Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier: Fr8cudoKsgArsCiye7w90gCEzod2Fp6RAgoXxftsxeU=
Subject key identifier: EB:C5:D6:70:ED:E2:8A:10:DC:53:16:10:33:B6:83:AC:6F:B9:D9:6B
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial: 019A4EF5D1A70EF43A7A4FB4705EE4B1D017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number: 1666
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: Z1YH+/3LrgFfXOzYhaw5bVMQDZhRqTaS4i62earjZLQ=)
2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d1:a7:0e:f4:3a:7a:4f:b4:70:5e:e4:b1:d0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=ebc5d670ede28a10dc53161033b683ac6fb9d96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:45:73:4b:78:44:8f:7f:cb:1c:be:95:26:
dc:26:e9:38:29:b4:84:fb:a2:5b:3d:ea:cb:f3:18:
08:4a:b7:4a:60:42:c8:bc:03:c5:98:8b:b4:38:77:
ad:40:a5:aa:cf:a5:15:c3:f2:c8:e9:49:11:ea:1f:
98:f7:64:25:fa:6e:12:23:c2:1e:48:33:2d:c7:ec:
74:a0:e5:83:60:0d:42:91:9b:c6:10:bd:9f:89:f8:
36:99:5a:b5:6a:38:a9:d6:35:aa:c5:30:ea:85:80:
49:40:c5:9a:8c:50:3e:36:5f:0d:e3:91:e9:f7:9a:
e1:d1:7e:80:b0:43:bd:b5:96:a8:77:20:79:23:1b:
ec:9b:00:0a:02:d5:37:71:49:3b:1f:c8:c3:82:f4:
f5:db:50:18:72:15:41:b0:d3:c1:e1:e7:8a:65:49:
08:23:72:20:8c:2a:df:bf:43:39:da:60:58:02:b5:
e3:cf:14:22:aa:b1:11:14:b4:43:fd:b6:ea:ae:27:
75:80:a1:b1:c9:e1:ab:d3:25:c3:53:2f:be:29:7e:
74:72:65:b8:1e:be:39:6d:72:68:65:db:d5:82:cf:
6b:92:a3:07:43:75:f2:a8:de:d1:8a:08:e5:57:b4:
31:38:33:c3:70:e4:7b:5c:ec:66:d3:0c:f4:27:19:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:D6:70:ED:E2:8A:10:DC:53:16:10:33:B6:83:AC:6F:B9:D9:6B
X509v3 Authority Key Identifier:
keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:58:eb:18:f2:ea:3f:15:9b:95:41:2b:cd:14:01:47:da:3e:
d1:d5:9b:54:54:09:04:3a:0e:ab:46:a8:30:0b:34:1a:08:e2:
68:bf:b6:14:56:9a:1b:89:a5:56:47:7a:84:cd:c3:73:e6:84:
62:4b:38:69:72:8c:a3:d8:2f:3f:a8:51:c1:0b:80:d3:96:8a:
a0:12:08:5d:31:7f:3e:e0:fa:ef:e8:96:46:91:05:f1:73:2f:
92:5e:01:64:6e:6e:a5:bf:0d:6c:58:52:53:08:95:bb:a1:ab:
37:2d:7e:46:ff:b4:cc:c4:f9:5a:c0:71:6b:5c:b7:08:6f:81:
7f:f3:17:20:cb:e4:e3:0f:20:bd:26:20:26:7f:e7:b5:30:42:
18:d2:2d:cc:37:a1:5d:e9:54:1c:49:41:14:60:c5:06:a7:ed:
ea:14:a2:6c:68:ba:0a:79:4a:9a:3f:bc:d3:57:48:6e:6c:5c:
95:99:00:ff:bd:c0:b3:a7:1e:e6:bd:78:e0:5a:76:c0:f6:89:
75:af:dc:b3:67:68:ad:22:e4:a4:4d:62:80:d8:b8:b3:1f:07:
f8:27:91:f0:16:eb:da:a9:40:72:eb:46:a6:af:6c:34:72:0c:
49:a7:e8:10:fc:c0:cc:70:3e:1e:ea:da:eb:2f:88:d3:95:46:
be:89:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:56 2025 by rpki-client