Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: zV1GHkOvsbwYOy9oT6/bRi1ODdljnEVUK80kC1hb4Nk=
Subject key identifier: EF:3C:6E:7E:BE:59:8C:79:0F:01:4C:44:E0:35:97:31:3F:C1:DA:93
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019A5074C30B484B79D57070C0A1D744EB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 111E
Signing time: Tue 04 Nov 2025 20:00:20 +0000
Manifest this update: Tue 04 Nov 2025 20:00:20 +0000
Manifest next update: Wed 05 Nov 2025 20:00:20 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: l0oRDM5vSzY3K8S9va2bS2zj2mVNcX8pcHRaURv1KDI=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c3:0b:48:4b:79:d5:70:70:c0:a1:d7:44:eb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Nov 4 20:00:20 2025 GMT
Not After : Nov 5 20:00:20 2025 GMT
Subject: CN=ef3c6e7ebe598c790f014c44e03597313fc1da93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:f8:c3:09:4f:a5:30:f7:68:fd:80:29:34:
9d:ce:7c:70:bd:ae:3d:b8:b0:9a:04:52:7a:eb:12:
14:ac:d2:3b:da:cb:08:f8:d1:c5:7c:9a:22:c3:b5:
8e:9e:17:dd:70:8a:f0:b4:e6:cd:f1:81:80:c1:d6:
cd:6b:e7:f7:43:5a:bc:a7:bd:3c:0b:15:5c:fa:c0:
4a:ba:19:e8:0b:72:92:f0:03:78:cf:c8:40:9b:bb:
5f:c2:92:59:93:64:8b:90:24:c0:53:0f:cb:20:8b:
95:6b:bc:a3:b1:a5:d6:3d:6d:16:37:1d:fd:72:c2:
2a:f1:c7:a6:4a:99:1e:37:68:af:ee:09:9a:f0:b4:
71:e2:af:5d:c0:03:b1:3e:58:47:60:2f:ce:57:36:
32:69:b6:3f:5f:3f:6d:e5:53:e2:de:64:a1:73:58:
3a:d0:97:e7:25:92:86:8a:d9:67:32:09:95:7d:98:
72:81:87:3b:42:be:5d:60:5e:ba:9d:93:36:b1:29:
fd:15:81:69:b5:a9:27:e4:8f:10:39:94:78:f4:6f:
68:be:c2:3c:64:e8:f9:40:a0:68:4d:88:05:fe:e1:
69:49:94:ca:54:d3:22:55:a8:e5:b8:42:0f:38:e3:
13:c9:4c:5e:55:43:d2:a6:46:23:c9:69:ee:38:70:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:6E:7E:BE:59:8C:79:0F:01:4C:44:E0:35:97:31:3F:C1:DA:93
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:55:24:82:9e:82:13:ca:d7:6d:2b:b5:8e:40:2e:58:bd:a2:
0a:ed:11:fd:1b:dd:30:e3:0d:8d:f3:35:a8:9c:45:4c:41:9e:
d9:53:54:45:6a:4b:09:99:62:d1:e4:70:69:f0:23:ff:40:97:
b1:f6:d4:09:a8:45:fc:ca:be:a5:30:97:94:d8:70:89:9b:a3:
59:52:f6:10:4e:b3:90:32:4b:fb:ce:7c:ec:9f:7a:dc:2b:f9:
16:d5:8c:13:41:0b:e8:0a:dc:65:00:35:08:99:09:dd:cb:ad:
0d:3b:e3:dd:d3:26:ef:71:37:ce:97:3e:9a:89:c6:cd:f4:44:
56:ea:1f:54:de:6e:ba:71:b8:61:43:e2:c0:5e:05:7b:e4:cf:
cd:91:b2:4b:26:a1:9b:25:5a:44:67:7a:34:23:23:c6:9b:a7:
f5:af:77:fa:10:39:37:3c:4d:4c:98:83:fa:58:e1:25:3b:1e:
2e:b4:5b:1d:ad:71:50:16:94:c3:a3:c3:26:55:a0:0a:18:ab:
62:a6:56:fc:d1:02:ea:e3:bd:4a:70:9a:4c:ea:96:f8:9d:94:
3a:d2:8d:30:27:cf:84:c3:4d:3c:c2:93:e3:6d:78:66:ce:0e:
de:a5:cd:01:c0:08:84:8b:0d:1d:60:fb:b1:02:60:61:fa:ec:
d3:ed:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:54 2025 by rpki-client