Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
File: 8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json)
Hash identifier: kn5KChIDoSSOr9LaZhoAhmF2oocHRun/a0SYsIN7wYM=
Subject key identifier: 27:91:81:94:5D:75:B4:9B:71:DA:0D:2A:82:B0:25:98:D0:B9:61:80
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Certificate issuer: /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial: 019A7293867FCC3D3F1DB8BEBC99F187E82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
Manifest number: EC
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: SF6zlTq1V7SjS39Y6xk0oGu7c6nSG16VoYWsK4lr8jA=)
2: kfUoGqSXXKSaS-PEIgtGaao6Ro0.roa (hash: LjonqlIQc85Yf1YLDViU9RKSdWSeDZPSWNCbM4dAk5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:86:7f:cc:3d:3f:1d:b8:be:bc:99:f1:87:e8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=279181945d75b49b71da0d2a82b02598d0b96180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:2c:c5:88:b2:db:00:8f:82:27:b3:11:ae:
a5:61:0f:72:fe:4f:c5:16:86:db:34:e5:0a:b8:c9:
c9:2f:e9:35:ab:3c:ff:e0:27:b3:6f:56:03:f0:16:
c0:0a:60:42:78:cb:6a:5a:51:f4:4f:4e:91:c6:6d:
79:2f:25:5b:b2:42:a3:9b:64:26:11:2f:01:27:ea:
48:6d:30:fc:0a:df:6f:cd:58:5c:66:14:fd:5f:59:
d4:4a:a0:64:76:c4:eb:c7:37:9d:ee:26:af:23:b3:
b0:2d:39:f8:4b:45:5f:c6:87:4e:32:10:4e:95:bc:
a3:a1:5b:61:3e:7c:5d:bf:9f:26:5b:2f:b0:5d:6e:
fd:85:81:e7:bf:83:09:16:38:cf:a1:fa:bc:a3:6c:
c5:dc:2a:52:ce:1d:ac:48:58:b0:e3:18:3a:55:1d:
71:e4:98:9b:20:61:68:13:55:c2:57:45:b4:c6:90:
1a:ba:d6:be:c9:aa:13:d1:2c:32:25:85:a4:55:84:
61:96:16:ff:e1:71:7c:ec:20:ce:f4:19:63:97:64:
a6:43:86:a0:3b:56:18:be:63:4e:38:26:10:da:ae:
7e:60:b0:17:d2:42:41:6c:0c:7c:9c:12:04:80:63:
1a:c2:12:65:aa:e4:ac:7b:9e:54:d8:cc:f6:1c:d6:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:91:81:94:5D:75:B4:9B:71:DA:0D:2A:82:B0:25:98:D0:B9:61:80
X509v3 Authority Key Identifier:
keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9f:02:1f:24:14:f6:78:d2:61:20:b1:27:79:5f:bf:66:6b:
6c:dc:47:d6:93:20:9e:92:c4:76:26:2f:ae:c7:9e:62:f9:df:
b7:b1:08:37:05:35:bd:4c:28:9d:36:4f:7e:da:11:e3:5f:6f:
ed:ab:6f:87:b3:f5:3c:41:7c:4a:c4:2e:4c:b0:d2:f9:67:7b:
c7:f4:c7:88:46:c8:3e:84:e9:b2:cf:b2:18:26:ed:5f:1b:85:
60:25:6a:bc:58:24:e0:4b:5a:0a:24:8d:43:c6:e9:24:fe:c1:
a9:86:c2:41:58:12:6b:d3:db:30:32:bb:1a:82:db:97:a0:56:
c6:29:51:72:31:e6:c6:2f:05:10:20:78:5d:03:66:14:44:8e:
fb:1e:da:4b:28:32:aa:6a:d4:88:8e:6a:46:bf:b5:f1:38:a8:
40:96:4e:70:5e:d5:ca:12:5b:c9:ae:86:c3:37:38:6e:c0:70:
57:ab:8e:df:72:9d:81:d0:30:ef:64:a8:95:f2:bc:06:23:fb:
d9:97:4a:88:20:d7:3b:d3:ad:e2:ef:27:23:d1:34:37:b5:13:
4b:5a:b4:c1:7a:c5:d0:c2:26:ed:db:ed:80:03:6d:83:3c:a1:
ae:e6:4d:0c:c9:cf:3a:40:16:1a:f5:f1:7b:44:01:56:e0:05:
64:a3:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:16 2025 by rpki-client