Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
File: 8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json)
Hash identifier: ga9jp4vZF0RmF8q4WPtufKJXS1sH5qigPRDu6YCHLhA=
Subject key identifier: 50:D7:D3:AD:60:9A:F8:4E:47:AE:8C:3A:6D:61:47:EE:EA:5D:6E:71
Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
Certificate issuer: /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Certificate serial: 019A4DAACFB462086012A5BB8169275080D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
Manifest number: 04A9
Signing time: Tue 04 Nov 2025 07:00:31 +0000
Manifest this update: Tue 04 Nov 2025 07:00:31 +0000
Manifest next update: Wed 05 Nov 2025 07:00:31 +0000
Files and hashes: 1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: 0UmJCTwfGvPpBezwnKwFeroSuKgsKMIQPPp2hwnqeZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cf:b4:62:08:60:12:a5:bb:81:69:27:50:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Validity
Not Before: Nov 4 07:00:31 2025 GMT
Not After : Nov 5 07:00:31 2025 GMT
Subject: CN=50d7d3ad609af84e47ae8c3a6d6147eeea5d6e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:9b:05:0b:ed:5c:64:5e:79:3b:fc:1e:64:
bb:58:e7:68:bb:e0:77:09:a4:8a:b0:7e:b2:b4:ca:
17:24:16:12:88:fe:4e:62:16:a7:a7:36:46:7f:2b:
f5:cc:ba:36:5b:6d:b0:5c:86:dd:ab:c0:13:6e:26:
69:33:18:f1:71:86:fe:fc:7b:52:54:55:b6:63:3e:
43:88:79:a4:6f:40:9b:81:29:ed:5f:12:72:89:07:
f0:f0:c1:0b:bd:93:fc:39:a8:9e:42:f0:68:bb:d3:
ba:fa:1b:c4:ba:72:8b:d6:b2:54:21:ce:fa:de:ce:
ec:a5:1f:ee:38:04:0d:a3:31:f9:5a:37:b5:c2:5b:
d4:a4:1d:6e:58:52:ce:01:c9:95:f5:eb:02:aa:2e:
a2:77:35:7d:11:e7:5c:8a:da:c4:79:6d:bb:02:a0:
ec:b7:7a:e6:33:c3:ea:61:cd:92:bd:b6:e6:81:5a:
3f:8e:d2:9a:70:91:c9:e7:50:b5:be:da:f4:58:a5:
a2:29:9f:d8:59:cf:5b:ce:7a:8f:3f:37:94:35:8d:
ef:fd:8b:01:4f:ed:cc:a6:28:f9:eb:40:2d:a4:77:
be:10:32:eb:c1:76:e9:96:be:73:32:b9:ad:b3:a4:
31:6c:c2:ac:f3:78:16:34:d1:aa:33:80:18:59:1b:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:D3:AD:60:9A:F8:4E:47:AE:8C:3A:6D:61:47:EE:EA:5D:6E:71
X509v3 Authority Key Identifier:
keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:19:9d:ca:dc:5a:c2:09:8a:17:6f:6b:92:25:42:d3:2d:e2:
32:03:01:3d:e1:02:3c:7e:46:20:83:4a:ea:61:c9:52:9e:68:
32:09:6c:f7:d9:72:93:7a:6a:46:ac:46:23:e0:e3:c8:f7:ea:
83:e0:1e:b6:e6:6d:8f:dd:61:de:b1:9c:97:14:f2:70:af:e2:
08:d4:61:e6:b8:c1:6f:86:51:00:b4:af:85:d7:ba:ea:6d:3d:
e5:bb:93:20:fe:8e:16:cb:31:4a:3c:1e:f4:48:ce:11:d9:00:
7c:f2:0b:f7:5b:c5:6f:9d:fd:c2:a4:36:0d:83:ef:90:08:e8:
3b:09:50:49:ba:eb:24:b6:1b:c0:95:b7:d0:ef:17:71:74:e7:
b8:19:d7:2b:0d:9e:86:23:93:88:b7:9b:31:30:30:69:93:b6:
2c:e4:57:ad:3d:6f:0f:1f:7e:18:5e:e6:69:74:86:ce:7b:b9:
e3:57:2f:95:9e:cd:8a:55:c6:57:a2:6a:25:be:c8:9d:0d:96:
b8:19:94:e9:62:61:d8:5c:2f:2a:9e:dd:b1:ec:3e:73:68:94:
df:b7:9a:19:75:84:e8:0a:08:e1:29:89:39:b0:32:49:9f:8f:
de:e3:17:5f:2e:ec:dc:d4:ce:32:47:a1:aa:ae:39:3d:69:35:
3b:f0:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:51 2025 by rpki-client