Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: 3scekqh7vnHUyA4Ia13lD0+86G3GgtpDr44/poDXDFY=
Subject key identifier: B4:34:78:43:1A:69:82:AA:57:A6:1B:27:16:8A:82:2B:34:7B:E0:64
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019A72CA2A045ACF31612098F30AF24CD0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 06A0
Signing time: Tue 11 Nov 2025 12:00:42 +0000
Manifest this update: Tue 11 Nov 2025 12:00:42 +0000
Manifest next update: Wed 12 Nov 2025 12:00:42 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: 6iV1DOvXWLa81ziFakn+cack23S889Qr2hCBDnjfa14=)
2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2a:04:5a:cf:31:61:20:98:f3:0a:f2:4c:d0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Nov 11 12:00:42 2025 GMT
Not After : Nov 12 12:00:42 2025 GMT
Subject: CN=b43478431a6982aa57a61b27168a822b347be064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:6f:d0:b6:9d:69:e9:d1:c3:29:14:e6:4c:
2d:6f:60:3b:2b:a8:bc:6e:9e:75:5b:63:f2:1f:55:
19:c9:44:18:cc:f6:3e:d1:76:43:f8:c9:13:07:fc:
90:cf:ae:ec:dd:72:46:d5:44:71:c3:1a:80:0e:31:
37:25:76:85:d9:55:b6:91:9f:38:46:0f:4e:d3:8d:
dd:bf:04:e7:3b:d5:bc:0d:16:0c:10:a1:cd:2c:51:
ac:89:3a:b1:26:c1:a9:39:c3:78:8f:04:57:22:d4:
a6:f5:e8:22:3e:a4:47:71:42:47:4c:22:95:66:86:
c1:45:88:82:27:fc:24:dd:b0:ac:c2:f6:88:b9:7c:
98:9b:54:92:a9:1d:aa:f2:91:d2:61:59:a3:fd:5f:
e9:e6:fa:34:65:3d:98:4c:be:c3:17:a3:af:49:26:
26:84:a9:8f:26:dc:4b:73:71:6c:32:a2:37:67:20:
f0:08:a1:e3:29:d0:19:c7:60:58:e3:eb:9c:96:88:
e8:c6:9f:81:fe:44:9b:ad:9e:f7:0b:82:1a:49:fe:
89:c4:d6:78:ac:b8:eb:bd:7e:2e:ef:8d:96:a9:f1:
a3:58:2e:23:b8:16:b3:5c:5f:5e:2f:58:ba:1d:95:
e3:8c:7f:b5:02:ba:bc:71:78:da:4d:7b:fc:37:c7:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:78:43:1A:69:82:AA:57:A6:1B:27:16:8A:82:2B:34:7B:E0:64
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9b:fa:e0:49:9d:de:d3:cc:0e:08:19:93:e9:98:a8:d3:8e:
35:0b:7f:bc:f1:ff:56:3f:6a:cb:26:b8:9d:00:72:ae:3c:09:
6c:bd:43:15:49:ef:71:e0:e4:5a:13:bc:2c:52:06:ee:aa:5a:
da:22:f0:f0:47:d8:da:cb:fa:38:ba:af:fb:5a:5c:18:44:aa:
94:a0:d2:f5:4c:1a:7b:10:8c:3a:06:82:8e:35:e8:35:79:cb:
67:77:0f:9d:86:d1:d5:85:04:49:3a:dc:19:bc:12:d8:3b:69:
81:88:03:0a:a9:c4:5b:5c:2f:39:d7:40:d9:71:08:72:7a:38:
d3:a5:f0:0d:3e:ba:49:59:a4:e7:be:82:b7:c5:ef:5d:76:6a:
ba:3f:72:ac:50:fa:04:71:39:95:a6:9c:c2:35:b9:db:f9:22:
0e:c2:8b:7b:e1:77:17:4a:7f:58:33:15:ce:23:81:1a:18:93:
6b:b1:a8:a5:fd:e6:e5:26:cb:5b:96:df:d2:65:5c:07:8b:b6:
f9:6d:95:3d:d9:f8:aa:ac:63:06:fd:d3:5e:b4:43:61:31:24:
bb:7b:57:04:22:ff:22:04:0c:83:8a:d3:98:ba:90:a1:5d:31:
f0:2c:73:de:b8:2e:b3:7a:ab:1b:88:ed:18:c8:0d:4d:33:05:
fd:86:a1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:21 2025 by rpki-client