Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: xeKWUaF1s+qpW2f0Uq3eqwthmI2T/TePn0rjpI/b1R0=
Subject key identifier: 56:65:6A:BB:7B:06:37:2E:4E:8E:F1:64:2D:79:E2:A9:FA:C6:F2:FC
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 019A4E18CE18709EDF9563169E8D526D5642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 08B1
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: wDRX0K5ukfuWUKZtrp3tz9s4t65oHmkYAxvKW2cwE5M=)
2: DReP9bc0zwfbsr8Nie7Lz--WV3I.roa (hash: bjq88usQ48nTatb5B4QsLmgQZv99AHE50C/OVUr97Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ce:18:70:9e:df:95:63:16:9e:8d:52:6d:56:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=56656abb7b06372e4e8ef1642d79e2a9fac6f2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:e6:b2:b9:7f:90:68:57:63:fe:60:5c:51:
ca:47:c6:36:16:af:cc:9f:72:79:58:64:5a:d8:16:
da:39:d3:98:3c:fa:af:27:57:92:c8:4d:f4:85:6c:
1c:ee:ab:4c:4f:2d:02:23:8d:21:52:72:e9:8b:33:
0b:9c:8d:38:af:e5:ee:70:ea:00:6b:a4:a0:41:a8:
cb:0b:c6:35:8d:05:c6:9f:0c:b4:4e:eb:18:c8:b3:
9e:aa:81:a5:e1:cf:a3:da:6c:4c:99:ac:df:48:85:
d7:05:e0:fa:94:c4:f7:4d:a8:ed:1d:7d:66:75:6e:
2e:e2:a4:16:17:59:fb:ef:8f:c5:db:f0:a7:82:bb:
77:2f:1b:5d:40:78:44:4d:a9:2f:90:98:c0:0a:b2:
5f:c2:65:a2:79:b2:08:b1:37:c3:2c:57:2e:5d:6b:
70:f5:8d:b4:ed:0c:7b:d7:e9:72:34:9a:dc:a4:bb:
96:da:6e:29:01:b0:6a:ac:09:e5:a8:b6:4d:71:da:
06:fd:d2:d5:d4:3b:81:1e:8a:ad:3f:bb:b0:82:19:
2e:7b:dd:a7:dc:73:71:47:fd:49:07:97:20:53:90:
9a:d0:07:ae:19:c3:62:fd:f7:a4:ee:3d:67:2b:62:
c8:ec:fe:22:bc:f1:12:a7:8b:fb:13:5c:f5:70:85:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:65:6A:BB:7B:06:37:2E:4E:8E:F1:64:2D:79:E2:A9:FA:C6:F2:FC
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cc:25:8e:8e:47:2d:b5:ba:39:43:d3:0f:a2:f4:f2:45:0f:
f4:8e:33:bb:28:e2:88:a0:57:89:54:c2:c9:eb:39:52:a8:8e:
f3:fe:66:c3:ab:7b:e2:89:c5:40:5e:21:a2:d1:90:16:20:43:
b7:51:f9:99:7c:f2:9a:c3:70:41:ac:61:67:89:dc:9e:a8:88:
9c:8c:15:1f:7a:f1:65:e4:d8:2b:67:65:55:4b:37:fd:46:a3:
ee:7c:6f:f4:59:a1:47:03:bf:c5:88:8d:64:e2:55:3d:b4:e2:
3b:f9:ea:0c:7b:8e:d7:4c:e7:3e:e0:4c:ab:54:9b:ed:4f:c9:
84:9b:8f:ce:4f:16:55:22:a7:98:d4:ff:68:46:cb:b8:d8:37:
a1:ae:f0:2e:d8:21:cb:e3:be:07:94:4f:3d:30:b8:0b:0b:59:
fa:2b:b5:69:8e:58:0e:43:09:81:f3:dd:5e:9d:9d:17:9e:88:
2d:b5:52:56:b4:5f:92:b1:d9:c2:c2:a4:fe:6d:f5:c7:2e:d9:
a4:2e:05:88:5a:a3:40:39:f1:9f:09:3b:38:13:ca:52:bf:9e:
77:e2:4c:e5:c9:cd:1d:b3:5e:0d:8c:2f:e6:ae:c1:88:70:2f:
86:e2:08:bc:36:e5:bb:de:7f:63:62:ef:34:4e:29:60:81:85:
9e:a7:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:29 2025 by rpki-client