Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
File: n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json)
Hash identifier: YDi5a5GJc43Gd4gQ+r18D6Q6Ivo/nUcqdBx13z/Vdf0=
Subject key identifier: 87:E5:FD:69:98:35:6B:87:38:89:35:EE:7A:B5:3D:AC:4D:F6:1E:3C
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial: 019A7225C14426C6271E1C8F06AF427219EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
Manifest number: 15C8
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: 0s4qQCxIyGVDx4CfZdPvp8eZaz0mujPK8gOC21+ZIDs=)
2: z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa (hash: gzKeSIds853lGCFoWu+NS/HRph4q2guB/dUt5Y5WdPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c1:44:26:c6:27:1e:1c:8f:06:af:42:72:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=87e5fd6998356b87388935ee7ab53dac4df61e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:9e:7c:e6:06:ec:59:d7:de:8b:35:41:22:
ff:3f:a6:07:ce:d8:e5:97:f0:31:4a:55:01:aa:12:
4e:98:9d:47:25:1b:66:7d:e5:d5:2f:11:48:9a:05:
4d:27:95:0f:bb:df:e7:90:5b:27:40:d8:bc:03:f7:
5f:19:d8:b0:97:6f:62:34:db:e8:dd:d1:d5:4b:d6:
ad:8b:ff:f4:2d:4c:11:5e:38:ce:9e:28:56:68:7e:
b1:36:7b:48:69:90:be:c1:09:b3:0a:77:db:57:b6:
87:47:5d:cc:4f:4e:be:f0:f7:6a:a4:14:93:50:c3:
6c:dd:7b:0a:bd:15:9e:de:5c:84:7e:9a:ed:f2:96:
d3:ab:e5:e2:86:01:73:1c:ae:03:d0:bb:01:42:00:
69:58:7d:aa:96:31:d0:75:17:6d:d3:36:00:4e:3a:
60:4b:0a:11:c6:05:4f:d1:e7:c5:76:5b:40:fc:bc:
1f:47:d3:23:ae:a2:9d:9d:2c:2a:16:2e:e3:6d:80:
fa:04:7e:44:7c:f4:68:1a:a4:08:b9:0b:d8:0c:90:
75:2d:e2:bc:59:10:f4:0b:ee:98:f7:be:ea:1c:d9:
dd:68:81:3d:92:08:0c:74:df:10:b3:16:9e:d9:c9:
96:c1:ff:ba:62:96:80:85:fb:9c:0b:e9:a9:68:3b:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E5:FD:69:98:35:6B:87:38:89:35:EE:7A:B5:3D:AC:4D:F6:1E:3C
X509v3 Authority Key Identifier:
keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3f:62:f1:07:f1:7d:5f:5f:6e:ea:f8:84:99:0b:92:04:c1:
b2:64:e1:22:12:12:22:fa:7a:42:0b:b6:33:2f:35:f0:6c:cd:
a7:47:8b:4d:dd:6a:48:2e:cc:0a:13:d9:1f:cf:f2:ac:bf:56:
73:8c:06:ce:21:08:37:72:af:2f:bd:1a:04:25:5f:4a:ea:5d:
dd:5e:39:0a:11:ee:84:4f:48:14:88:13:5c:63:b3:6e:1b:0e:
cc:14:ed:11:85:bf:58:e1:3b:40:aa:6b:ed:88:c5:59:34:f0:
1a:ad:e0:8e:d3:61:b4:72:ad:d3:c3:7b:f0:48:52:14:e3:c7:
39:5f:d7:79:62:a5:bd:23:54:75:52:3b:72:19:00:7a:b0:83:
a8:ec:91:e6:70:06:11:ca:10:83:5b:50:6c:cb:ee:bd:7a:7a:
11:50:7f:3b:a4:cb:7b:1c:91:05:97:2b:35:b9:d0:a9:dd:bc:
f7:84:7d:a2:9c:a1:d3:7f:2b:23:2e:a3:7a:4b:7e:55:c3:1a:
af:a9:a6:f0:9e:e8:e2:53:a3:13:64:9b:22:c3:45:c8:a9:6e:
c8:87:23:b4:97:8c:59:56:cf:9b:91:df:6f:1f:ba:0c:47:7d:
c2:d6:eb:8b:18:73:c9:25:79:3a:b8:da:7e:92:2b:bf:8f:e9:
d5:bc:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client