Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: Xq/3kAYi5pKEYtAyAuwUwrGIOy19c7iIvOACr7/D4Hk=
Subject key identifier: BB:34:D4:4F:48:19:4D:8D:6D:59:27:38:57:00:7C:55:D7:75:83:91
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 019A4E865F929EDBE7CF06B5491485A357CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 048B
Signing time: Tue 04 Nov 2025 11:00:20 +0000
Manifest this update: Tue 04 Nov 2025 11:00:20 +0000
Manifest next update: Wed 05 Nov 2025 11:00:20 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: S7I0qQy+ZmiuLI188+09XisrDVdTBOybzNT46S4pXto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5f:92:9e:db:e7:cf:06:b5:49:14:85:a3:57:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Nov 4 11:00:20 2025 GMT
Not After : Nov 5 11:00:20 2025 GMT
Subject: CN=bb34d44f48194d8d6d59273857007c55d7758391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:ef:27:77:34:16:33:3c:95:7d:b5:1c:fe:
84:91:86:83:95:58:b8:66:be:61:d3:13:32:6c:8b:
cd:2a:e6:b9:65:83:76:79:88:b2:b1:1c:81:49:fc:
09:d7:ea:13:b4:d6:05:aa:3b:cf:fe:fc:e6:66:6f:
f8:f3:c9:ac:be:0c:f7:9a:ab:22:5c:84:0f:52:26:
51:d8:0c:6a:4d:a2:50:c8:44:59:6c:cb:14:7e:2c:
ad:b2:e2:b8:1c:cf:5a:26:96:2a:2e:4c:9b:38:c6:
71:41:c5:2c:95:48:33:d9:f3:23:cd:4b:ac:b7:33:
95:a3:e2:36:98:b1:83:2a:ee:4f:83:1f:f7:58:7c:
29:b1:04:4b:b8:88:30:82:96:6e:5f:31:8d:3e:d9:
56:5d:d1:1d:1d:82:1f:74:ea:33:16:7d:4b:d5:a0:
ca:d7:54:35:ea:68:aa:ee:67:7e:be:e3:b7:55:27:
c6:b0:14:5f:74:54:c9:5e:4c:98:30:fe:32:dd:e4:
f6:2e:4f:41:43:ea:25:0e:3e:61:67:e0:91:b1:8a:
4f:4f:71:dd:6f:ff:d8:91:37:be:14:3c:d1:9a:d5:
a2:11:ca:23:c4:84:0c:f7:d0:0a:6b:8d:4d:e3:46:
c9:0a:a2:06:96:45:e1:34:69:8c:8a:fa:55:91:9c:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:D4:4F:48:19:4D:8D:6D:59:27:38:57:00:7C:55:D7:75:83:91
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bc:f0:8a:53:8e:1c:8e:7c:98:4c:94:b1:8e:87:ee:c9:90:
6b:fe:4d:1f:13:d4:d6:d2:58:79:dd:00:1a:e5:be:51:10:7d:
bb:f7:a5:61:15:bf:b8:77:3f:63:42:09:19:68:b2:48:65:c6:
bf:b9:54:c9:c4:88:21:04:49:b4:ef:80:2a:6e:41:74:b0:1d:
0c:96:63:8d:38:6d:a4:34:72:a1:ae:bb:b9:48:a9:94:e1:71:
14:cb:50:06:8d:06:f6:63:a9:17:e1:ba:e7:88:8a:c2:02:cf:
cc:dd:5f:0b:1b:28:6f:f1:3f:6c:1f:3c:29:e8:e2:02:a7:93:
b0:89:39:ed:4e:ea:b4:78:ac:ba:15:20:5c:3b:70:09:c0:93:
3e:34:66:f9:b8:a9:d8:a0:16:95:eb:e0:06:0b:b7:2b:c8:5d:
65:61:e0:78:32:48:cf:f3:c8:73:d2:e1:d8:c1:33:de:75:d4:
fd:02:30:34:ee:a0:03:e0:41:8c:75:7a:d1:71:9b:b2:ea:83:
72:36:65:84:bc:f3:f6:30:54:c9:f3:87:ac:25:a9:3a:aa:68:
dd:70:4f:06:c0:ad:0c:8c:04:c5:9e:79:7f:10:2a:6c:6f:82:
f5:df:db:92:58:4a:51:3b:9b:9b:0a:b7:e0:2b:e3:11:0b:c0:
8e:03:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:23 2025 by rpki-client