Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: 9dkJZL9htIq1unW2PAECnKI9Wih+yzF7O0is2WPA7jI=
Subject key identifier: C9:7B:00:59:79:55:36:22:D9:EA:82:E8:A7:4A:87:C5:6F:CA:B8:42
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019A4D7400BC6BD770CF5A340E515AB3EFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0E02
Signing time: Tue 04 Nov 2025 06:00:39 +0000
Manifest this update: Tue 04 Nov 2025 06:00:39 +0000
Manifest next update: Wed 05 Nov 2025 06:00:39 +0000
Files and hashes: 1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: 7gZRFtL2ED5vP5BYwQq72cllmScaB+mFASS3sFPHZZw=)
2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:00:bc:6b:d7:70:cf:5a:34:0e:51:5a:b3:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Nov 4 06:00:39 2025 GMT
Not After : Nov 5 06:00:39 2025 GMT
Subject: CN=c97b005979553622d9ea82e8a74a87c56fcab842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:85:cc:ee:39:7c:59:a2:ba:63:2a:f0:f3:
66:42:43:dc:74:ff:c6:a0:a5:e2:eb:dd:59:4f:8c:
67:ef:c7:2c:29:8e:71:af:d1:e6:81:f4:86:fd:8a:
fe:95:57:6d:3a:40:90:58:ba:c5:53:1c:f2:e0:ae:
b5:17:4b:1f:0d:06:62:56:81:02:93:f1:11:7e:8e:
f2:40:50:6f:b4:19:5c:80:e3:85:4d:b9:25:a9:64:
de:c7:0f:88:d7:35:72:57:8c:b8:e2:a6:b2:e2:ee:
e1:9e:35:b9:b4:fb:fb:74:9c:4a:5f:8a:3f:30:4a:
1c:11:c2:6b:8a:fd:22:33:c2:19:89:bf:c2:86:33:
48:81:71:2d:b3:0d:73:50:98:71:65:b4:2a:18:98:
95:8c:73:d8:71:02:90:51:36:98:4b:e2:04:09:89:
4c:ca:42:bf:95:62:ac:74:2c:e2:89:83:30:25:ac:
83:1d:22:b6:9e:b7:4c:45:27:0b:62:43:31:01:4f:
07:56:46:01:0c:94:6b:d8:a7:ef:ce:8c:5d:ca:3d:
e1:f2:6f:13:7c:a5:66:7f:40:fe:f5:37:33:08:5e:
d7:8f:8c:04:84:2c:02:28:9a:fb:c6:7c:61:2b:ff:
42:52:b9:46:18:fe:fb:7c:de:e5:a0:7c:c7:b2:56:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:00:59:79:55:36:22:D9:EA:82:E8:A7:4A:87:C5:6F:CA:B8:42
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cd:5c:5e:e2:73:b3:dd:60:97:72:1c:ca:c1:1a:60:e1:d3:
05:86:73:cf:96:82:44:9b:e4:68:dc:37:cd:19:89:84:d3:27:
2b:8e:fa:84:83:a5:13:2f:38:7c:8a:2e:6a:98:c1:30:af:d2:
70:55:2a:e2:c8:84:88:15:4f:a6:2e:56:e7:15:d0:d3:ff:89:
aa:f6:03:1b:b2:5a:73:70:34:73:7a:44:06:6d:0f:f4:78:ab:
af:59:4e:d4:62:db:e0:b3:38:22:03:2c:b4:3e:b3:d2:43:fb:
a0:a1:61:87:bb:d3:c4:f6:77:8a:85:28:94:e9:cb:a7:6b:b4:
d3:42:e3:60:2d:c3:4b:69:bf:9b:93:9a:8f:12:17:f1:2b:6a:
35:e3:77:2e:a1:05:38:2a:d9:8d:c5:20:5e:19:3a:3f:c7:44:
ac:a4:f1:63:b3:f8:c8:72:79:de:16:a4:f8:82:7b:7f:5d:13:
d2:c6:4d:0c:14:a6:9c:3f:a3:59:62:d3:11:8a:2e:10:12:3f:
7d:a9:02:f9:b6:00:2c:29:c7:41:d3:53:bd:fa:9f:cd:c9:10:
82:f7:0b:47:42:34:0c:29:16:1d:ed:60:11:35:b9:52:42:03:
16:a5:70:e1:e8:03:3f:91:c0:f9:c9:38:c0:64:a3:b2:9a:04:
85:9c:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:16 2025 by rpki-client