Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File: t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier: w9qxL2CLfGtTnBJ6iPvfk2MexWGfd0mj2TbLzrUA6ok=
Subject key identifier: 65:D9:EF:D1:75:8F:47:E0:DC:4F:75:F0:1D:57:61:41:B2:FB:3A:27
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial: 019A72CA40C0C253D391136F7CE0ED2A9524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: INh9G5iQoMvQ_1itqGn6rIFWztw.roa (hash: DlHpU6WxKqPj/r93yoW9dLdgNHjiaW8IJyXbLuzYYAg=)
2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: vy8NirK1uu6GxcXDZVhm1DV9ASLVLZMbp+1QalhZ/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:40:c0:c2:53:d3:91:13:6f:7c:e0:ed:2a:95:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=65d9efd1758f47e0dc4f75f01d576141b2fb3a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:31:e3:b0:0f:21:a0:df:1a:da:39:49:f7:
2d:12:06:9a:21:2c:fc:29:9c:29:f0:7c:84:5d:0c:
8c:bc:01:99:cc:c4:41:35:a6:75:b9:03:4e:f5:94:
0d:07:8b:ce:36:2e:09:37:57:e8:21:73:5e:e0:9f:
41:61:7d:6a:58:f4:67:ef:ae:18:53:95:e2:04:0e:
b6:a7:02:e3:71:62:88:20:13:3d:fb:cb:10:de:38:
93:ac:b8:ba:53:0c:79:c2:fc:38:00:82:ad:e9:5a:
05:e7:92:a5:14:00:71:16:2f:ad:96:b5:3e:7d:5c:
94:36:d8:33:6a:0d:59:e3:65:60:75:ff:f9:ae:f2:
f5:3b:50:3b:17:2a:a6:a4:d7:59:b8:07:38:52:18:
1e:53:c8:e6:f3:f1:ed:f2:b1:13:b2:9a:5f:8d:3c:
2d:90:bc:8d:b0:f1:c5:b2:72:82:bd:f5:77:ce:82:
f6:d3:ed:76:e0:f8:11:b9:75:f3:66:d6:7d:82:06:
cf:3a:1d:11:43:96:b5:9d:32:fc:1c:d8:78:cb:b5:
82:dd:70:fa:82:00:cc:5c:0b:e7:b3:d5:bc:80:bc:
5c:cb:2e:34:b1:a8:83:8d:97:e7:df:ec:78:b7:30:
68:68:bb:76:15:e3:6f:7b:dd:09:07:c1:ea:2b:b0:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D9:EF:D1:75:8F:47:E0:DC:4F:75:F0:1D:57:61:41:B2:FB:3A:27
X509v3 Authority Key Identifier:
keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:40:1f:1c:61:ed:76:c2:3e:e6:67:10:59:2a:8e:25:db:f1:
e9:73:9d:a8:d4:c1:fa:fe:b8:73:00:3f:50:ad:23:bd:6c:64:
48:cf:17:cf:2d:27:99:b5:d1:11:63:0b:71:36:9c:29:c2:47:
2b:aa:86:46:55:e8:11:94:34:6c:bf:31:0b:e9:8b:1d:79:cd:
26:46:75:b4:a4:14:c8:97:df:6d:5b:2b:77:6a:f1:ff:3f:34:
0b:34:6b:0e:52:c8:78:e1:46:77:9e:e7:2a:8b:c0:ba:af:bf:
47:e8:b2:b6:a0:26:7a:af:43:2d:b7:5a:d7:ef:59:e9:19:3a:
4d:f3:d3:69:23:5f:7b:48:60:34:46:70:71:dd:15:15:fa:62:
8d:0b:83:41:c2:29:c4:17:95:d8:b5:a8:71:43:a6:12:0e:2f:
80:4a:0a:0b:c6:0b:8d:5f:be:a0:ef:34:05:65:9e:69:a7:dd:
b5:93:9f:fd:f9:69:8b:fe:30:7d:5c:e7:99:a5:31:f7:87:8f:
b3:2c:e4:14:0d:90:07:c0:f4:5f:7f:a4:71:93:2a:6b:97:d2:
61:f8:d7:c7:78:50:e8:e3:b1:32:32:8b:c6:81:b2:73:d4:35:
90:c8:71:f3:0d:10:37:62:46:c9:79:47:4c:bc:7c:df:46:98:
18:48:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:32 2025 by rpki-client