Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: b41rqIoNNnBlzncew+6mShXwjLram6U679yXHqDN970=
Subject key identifier: E8:C7:78:32:80:F8:8E:44:0F:5E:E6:AD:BF:7D:B8:6A:C4:1A:A2:01
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019A51F5635C862690263EFC29783EE9A73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 03:00:27 +0000
Manifest this update: Wed 05 Nov 2025 03:00:27 +0000
Manifest next update: Thu 06 Nov 2025 03:00:27 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: ACQqwE2yhxq5dE/thPGDkaBzQPsfTeI2RkcneXxVB1o=)
2: G6K_DWhWU68de4ypb82fcRNbq1c.roa (hash: Gtd0kHs/yyYgjTN6WOR+S2KJ5GiQ71eqM+ooEqk1CdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:63:5c:86:26:90:26:3e:fc:29:78:3e:e9:a7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Nov 5 03:00:27 2025 GMT
Not After : Nov 6 03:00:27 2025 GMT
Subject: CN=e8c7783280f88e440f5ee6adbf7db86ac41aa201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:da:20:e3:3c:db:53:42:d3:77:fc:aa:52:
2c:70:22:a9:62:f7:b2:c9:94:31:63:e9:78:7b:16:
0b:22:9d:f6:5c:8b:94:f3:7c:1d:05:4e:17:d8:67:
77:33:7d:73:0c:50:39:26:f5:5b:65:46:87:c2:f8:
57:4d:43:26:b8:42:93:48:5d:76:f4:0f:b5:7f:0c:
92:0d:64:18:43:b3:c4:b4:5a:e8:db:c5:59:34:46:
0f:10:01:8d:0a:32:bf:eb:6d:99:7e:77:e8:a6:00:
a5:be:c6:6e:50:57:9d:e2:5c:ad:77:96:81:7f:e8:
2c:2c:71:ca:fa:bd:a3:61:c2:d5:f2:92:bf:e1:9d:
30:e7:9f:5a:91:ab:94:32:02:fd:d0:3b:44:80:03:
f8:e0:81:4a:fb:4b:37:b8:c2:1f:8e:ea:e5:f3:cd:
85:c0:95:68:a1:1b:dd:c0:07:9c:e3:91:ac:e6:b0:
21:b0:c4:e9:de:e5:78:ff:52:46:4b:48:bb:a2:d1:
29:25:7f:2f:43:66:7a:32:ef:bc:6c:4c:0c:39:0b:
4b:cd:78:c4:9e:d3:b5:47:99:7f:90:39:ff:87:d7:
d7:42:48:57:0b:fd:bd:80:7a:23:60:38:13:8b:94:
e8:8b:a2:0a:38:bf:44:6a:4a:cb:7b:71:15:29:26:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:78:32:80:F8:8E:44:0F:5E:E6:AD:BF:7D:B8:6A:C4:1A:A2:01
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a3:70:dc:29:6b:c8:bc:56:08:f4:9d:20:a0:66:78:25:82:
a8:0e:2f:6d:11:19:0a:5a:d0:03:35:74:b6:79:7d:bb:ba:a0:
a4:f9:41:59:a0:f5:a5:7f:39:99:be:e0:c1:3a:31:86:45:7b:
29:f1:a1:82:57:d9:35:22:33:14:82:ea:b1:db:f8:c0:3d:f4:
1c:d6:c1:d4:3f:15:56:af:e1:9a:0e:b0:5a:2c:f0:11:a4:89:
38:b8:25:c2:ba:d4:0e:60:cc:00:98:c3:cd:1d:ae:d2:27:ce:
77:b6:69:5d:ef:92:94:ae:c8:bf:b5:3d:d9:24:58:2f:a9:1f:
17:74:0e:b7:ec:76:88:56:5c:62:a5:cf:64:1a:5f:a5:28:5d:
93:53:cd:16:b2:52:24:1a:f6:4e:06:67:2d:5e:fc:3a:58:45:
e5:04:24:cc:f5:57:a8:98:f0:0d:8f:f0:6c:4a:25:1f:c7:8b:
87:3c:5f:c7:61:dd:af:41:28:d5:25:e7:d0:4e:ba:65:9c:42:
14:71:47:bc:64:87:3b:8d:9b:35:6b:25:d4:17:4b:80:ef:cc:
d0:12:d5:9c:80:37:f4:a5:ad:bf:29:50:9d:37:04:3d:d0:68:
3b:34:35:87:ae:9e:7a:c0:51:4b:dd:ea:c7:d1:79:87:a9:83:
f3:a1:5b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:07 2025 by rpki-client