Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: 0tRLS7X1YcKrmC40G14ZpZ1xC3QIRXJ/LfaDU5GjK/c=
Subject key identifier: EB:72:2D:C4:4C:26:8C:5F:C7:80:A4:20:7A:46:7C:87:B8:0D:DD:51
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 019A4D063BA436D8F8C83C980C3CB6105F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0ACF
Signing time: Tue 04 Nov 2025 04:00:45 +0000
Manifest this update: Tue 04 Nov 2025 04:00:45 +0000
Manifest next update: Wed 05 Nov 2025 04:00:45 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: wMm1WY9x6C3v6tgFASOUpuAD+vjh7zS1KEiWwZLzuu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:3b:a4:36:d8:f8:c8:3c:98:0c:3c:b6:10:5f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Nov 4 04:00:45 2025 GMT
Not After : Nov 5 04:00:45 2025 GMT
Subject: CN=eb722dc44c268c5fc780a4207a467c87b80ddd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:fd:47:75:e4:9c:2d:db:7d:18:6f:ae:7e:
c0:0c:99:c8:1d:19:53:3e:88:00:6f:3c:55:12:a2:
24:d1:bb:e1:c2:6f:30:8f:44:84:a7:c8:88:5d:4f:
3b:e4:52:2c:52:75:d6:e5:ab:29:35:a0:17:fb:c5:
6b:23:e6:cd:85:c1:e6:93:a6:be:27:d9:d1:03:c5:
fc:3a:39:34:38:26:96:98:0a:fe:b4:7e:9e:c8:c0:
d2:26:67:ea:7f:c3:c2:ae:2d:1b:9f:33:96:40:8a:
0e:36:b6:87:15:4a:96:ee:59:17:57:39:5f:7f:b9:
a0:b8:5e:92:bb:f7:dd:0e:37:45:d3:46:f8:2a:df:
d3:34:95:0d:6a:d1:1d:0b:3d:6a:e4:7f:dd:62:d5:
21:72:94:fb:43:3f:b6:34:b8:2c:6e:f2:42:82:a2:
68:27:cf:8d:c0:a3:8d:12:0d:db:74:99:10:33:d9:
4a:f7:70:dd:9c:46:ba:16:4b:ec:3e:1f:19:a7:0b:
59:34:94:02:14:0e:17:20:e5:79:4f:75:f1:7a:4b:
4c:53:7d:68:e7:d1:29:82:1e:6d:66:7e:a8:e2:ea:
6e:e9:8e:58:a1:51:39:be:ff:d4:5c:e8:db:7d:c1:
7e:80:3d:d5:83:d3:0f:3d:bc:c5:f5:06:95:fa:a9:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:2D:C4:4C:26:8C:5F:C7:80:A4:20:7A:46:7C:87:B8:0D:DD:51
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3d:3c:d4:8c:bc:d5:cc:c3:46:fb:f8:3d:34:0b:ef:0b:c3:
f3:4b:0b:d2:79:d9:b1:9e:cc:d0:4b:43:26:86:2f:08:cd:ce:
c6:2e:e8:b2:1a:63:53:d3:36:f6:a3:75:7d:de:49:62:80:b8:
8a:77:3b:8a:12:7d:4b:f5:37:ed:36:c7:a2:11:1c:7f:03:b3:
ba:d7:a2:fb:50:e3:5a:8a:3b:b7:2c:6c:92:d1:bd:d6:33:d7:
0d:ba:bb:75:f7:f3:68:b5:71:5f:87:42:76:e4:94:05:48:f3:
45:5a:50:20:72:fb:f6:84:5e:b4:6b:87:78:54:c4:07:b6:d6:
73:4b:c5:c4:0c:1b:78:02:e2:6f:5b:a4:07:49:99:91:af:c9:
3f:e3:66:0d:cd:4b:e5:fc:a7:af:96:8f:df:4d:24:54:4f:d9:
c1:96:c2:fd:e5:98:46:3a:95:2e:3e:d5:68:3f:37:0c:79:6d:
5e:a1:d3:80:1a:b3:fa:5c:94:cb:18:34:3c:f7:58:5c:7f:15:
68:d9:57:8e:ae:68:4a:c0:17:a6:b3:0c:26:3a:bb:a9:23:49:
a3:67:c8:cb:d9:26:41:1b:61:3c:63:49:ce:0e:89:5e:24:6e:
5e:09:50:13:85:22:ba:c3:02:7e:e0:49:b8:22:f3:99:01:1d:
e8:18:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:49 2025 by rpki-client