Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: PCmyCZKwqwg37Jb7FRWYcKyjVsawb60P6LzjShx3tX0=
Subject key identifier: 06:1B:BE:31:38:FC:E0:C6:5E:B0:CC:12:F4:A7:85:FE:4E:10:4A:70
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019A7225871FF2C1D0912C84DE7C23624666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0E01
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: 0GN0Or70QPqQ+J2wE6ib8UXHR0UXi/yU4YGNEw496d0=)
2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:87:1f:f2:c1:d0:91:2c:84:de:7c:23:62:46:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=061bbe3138fce0c65eb0cc12f4a785fe4e104a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:cc:7f:59:2f:b6:3c:9d:7a:ca:2a:2c:6b:
cd:48:b8:e3:e5:96:55:1d:aa:12:0c:53:10:c4:83:
f3:e0:a9:83:b6:98:01:60:c6:07:a1:16:d7:47:00:
95:15:44:86:d3:4f:fa:25:ae:05:72:a9:67:ac:4d:
8a:59:28:a1:c7:47:c9:b9:0e:7f:54:fc:2a:d7:bd:
3b:f0:47:63:e3:84:09:30:03:57:fb:be:b9:b8:8e:
ee:80:70:2c:17:da:bb:c7:49:77:ce:7a:ab:93:d4:
a1:9e:e4:55:15:ed:6f:f4:1a:25:ca:32:4b:05:15:
d3:9b:1e:61:62:2c:5a:e8:03:68:a9:c9:a9:d0:f3:
3f:0b:02:35:5c:aa:56:b1:ee:8a:51:93:df:50:9d:
86:16:26:72:fa:a4:a9:91:66:f4:4f:db:d1:7e:43:
5c:96:b3:07:55:26:40:03:2b:67:35:bc:5d:5b:41:
2a:df:df:f9:a5:57:72:f5:42:ed:b9:03:87:b5:09:
f7:d2:79:2e:92:09:56:f4:1d:a9:0c:3f:d2:63:41:
22:67:18:1c:b0:b1:df:c5:4f:13:bd:d3:2a:69:a8:
cd:fe:d9:40:10:fa:06:4b:a7:22:28:66:af:32:c0:
dc:29:b1:af:01:9b:2b:84:fc:f9:10:64:55:10:7d:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1B:BE:31:38:FC:E0:C6:5E:B0:CC:12:F4:A7:85:FE:4E:10:4A:70
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c5:4e:4b:d3:5c:54:12:86:17:d0:fc:86:7d:04:7b:0a:7c:
be:69:8f:ad:94:64:46:dd:76:f0:c5:27:8d:82:0e:a1:44:d3:
2a:20:68:55:df:ac:ec:eb:9a:81:ad:08:61:8b:c9:66:f3:74:
3c:44:49:11:eb:07:1f:4b:18:16:5a:cf:17:26:dd:cd:a8:a4:
1e:61:dd:9a:5a:54:a4:98:e9:7b:9c:f6:b6:b4:fa:12:ef:79:
71:d6:ec:7d:af:2a:bc:41:93:e5:a0:dc:8f:24:42:1d:6f:e6:
6f:c9:a2:dd:b1:81:5d:8c:01:60:95:81:d4:20:ea:ae:36:f0:
41:c3:b2:ad:be:c6:c0:1b:0f:d6:27:bb:bd:98:0c:9e:81:d7:
5e:28:7b:2f:2d:1e:ea:94:d2:39:a4:0f:d3:2a:31:26:c7:36:
67:18:61:5e:98:40:9b:03:15:76:8e:e6:2e:bc:2c:ec:73:07:
d5:c1:0b:7b:a5:46:7a:bf:dd:01:56:cd:16:f3:8a:76:14:59:
e3:f2:bc:e0:3c:99:63:32:7b:5b:8c:0b:4c:3c:bf:c4:35:59:
8d:74:a3:2a:40:0e:bf:45:5b:99:63:38:53:82:18:44:43:c6:
da:c5:bb:99:ac:f2:79:8d:b9:56:12:dd:31:58:3f:a8:61:47:
19:ca:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:32 2025 by rpki-client