Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: 5xB/BGQZW80xQzAvAX8WaglOMtZTL0ropiXFJdTKi1g=
Subject key identifier: 5E:77:C1:A8:C8:F6:2F:10:E1:24:B2:23:3B:F4:C7:A1:29:0F:64:CC
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019A4EF47903EEF6BB7362C5A068A8D4F1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1447
Signing time: Tue 04 Nov 2025 13:00:35 +0000
Manifest this update: Tue 04 Nov 2025 13:00:35 +0000
Manifest next update: Wed 05 Nov 2025 13:00:35 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: IsmMGwzvxFXjhcB0cSdu1X9+1jktUvtPA5hHQVlHyY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:79:03:ee:f6:bb:73:62:c5:a0:68:a8:d4:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Nov 4 13:00:35 2025 GMT
Not After : Nov 5 13:00:35 2025 GMT
Subject: CN=5e77c1a8c8f62f10e124b2233bf4c7a1290f64cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:8c:09:14:13:97:c4:ea:e6:43:55:b8:6d:
19:a2:f9:d9:90:6c:bb:aa:61:17:60:9c:f8:41:0a:
b7:84:8c:d7:86:9b:7b:43:5a:ac:65:51:04:86:21:
93:2b:21:c1:84:78:b4:8b:09:07:46:cd:f0:3e:4a:
4a:e2:21:81:ea:d0:84:a7:e4:f1:0a:f3:dd:21:dc:
68:61:83:77:03:2a:95:9f:74:81:04:fa:b3:31:4c:
b2:b3:0f:c2:85:ff:4c:0b:65:45:c6:a8:bd:60:e6:
ee:b7:0d:45:4f:5e:21:f6:5c:a4:62:20:f8:d2:7c:
6d:bd:be:50:78:7b:53:df:8d:5c:9c:69:6e:e6:b2:
11:57:f2:a1:68:fe:29:d4:51:3f:bb:3e:3a:74:25:
a1:e6:f8:75:b9:08:12:18:43:f5:2b:e6:d0:1b:7c:
aa:38:29:50:09:81:b5:84:d3:b2:be:29:c1:f5:ac:
31:df:85:9f:4f:50:89:88:1c:a8:28:e2:d4:09:4a:
6d:4c:36:dc:31:be:fb:11:85:5b:a6:bb:d7:23:27:
9e:01:2a:f5:18:e0:02:41:b6:28:9f:c4:84:e9:f2:
85:45:cd:17:88:d5:3a:90:77:78:f9:c1:3e:9f:04:
6f:26:c4:f2:de:2f:f8:81:2a:5a:f2:5e:9d:b5:ac:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:C1:A8:C8:F6:2F:10:E1:24:B2:23:3B:F4:C7:A1:29:0F:64:CC
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:cd:c9:3c:df:94:21:3f:25:e2:81:f8:e2:d0:09:4d:c0:
d4:5a:23:c7:b9:09:81:ab:e8:76:6f:06:b6:fe:01:4c:0b:ee:
ad:1a:d8:1a:d4:ca:39:79:f2:ac:c2:d8:04:e0:96:5c:71:ed:
87:d4:f6:5d:2b:d6:3e:c1:81:a2:38:22:91:dc:03:e8:a1:fd:
ac:72:86:e4:3b:28:83:f0:1f:56:07:e1:9c:79:e0:ae:3a:0a:
06:65:10:e9:bf:d6:27:5d:b4:06:e7:79:83:a8:ba:fe:ef:fe:
0e:e5:ea:68:80:90:55:a7:d2:a4:7c:aa:80:f2:e8:32:cb:64:
9b:66:fe:08:fc:9c:fc:7f:62:30:7e:15:61:ac:fa:b0:7c:88:
e8:05:64:a0:87:40:da:f3:6d:65:86:bd:2a:f4:16:f7:35:61:
0e:e1:7f:23:57:ba:6b:36:32:d2:38:87:ea:38:c9:05:23:fb:
e7:d9:30:db:90:c4:f8:cc:f1:cd:e9:0f:a4:c4:4c:67:c9:3e:
f7:b1:2f:ea:13:7a:b2:c9:c8:3b:0f:51:ab:48:90:7b:f3:7f:
e8:8b:15:f8:85:a4:f6:02:52:00:75:39:dc:59:9e:fa:d6:b7:
79:e2:cc:f0:1a:9a:f8:c7:73:56:dd:b3:9a:b5:e3:b9:34:be:
a2:b4:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:23 2025 by rpki-client