Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: gytXsPRsvMIFpJOiolsWwX0UGk4nptXBDwL0GrxQiNM=
Subject key identifier: 97:04:09:FB:85:76:FC:7E:95:56:1D:F3:50:9F:45:74:51:5D:8C:01
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 019A522BFF88D4CEB1F3C8CF6513D2E4E7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 04:00:06 +0000
Manifest this update: Wed 05 Nov 2025 04:00:06 +0000
Manifest next update: Thu 06 Nov 2025 04:00:06 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: z8MW2F9ygvFGYE8paGO5VBg3H5bn5uI9ZEW8jp98zCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2b:ff:88:d4:ce:b1:f3:c8:cf:65:13:d2:e4:e7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Nov 5 04:00:06 2025 GMT
Not After : Nov 6 04:00:06 2025 GMT
Subject: CN=970409fb8576fc7e95561df3509f4574515d8c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:ad:62:94:18:ef:81:d1:94:d7:d2:94:3f:
1a:98:6f:59:b5:25:46:a2:37:6d:f3:38:bd:db:ac:
90:22:e2:9e:d0:50:97:e2:24:85:e0:37:4a:38:0d:
96:3e:0d:76:cc:27:00:7c:f6:b3:24:47:32:e6:c0:
e7:3b:66:f1:db:73:a9:d5:93:b9:c3:85:1a:43:1f:
76:87:82:36:a1:04:6b:53:11:90:72:89:c6:cc:fd:
5d:bd:a7:57:fd:5b:2a:71:a3:b0:42:46:0f:14:96:
e6:ce:c5:01:22:54:e2:79:e0:1d:3e:d1:b3:1a:10:
a1:fa:cd:e8:05:dd:93:a8:0c:d5:22:f7:0b:43:27:
b2:56:77:2f:2a:f7:ae:fb:02:20:59:20:94:27:95:
a5:e4:4d:b3:5d:89:24:e2:6f:0f:52:87:ef:77:89:
a3:3f:2b:c7:03:ee:2f:8a:e1:c8:a2:97:9e:cc:a8:
44:d6:ee:cf:89:d5:cc:57:27:97:e5:8c:7f:d2:a4:
cf:39:3a:2c:42:3e:f4:de:6b:29:9b:ca:fd:4b:f3:
9a:3e:33:d6:6e:7b:68:a9:fb:a6:b2:d1:26:50:5e:
e0:3d:64:6e:f5:80:26:f7:9f:84:b7:96:57:73:de:
3c:bc:79:80:2c:fb:6d:e0:f6:97:54:b6:26:ad:82:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:09:FB:85:76:FC:7E:95:56:1D:F3:50:9F:45:74:51:5D:8C:01
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:91:e3:7e:15:42:f6:90:8f:74:f7:37:18:31:c9:50:03:87:
b8:4e:68:86:b9:3a:e2:05:26:4b:d8:ab:95:b2:ca:7c:ba:0c:
74:f3:5f:c1:b7:96:21:55:e4:f1:04:08:f5:e7:bd:fa:b2:0d:
54:94:67:f6:64:52:7d:b6:67:4d:0d:f9:2b:5f:6b:42:0c:21:
12:30:9e:06:d7:3c:45:66:9e:40:06:c2:cd:ac:c1:c1:82:72:
2d:2c:57:10:c6:e3:99:52:98:f9:94:13:b8:c5:b4:ce:51:f1:
60:7c:36:88:19:c0:5e:99:05:03:9f:38:82:d9:6f:b6:d9:fb:
33:c2:e5:db:d6:45:17:75:2e:5d:28:d8:ed:83:ce:04:b6:df:
35:62:3b:6f:6b:f8:fe:82:e9:58:5b:94:73:6c:03:52:17:9e:
21:92:e7:6f:ba:98:f3:7b:f9:98:89:44:ec:92:8f:0e:64:98:
49:79:1b:f3:cd:17:17:f2:1a:f7:a8:e2:49:9e:05:50:82:a0:
62:c1:df:c1:08:9f:58:fb:d1:a7:ea:62:f9:04:c0:67:81:c3:
a9:ca:3a:56:90:47:f0:d2:d6:bc:bc:07:c5:56:d8:4e:2e:4c:
6b:67:46:1b:42:28:17:c5:7b:8e:73:16:a2:88:e5:8b:49:27:
a3:18:17:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:20 2025 by rpki-client