Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: mrFU6h3hULa6cL4vi0j4390Z3Zrf3StHzobMADMeiPo=
Subject key identifier: CD:F9:F7:B1:B6:90:B1:11:55:38:E2:EA:2D:5C:CD:29:78:D6:FB:73
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019A70DC81A4899F1EC67D33572AA12811BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0EAC
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: IIp7rYUjV1ZSSlTPFNJJcL1wwu+MZiklwvQL55gyBiQ=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:81:a4:89:9f:1e:c6:7d:33:57:2a:a1:28:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=cdf9f7b1b690b1115538e2ea2d5ccd2978d6fb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:07:13:5c:c4:44:ad:a0:3d:07:2c:b4:12:
40:56:2a:5f:81:a5:77:19:00:ee:f9:fb:4c:87:82:
c8:85:a6:d9:ef:8f:10:44:32:7c:d2:3e:ec:c3:06:
18:85:2a:80:22:fd:30:ca:37:72:bf:91:59:29:ec:
fa:22:f3:23:d5:a4:a5:e0:70:92:8b:99:95:74:88:
80:54:26:63:64:fe:93:76:6b:8b:ae:da:2f:d2:a4:
9b:4b:63:c8:5a:fa:66:b9:a5:98:7d:a9:f9:f7:8b:
3e:a6:e6:08:7b:45:b5:b1:c4:68:14:74:02:49:d9:
6d:ef:70:9f:8c:b3:71:d9:6e:10:ed:f3:2e:b4:39:
9b:7a:5f:8a:c5:41:9a:c7:9a:62:61:9e:19:15:14:
13:a6:d6:75:d1:2f:52:74:da:48:79:c1:cd:ea:05:
53:40:a3:07:79:9c:ca:5f:9e:7d:fc:78:a3:30:2f:
d0:cc:bc:35:34:5e:a8:be:b8:58:18:03:61:ec:84:
b1:59:26:40:49:b2:b2:45:4e:f4:71:1d:8a:51:f7:
f4:44:c8:0c:58:f3:bd:46:70:00:8c:1c:3c:f7:03:
36:c1:d3:f4:92:9e:f1:8b:c0:ed:3e:2f:dc:3f:d9:
23:00:c8:3f:d8:ed:15:9e:c8:f7:9c:a7:b2:68:c5:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F9:F7:B1:B6:90:B1:11:55:38:E2:EA:2D:5C:CD:29:78:D6:FB:73
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8c:2f:39:f8:2c:f6:ad:9e:31:a2:bd:92:48:d5:86:28:39:
bc:2f:50:93:6c:36:13:dc:69:38:5c:71:d8:66:87:62:06:f8:
ec:de:79:84:a2:d7:f0:0b:d9:97:a1:a3:6f:74:7e:da:2d:e3:
fe:6a:fd:c5:e8:3a:df:b6:ff:91:e4:ce:fb:89:d3:49:b4:fb:
99:54:a2:19:d6:38:df:09:a2:0d:9f:01:4c:46:96:19:e9:79:
d2:d2:83:59:a3:b2:3a:b7:d6:90:95:9f:03:bb:12:3c:c6:a6:
4f:70:7c:4c:ed:2e:65:90:22:0f:af:07:f0:0e:48:1a:34:e0:
c6:b9:2d:52:e7:74:6f:33:6a:46:03:08:bb:9e:6d:8b:cf:fd:
00:ec:50:c0:5e:a5:10:86:70:c4:c1:e8:4e:90:9c:70:3d:7a:
c5:e9:e4:44:a5:3d:3f:d0:06:00:5e:8f:3a:52:af:e0:2e:82:
ef:0a:c7:28:02:25:68:3a:aa:33:55:72:13:b8:63:f2:91:e5:
9d:ee:6d:4f:40:1e:64:d9:bf:6e:da:9d:c8:9c:be:42:05:88:
dd:d6:55:ed:b5:eb:fd:6c:7c:c2:2d:82:02:db:95:31:bc:4e:
7f:e6:ba:ee:b4:d5:ba:1b:01:b6:0d:b1:64:5a:aa:6d:c6:fd:
ac:c2:da:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:54 2025 by rpki-client