Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: UKjyyVbXYqJrbn+UdnVclfq5D7H1nKI0BRmZj0mbXHc=
Subject key identifier: 11:E1:77:05:64:2F:46:7C:5B:67:BA:51:77:E2:B2:FF:AB:70:0F:CC
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 019A725C3CB51517481690BA85EF5859EE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: nE4uDDl6Fj7JXi4iPhm+cD2ZIUd//CsYKzKkm8tZ9sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3c:b5:15:17:48:16:90:ba:85:ef:58:59:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=11e17705642f467c5b67ba5177e2b2ffab700fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d1:ef:3a:5e:09:b3:ba:d2:42:46:ef:5d:54:
66:14:e5:da:26:64:ef:3b:ca:f3:ef:83:c9:e8:18:
1e:7e:fb:76:0e:ca:2f:2f:c1:a8:8a:80:39:fa:7b:
32:17:0d:5d:e1:68:cc:de:89:77:3a:3b:d1:34:73:
b9:18:18:af:e1:2c:21:c9:d0:6d:5b:6b:02:eb:c9:
70:7d:ce:8f:b9:b1:78:78:88:e4:3d:01:ed:fb:0d:
f7:f8:51:65:0f:b4:a1:5b:fc:e1:46:14:28:16:f3:
50:8b:be:3b:9a:fc:3d:11:b2:2f:97:71:c7:97:b3:
cf:ad:f0:4a:62:85:fa:2e:b6:14:de:3f:0c:2e:de:
50:2f:30:8e:3a:b6:8c:17:0a:52:24:4f:9d:76:65:
2c:2e:98:4d:a2:ff:bf:18:c0:2c:75:92:e7:e8:4c:
68:8d:59:ad:5b:0a:16:cc:99:38:10:42:b2:70:a9:
d3:7e:f1:2f:51:62:56:34:31:78:3b:23:72:9e:70:
38:65:48:5d:9a:0b:cf:26:9e:7f:d5:fb:0e:c9:09:
e3:ff:57:c7:2b:c9:5a:75:9f:25:23:95:f5:80:8d:
4d:b6:eb:60:22:86:91:9d:ae:f5:bc:68:14:5b:d9:
63:ef:12:42:70:ca:ea:77:32:0c:2a:ca:d5:4a:db:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:77:05:64:2F:46:7C:5B:67:BA:51:77:E2:B2:FF:AB:70:0F:CC
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:72:51:0a:7e:03:60:fd:9c:a5:a9:c0:e8:be:be:25:ab:40:
b4:cd:31:cc:28:21:f5:58:aa:7c:f7:ef:e0:8c:2d:d6:18:b0:
d6:cf:59:b0:7b:d0:33:9d:df:44:65:f1:b3:d6:1c:3e:a9:80:
61:8f:89:0d:26:9c:2b:57:62:ce:6e:f8:7c:cc:a3:07:6a:d2:
7a:4e:2e:74:24:59:85:f2:97:82:c6:69:9a:b2:78:4d:d8:e4:
12:65:ee:73:51:06:c2:c2:cf:4b:87:c6:55:93:65:4a:48:f3:
40:df:a5:f1:49:26:55:ce:d7:32:64:90:93:07:6c:1e:7d:98:
6d:ba:2d:dc:b8:5b:4d:c1:df:29:95:37:fa:57:a8:56:90:31:
2e:e8:c4:ad:1a:0a:e2:06:d5:01:ed:ed:30:b0:53:bb:c3:91:
fb:a1:78:b1:0f:77:80:62:d0:d7:1c:fb:98:e3:e2:82:19:2f:
3b:3c:e3:d7:02:98:d2:4a:c8:9d:1c:03:3f:d8:f6:a5:9f:8f:
b9:83:e4:02:51:f5:15:36:55:bb:38:db:83:40:9c:5e:99:18:
a7:27:1b:1e:3b:2b:6c:21:05:69:96:b9:b7:60:de:6b:8a:2b:
72:80:1b:04:29:67:b1:74:f3:f4:33:03:3d:15:a8:ea:01:be:
c3:03:c8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:00 2025 by rpki-client