0f:86:d2:ea:3a:
8a:f8:1c:53:29:98:37:5c:d8:92:bb:06:d3:b7:e6:
06:d3:14:32:75:48:60:21:8a:48:ca:b2:7f:5c:f3:
ac:58:a9:1f:c9:47:8f:85:47:2f:cb:6b:ec:6b:aa:
45:0a:ba:eb:97:e2:a4:0f:16:8c:5b:6f:db:95:9d:
8f:04:d6:17:84:08:e1:45:ec:d9:32:58:78:23:79:
57:d6:a1:13:ad:d9:0b:87:d1:29:01:97:62:f6:98:
9b:31:31:a3:0c:58:b0:5f:9c:0b:f7:f9:16:20:a8:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:96:62:C8:06:C1:F9:B7:55:18:73:25:8A:46:D9:79:11:FC:BD:7C
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2a:a2:53:1a:72:04:6d:dc:ee:f1:ca:d4:51:4f:b6:ec:82:
51:a0:5a:7f:53:89:c8:1f:86:1b:5a:a6:f9:ef:b6:86:5b:cf:
21:e2:8c:17:ac:4c:64:6d:9f:b2:8e:c1:e3:47:5d:28:d9:b4:
96:5b:72:13:a6:3b:8a:32:9a:dd:b6:9e:a4:fd:9d:ea:80:ea:
03:ad:6d:cd:46:c0:76:e1:59:6d:80:74:62:10:ff:8c:bc:b0:
5c:89:65:1d:19:58:ab:a0:10:62:36:0d:2d:fc:e8:d7:96:9c:
e4:82:07:96:c8:23:1b:9c:52:f9:01:49:5c:3e:02:0e:ce:22:
c5:56:64:72:ae:87:cf:19:0c:90:05:0d:29:17:a6:ba:2f:33:
76:19:cd:61:37:96:04:49:86:86:a2:0a:20:e5:da:5d:0a:fc:
cb:56:d4:c0:0d:d0:72:29:11:53:4e:69:27:c3:0b:bd:3b:76:
52:5c:15:b9:1c:f8:de:62:f6:4e:bf:87:3f:85:ee:f7:b5:08:
16:e7:2a:22:dc:1f:b7:22:ef:37:e8:c7:bf:5a:43:43:88:69:
47:1f:0b:5b:d3:dc:b5:6b:e8:30:fe:c2:f9:d0:a2:85:af:d7:
50:af:50:e9:37:41:57:df:ce:cd:cd:d4:1a:4c:bf:f2:53:14:
73:2d:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:46 2025 by rpki-client