Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: IMcyDLnFVOxqP2pIlePQXbSFPVDFskb7rUG/kWA+j94=
Subject key identifier: A6:28:81:DD:06:F6:F2:40:9C:22:6F:4D:B1:79:80:2D:2F:DC:E7:FA
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019A52D13578EC0310BE819A76EE8221F6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 01B9
Signing time: Wed 05 Nov 2025 07:00:33 +0000
Manifest this update: Wed 05 Nov 2025 07:00:33 +0000
Manifest next update: Thu 06 Nov 2025 07:00:33 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: NHvX032wwBGv1F5V5WdYCalOukRpRuhrpL0rfgpimV4=)
2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=)
3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:35:78:ec:03:10:be:81:9a:76:ee:82:21:f6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Nov 5 07:00:33 2025 GMT
Not After : Nov 6 07:00:33 2025 GMT
Subject: CN=a62881dd06f6f2409c226f4db179802d2fdce7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:19:1d:bb:d8:d9:a2:02:4c:0a:bb:5f:37:
7f:78:2a:85:47:6d:6f:fa:6a:57:f9:8f:44:33:2b:
0d:6b:a5:6c:a5:ca:6e:70:c4:2b:97:1f:de:79:18:
f1:6c:23:f8:86:19:3b:83:24:00:5e:5d:49:16:8b:
3e:74:0a:92:07:b8:51:e6:08:27:b0:ca:96:41:a1:
d5:a7:fe:41:97:25:5a:21:55:68:61:84:58:3e:c8:
41:b9:3d:c6:bb:f9:af:a9:9a:97:5e:cf:99:11:85:
84:e6:37:80:43:ef:09:50:96:dd:90:e5:a6:fc:da:
f1:8d:98:36:ee:44:dd:e2:a9:b7:ad:89:22:38:3a:
3f:5c:62:97:24:dd:2f:74:40:e8:8a:63:12:03:b9:
85:0e:39:a9:fc:3d:c2:bf:70:a5:5f:00:2e:7f:81:
7c:85:23:23:ec:9b:0f:00:25:5a:20:10:56:19:13:
4e:ee:33:70:dc:8f:1e:03:0b:40:57:33:12:a0:7c:
21:b4:3c:1b:8f:27:46:e5:c2:11:46:5b:16:bb:c2:
2e:bf:df:f5:ba:85:a2:ec:c5:89:02:f9:d4:70:14:
ff:64:b2:64:fe:9f:21:42:3e:42:7f:c1:94:7e:e9:
69:4a:41:fc:85:40:13:3b:7e:db:49:cb:22:f4:6d:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:81:DD:06:F6:F2:40:9C:22:6F:4D:B1:79:80:2D:2F:DC:E7:FA
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:11:77:17:98:37:74:c0:10:8e:de:18:4d:f2:0c:ac:a4:d2:
f5:2e:89:e4:29:42:de:28:fb:c4:de:4b:30:4b:be:ed:cd:a8:
6a:27:4d:34:2e:d7:2b:70:ef:e0:2c:2a:08:6c:40:8c:34:2f:
68:b5:2e:31:66:a7:06:99:27:8b:90:8e:17:a1:56:9e:3a:f6:
21:66:c0:a3:01:62:e2:d3:64:56:99:4c:ec:45:8a:86:e1:1b:
71:3a:2c:58:2f:20:83:b4:de:96:44:df:a7:e1:7b:4c:d6:76:
7f:af:fd:4d:b7:3c:f0:df:92:cf:17:29:65:c3:60:55:e2:7b:
4e:76:3e:f9:6c:05:32:6a:94:bd:6c:02:11:3b:44:43:73:a0:
d9:21:c0:ab:d3:25:ff:87:e6:11:52:d6:4d:cc:55:61:4f:f8:
10:1a:d9:d3:77:28:b0:b9:de:16:d5:f0:df:bb:1a:fb:6e:da:
dc:f3:34:3b:23:d0:a0:4c:9f:95:23:09:6c:ee:13:28:68:51:
fc:89:9f:f0:36:7e:ae:05:10:ed:7c:ea:f8:3b:ab:52:f3:65:
a4:55:87:2c:eb:92:98:87:dc:6f:b2:cd:0e:c2:45:54:34:9d:
f5:f7:1f:e5:a4:65:55:63:1e:2c:cc:1a:08:9d:b6:ec:b5:95:
56:f4:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:48 2025 by rpki-client