Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: JIxXqWYmAEylkB6Bgz/UYT6ecpy238wMFqHhOt0dmVk=
Subject key identifier: F9:09:03:91:07:D5:F7:4A:3F:AD:72:DA:BA:37:F1:66:B1:80:0E:30
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 019A7293430CB375FB8DFCA7A9D2FBD380D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: pcEr+uIOfUbVeixoTISyAWgZsalsdO5NcGfBvaERsmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:43:0c:b3:75:fb:8d:fc:a7:a9:d2:fb:d3:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=f909039107d5f74a3fad72daba37f166b1800e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:4c:47:db:ae:ce:b9:db:97:0d:f6:b0:71:
00:1d:da:a1:4d:c1:08:2b:f7:e2:79:64:cb:41:67:
60:65:74:4a:0b:39:83:5d:ae:c2:a4:0c:09:d8:b2:
18:a8:f2:27:c2:31:c0:34:2d:e9:d3:2a:8c:60:b3:
a6:f5:6e:30:f2:07:0a:65:60:21:97:58:ac:a5:72:
25:ae:6e:8a:69:f4:58:12:f5:de:8e:67:20:4e:f1:
27:45:0c:a9:48:c9:2f:59:a2:1d:17:36:2b:17:4b:
fd:2b:de:62:3c:7f:95:5f:f6:5d:09:b0:0e:7b:a1:
1e:ab:cc:ef:9d:27:68:8d:ab:cb:a6:ed:72:35:38:
82:09:ae:18:cd:43:1c:17:68:24:c8:94:7f:76:3f:
ca:97:c8:67:d3:de:f2:5d:76:4e:e9:9a:d7:a8:20:
96:2b:42:f8:8f:52:4f:31:e6:d5:a1:3e:5f:6c:c9:
85:ae:d2:03:f1:68:ac:16:58:2c:4e:b6:59:b6:16:
d5:c3:7e:85:2d:7a:8e:a4:23:29:f0:a9:91:bc:26:
4d:11:25:33:36:57:35:10:e8:6f:95:73:d0:c1:89:
26:b6:0a:02:5c:5f:f3:07:e7:e6:19:5d:54:5b:29:
ce:f1:ee:11:c8:ff:b8:91:9e:dd:9c:cf:18:ea:1d:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:03:91:07:D5:F7:4A:3F:AD:72:DA:BA:37:F1:66:B1:80:0E:30
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d2:82:95:36:c4:9d:6d:76:fc:ae:ec:a6:32:5d:22:01:de:
93:29:5d:8d:da:f3:64:92:a4:12:3f:eb:48:1b:f6:39:52:56:
fb:47:b1:aa:2e:7a:cd:0a:62:1b:0c:f1:03:e6:b0:3a:02:22:
4b:c4:46:d7:46:08:52:ca:a3:b6:4f:a7:5a:da:8d:93:ae:1e:
4a:f7:a2:1b:03:f0:5d:77:7c:c0:ed:6b:f3:70:e2:82:3f:ee:
f4:c9:c4:5c:dd:62:76:ff:b9:d2:de:f3:21:cb:2b:2d:7c:ee:
13:69:1a:3c:dc:16:7f:68:60:85:ff:7e:3f:f2:3f:72:80:dc:
b0:e9:2e:1d:7c:fe:97:fa:bf:ff:7b:d7:d5:f6:62:7b:1b:c8:
32:71:c7:1b:55:af:02:a3:7e:5b:26:60:6f:f7:88:c8:ea:7f:
e4:5c:0e:9a:5d:f2:20:82:f7:43:be:b3:46:da:ed:d9:60:d0:
d1:07:11:5e:57:20:a8:36:a6:47:14:c6:9f:92:61:3e:4c:3d:
04:08:61:34:7e:c4:d1:06:59:08:72:79:92:e4:6c:f4:8e:74:
5e:67:9d:53:45:ca:03:bf:50:04:16:3f:a7:0e:a5:67:a8:ff:
16:bc:6d:12:e0:de:86:76:d4:b3:57:cf:75:f7:8d:09:36:31:
82:09:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:46 2025 by rpki-client