Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
File: in1zAecVR30mgJu6u0zQMr07Vhg.mft (raw, json)
Hash identifier: EVNAVoo2jhlndXqP8QfIXKgu6tek/s0EIu8MJChE828=
Subject key identifier: 00:78:F5:F8:BC:80:CA:CA:EB:0F:21:6B:8F:68:15:E5:0A:53:32:67
Authority key identifier: 8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
Certificate issuer: /CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Certificate serial: 019A70A4EBEE72A533AD1187DB81CB5EAEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
Manifest number: 03CD
Signing time: Tue 11 Nov 2025 02:00:47 +0000
Manifest this update: Tue 11 Nov 2025 02:00:47 +0000
Manifest next update: Wed 12 Nov 2025 02:00:47 +0000
Files and hashes: 1: in1zAecVR30mgJu6u0zQMr07Vhg.crl (hash: DQM+WKS2nKlWtmGMushlbETK8QdNcKIcArHQHzw8SsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:eb:ee:72:a5:33:ad:11:87:db:81:cb:5e:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Validity
Not Before: Nov 11 02:00:47 2025 GMT
Not After : Nov 12 02:00:47 2025 GMT
Subject: CN=0078f5f8bc80cacaeb0f216b8f6815e50a533267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:ce:96:40:6b:97:6b:b0:0e:0d:ad:00:cb:
b6:43:dc:26:f5:9c:65:48:d1:e5:2f:93:30:7e:4b:
e8:98:7a:35:54:0c:ef:bd:bf:25:b7:23:78:3b:08:
d8:cf:4e:d9:ab:6a:a9:9d:c6:3a:19:5b:fd:68:a3:
ff:d0:01:b6:11:a6:55:f1:de:ce:20:33:6c:30:08:
92:7d:3e:be:43:f6:b3:ba:89:cb:7c:92:de:e6:c5:
62:c3:75:c5:e5:c7:a1:63:f7:d5:25:5b:6c:3f:49:
9b:23:ed:86:6d:b6:ac:fa:15:80:bd:f6:ca:b7:12:
31:df:58:cc:b3:60:c6:39:21:6a:ed:98:bb:8a:48:
c8:cf:46:a0:ca:a3:e9:b5:12:74:d9:47:e1:52:a1:
67:21:4e:76:29:13:f3:c7:52:89:ec:11:ef:82:54:
ea:33:fa:87:58:f9:cb:ce:e6:76:d1:6b:e3:21:03:
41:25:b7:bf:88:91:4e:5f:fd:5c:49:bb:3a:e8:9e:
dd:7b:be:6e:e8:38:6c:c7:45:48:2b:e5:6b:9e:00:
d8:50:c0:b2:64:21:4c:3a:65:fe:f0:de:00:f0:e5:
bd:05:00:ad:e1:94:23:b6:82:df:e2:05:e8:26:0f:
88:b1:e1:a7:c9:8f:f3:0e:4f:57:26:61:e9:3d:39:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:F5:F8:BC:80:CA:CA:EB:0F:21:6B:8F:68:15:E5:0A:53:32:67
X509v3 Authority Key Identifier:
keyid:8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:15:e6:42:9d:be:5f:85:1a:d7:a5:02:b9:35:56:b5:a5:da:
0c:2b:8c:69:67:57:40:66:6e:96:47:6d:a4:93:55:8b:4a:ad:
76:e2:0c:af:8e:a1:f1:dd:a2:1e:22:49:b2:8c:b7:b0:0a:3d:
76:9c:c4:1d:c3:80:2f:e7:ca:f3:b7:bb:43:ae:f6:29:7a:a1:
54:3c:42:e7:87:4e:a2:83:dd:88:ab:89:5c:7e:fb:ac:c5:33:
43:a4:9a:a2:21:64:bd:4e:b2:f1:95:ec:e4:d3:72:c4:84:80:
65:a8:cb:26:d0:db:84:81:44:bd:7c:78:88:80:38:da:cb:84:
53:9f:94:63:d8:f6:6f:24:1d:de:97:7f:89:42:05:8a:68:d9:
22:46:23:da:dd:74:f4:88:83:1e:6a:de:c0:66:87:d3:3e:88:
f5:f6:7b:cb:30:ec:92:9f:d8:b9:3c:f5:c0:c8:29:e9:85:70:
99:90:f1:f7:0a:c2:24:aa:65:8a:63:b4:b6:97:56:3b:4c:96:
90:88:04:a9:70:be:c4:b1:85:89:99:64:07:4d:3e:b7:fe:d3:
d7:69:39:94:a1:04:58:fa:9a:f5:ea:a4:dd:be:c0:33:30:38:
ea:3a:14:d4:d1:51:e5:fd:7f:ca:b3:ad:21:47:bb:26:d1:33:
cd:4a:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:43 2025 by rpki-client