Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: ByeITn5HOpmmzBaifxap7jtuk4mZT59SEtm84jzQkfY=
Subject key identifier: 04:20:07:48:67:35:8E:B7:A8:C8:2E:54:F5:E7:92:03:9A:42:FC:98
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 019A4E4FEA270F68EDBCBFC881D04D3BF58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:51 +0000
Manifest this update: Tue 04 Nov 2025 10:00:51 +0000
Manifest next update: Wed 05 Nov 2025 10:00:51 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: kJc9fxJpZngt5+kMFNHOd5E68xAMWg4Us9DQjg9+wRY=)
2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ea:27:0f:68:ed:bc:bf:c8:81:d0:4d:3b:f5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Nov 4 10:00:51 2025 GMT
Not After : Nov 5 10:00:51 2025 GMT
Subject: CN=0420074867358eb7a8c82e54f5e792039a42fc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:3d:05:88:0c:67:a4:1e:12:13:5b:df:3b:
11:ab:75:5b:df:7d:18:78:ea:26:4f:09:f3:a8:a4:
05:2d:b4:3c:80:9e:db:b6:d9:51:2b:90:9d:11:72:
3f:dd:7d:f7:5f:95:5d:68:f9:ca:7d:7c:f6:de:47:
ac:22:bc:60:12:13:26:2b:2a:50:82:0f:23:a0:f7:
0b:2b:f2:ea:c1:f3:19:16:d4:55:3e:66:26:68:7c:
a4:37:14:0c:0d:07:1a:2e:65:db:7d:d0:c5:b3:b4:
7f:c2:28:2e:67:a6:cc:51:56:f2:f3:1b:84:da:ae:
79:fe:14:2e:5e:ae:5f:67:86:7f:f4:0b:6b:15:35:
d0:87:8c:60:cc:11:f3:06:bc:45:4c:14:c0:27:07:
f2:de:20:a6:b3:27:bf:ac:c8:a5:8c:da:ca:bf:e6:
26:19:13:af:b4:70:a2:ea:26:a4:90:66:28:93:27:
42:cb:af:a5:a0:0a:ee:a6:83:6a:ed:9d:50:3b:83:
48:dd:a5:5f:8a:92:c2:c4:0f:05:46:77:7b:30:06:
93:cc:35:ed:a5:a0:56:12:dc:e0:9d:a9:cf:c4:ab:
47:7b:c1:4d:30:29:34:d5:36:f6:41:bf:64:e3:47:
b2:ee:3f:aa:00:93:63:fe:ff:50:79:95:3d:f5:54:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:07:48:67:35:8E:B7:A8:C8:2E:54:F5:E7:92:03:9A:42:FC:98
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:58:19:b7:32:13:b6:5c:20:24:de:17:41:ce:1e:2b:20:32:
bc:57:de:16:c0:d3:0e:9e:5e:83:1f:77:65:33:47:ee:cf:70:
ac:ce:05:86:d5:cc:2f:9f:65:a6:63:a3:57:15:24:19:95:34:
89:88:d9:59:79:f2:0e:ad:0d:5f:cb:c5:b5:09:7d:a9:42:f0:
17:2b:a9:b9:d5:0c:0f:05:0a:26:11:90:10:9f:e3:cf:20:64:
a4:db:61:9a:2a:2f:cf:68:c8:d2:0a:d3:19:03:e4:05:20:b2:
fa:71:16:99:c2:b4:c0:01:8a:b9:e9:c5:07:e5:e9:f8:7b:bc:
89:80:74:fc:3d:2a:8a:6f:dd:53:c9:57:b1:27:1d:71:ce:54:
13:47:65:46:60:fb:be:65:4d:b1:d0:ac:4c:d0:44:a6:96:fb:
89:f0:f8:49:43:1d:9f:dc:d4:61:56:54:f5:3c:d6:14:35:57:
dd:fd:14:e9:b9:13:56:76:31:e1:9f:d8:49:02:2a:b6:62:50:
33:c7:7a:02:1d:dd:39:f6:1d:4d:4a:21:b4:9f:cf:4a:23:ae:
8f:80:05:77:4e:d8:9a:f0:4b:01:43:e8:c6:b4:c4:13:f6:70:
c8:ed:5f:b1:90:0e:f3:0c:94:48:2a:5b:69:66:af:35:50:02:
b4:d0:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:31 2025 by rpki-client