Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier: qAezsNBiMQwd8iIq6bAF0TGMlkELQ+a0P58U9G+hvZU=
Subject key identifier: D2:7D:F1:14:B5:A2:E9:87:CF:8B:8F:F2:4C:CA:28:6F:E6:1F:04:9D
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 019A4E18B68AF9D63CAF31B304B1D2B28C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number: 14C0
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: UYB66NMqSoDcD8pLM0IBIstA+1PMdAQplwcSOS6SGkA=)
2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b6:8a:f9:d6:3c:af:31:b3:04:b1:d2:b2:8c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=d27df114b5a2e987cf8b8ff24cca286fe61f049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:b9:da:2d:8d:96:01:de:fe:5d:7d:4d:82:
1e:e8:5d:61:53:6e:4f:e6:50:ad:5c:04:87:2c:84:
65:5a:78:2a:90:61:3d:84:52:bc:fb:81:59:fa:89:
ad:fa:e6:ae:67:5b:14:c9:58:e1:46:5e:3b:85:b7:
b9:d5:8e:12:a1:4d:a4:cd:c7:fd:1f:ea:41:f9:d0:
cd:e5:fb:97:33:01:61:5e:51:4e:1a:e0:27:4d:95:
b9:19:13:c7:54:24:12:f0:1a:e6:30:47:fa:ae:7f:
c2:b8:0b:4f:31:c2:13:32:72:a8:f7:82:c3:aa:cd:
5b:57:d7:79:89:13:8f:bf:b4:99:92:4c:ad:2c:b5:
c0:12:3a:73:4d:89:75:69:39:8a:cf:52:21:6e:5b:
4d:ea:4e:54:14:db:46:5a:b8:d6:27:8f:81:9d:67:
56:01:fb:7b:67:93:26:ef:23:90:4c:be:ee:01:f1:
69:fa:f5:cc:f0:2e:44:26:b1:d3:2a:0c:bf:70:36:
e6:e1:fe:8f:d4:79:7c:0b:5a:81:13:f1:c1:e4:bc:
79:5d:d6:3e:95:62:a6:c2:0c:f9:58:ef:53:d4:1f:
38:90:eb:34:ed:5f:49:05:96:ce:6a:0e:68:6f:85:
d3:36:ec:82:f3:70:74:98:c6:c4:31:ba:33:1d:c8:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:F1:14:B5:A2:E9:87:CF:8B:8F:F2:4C:CA:28:6F:E6:1F:04:9D
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2e:e8:6c:50:12:86:67:22:65:75:85:c2:f3:bc:4e:41:63:
ca:99:8d:9b:b5:ab:18:96:fc:fb:88:bf:3b:6f:62:d1:c5:56:
b1:5c:20:b6:c9:19:65:03:8d:f0:34:63:2f:dc:f0:e5:c6:4c:
8e:9a:a8:5b:56:94:b0:59:9c:a3:64:af:87:d9:97:65:98:a5:
c3:a7:3d:c7:a0:8c:f7:f9:67:19:19:62:c9:42:f9:9e:74:79:
53:96:60:43:23:e9:86:c9:2d:33:3d:26:7f:91:d1:91:0c:7d:
10:f6:90:8a:59:24:02:9c:9b:a3:75:d7:7f:57:b4:89:8e:dc:
5a:22:db:30:fe:97:55:a4:4c:4c:b8:4a:07:4f:25:db:eb:a6:
e0:f5:6b:8e:35:de:5e:13:40:34:16:ce:7c:ad:d6:b4:d0:c4:
85:22:e9:f4:6f:37:63:aa:ea:fb:f1:79:22:35:42:aa:e0:c4:
4a:cf:29:d8:99:11:fa:2a:ab:51:67:91:87:5d:76:57:39:2c:
9d:bc:7a:f1:46:08:06:bd:b0:ac:35:c9:cc:1c:54:28:da:8d:
ca:16:5c:88:48:e1:bd:a2:46:1d:d9:25:97:0d:c0:13:24:3b:
9b:da:28:86:ca:70:af:ed:5f:f9:3a:6b:4c:fa:a9:a7:de:19:
9f:31:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:31 2025 by rpki-client