Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: cq+EomTsviLuICK2Nx4llgfrBJth1JsFhmweuFqZwmM=
Subject key identifier: 3D:5C:98:3C:4C:BE:52:92:97:69:DD:57:7F:22:A7:39:E7:1F:B8:71
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 019A4EF41344F1C930478E72D3A49AB371BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 050E
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: o6INOzZq9I9DXj2lYZI8ASzrrlASAAy4zyvT+Pol4qo=)
2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:13:44:f1:c9:30:47:8e:72:d3:a4:9a:b3:71:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=3d5c983c4cbe52929769dd577f22a739e71fb871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:0c:9f:b7:45:c2:92:fd:c4:15:fc:1c:1b:
5e:e9:09:53:29:13:11:52:e2:75:d7:5d:17:3f:db:
ad:8a:fb:02:ad:04:65:10:ff:5c:04:04:22:d8:af:
4c:da:9e:f1:1b:a3:d9:e2:e9:99:cc:5e:cc:75:21:
34:94:71:8e:63:55:fe:36:f5:4b:64:01:b5:f9:98:
e1:ed:20:b3:4c:bd:b3:17:1f:ff:f5:9a:9d:bc:22:
c4:e3:8f:40:80:1d:d8:53:00:04:4d:78:da:21:2c:
21:ad:7c:55:20:47:7b:2f:a7:24:06:6f:b1:ad:44:
7b:3d:2c:c3:3e:80:76:b3:48:d6:01:ba:c8:55:b6:
0d:f0:ab:54:bb:01:51:7c:49:88:51:3d:33:4f:f5:
ef:17:ee:84:47:3d:a4:4a:0f:d9:80:d9:56:7f:71:
57:c9:d3:e3:c2:8a:73:29:1a:e9:6d:7e:ab:38:6f:
13:84:63:6d:6a:3e:da:b7:13:d9:f2:d5:75:89:c0:
73:00:21:38:2d:fb:93:9d:f5:dd:90:e8:b7:17:c6:
56:35:22:f5:87:33:e7:4d:16:37:a5:e4:61:d5:d9:
f2:f9:32:52:dd:d1:8e:27:af:3c:e2:6b:ab:e9:2e:
03:aa:aa:d6:c0:ee:76:ab:c6:2b:4c:06:58:34:19:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:98:3C:4C:BE:52:92:97:69:DD:57:7F:22:A7:39:E7:1F:B8:71
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:3d:fa:62:92:18:fc:76:81:30:07:ae:39:07:94:f9:e1:
cb:6f:9a:c6:5e:95:9f:77:05:f8:1c:78:91:d6:8b:ac:84:6b:
b6:2e:1b:22:9f:17:90:49:4f:db:0b:1e:07:ee:46:1e:ee:70:
22:d7:b2:89:ff:2e:ca:ce:c4:07:3f:bd:84:20:81:3f:aa:94:
96:02:97:d6:cd:6e:f4:33:67:55:32:30:20:08:17:a4:ce:97:
68:e4:23:c1:50:b4:16:3b:ed:75:51:de:d4:41:0b:f4:9c:a6:
5b:e6:a9:72:cb:14:f6:b9:39:36:88:82:91:3b:46:f4:3e:58:
d2:2b:1e:e3:74:bb:c9:b1:32:26:7d:ed:1e:a7:db:25:35:00:
c8:10:69:af:86:24:2f:23:ec:6d:f2:69:18:e2:06:d5:24:0a:
e9:f4:0a:23:e3:2b:c7:dc:23:55:f3:95:4f:c8:c0:2d:51:93:
ab:bb:74:72:c1:6f:f4:fb:75:06:b5:46:53:40:93:21:9e:84:
30:0c:b0:71:15:5f:a9:c2:a6:a1:72:2d:b5:18:c3:d9:56:50:
81:ac:68:c2:39:88:93:d9:b8:27:62:44:ab:ca:5d:13:6a:4b:
b1:f1:4b:66:bb:18:ce:d4:50:bc:5b:b1:93:df:f1:e3:a2:ec:
60:69:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:32 2025 by rpki-client