Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: q+WI0E7lHBYAot46J0goKwQ2pgrbgGG9YOFli3D4rWk=
Subject key identifier: 9A:D5:E8:1C:91:FC:2B:D7:A2:7E:1A:32:FD:5F:1B:60:7D:0F:8A:75
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 019A4EF4A96A881514114EFD28A375CC99D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 0CD6
Signing time: Tue 04 Nov 2025 13:00:48 +0000
Manifest this update: Tue 04 Nov 2025 13:00:48 +0000
Manifest next update: Wed 05 Nov 2025 13:00:48 +0000
Files and hashes: 1: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (hash: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=)
2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: +gN5GfIbkZbpqCLj4YCgGW9G3IeXlV0JbS0SPd7ZAaY=)
3: BqfUS67NwEGbDUdjYax38K2Njlg.roa (hash: FXBdDnrJbkKIYFCTwLmrjslC3wsmF26/kRrmIGLYDVE=)
4: ExI_XUjszL60Ie9A5TinBHd-jBM.roa (hash: Ih+JMM3ki467y9AI2VydiKfnBZRQqt/x3WLry7BgEoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a9:6a:88:15:14:11:4e:fd:28:a3:75:cc:99:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Nov 4 13:00:48 2025 GMT
Not After : Nov 5 13:00:48 2025 GMT
Subject: CN=9ad5e81c91fc2bd7a27e1a32fd5f1b607d0f8a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:f7:1a:02:e3:86:92:f6:5b:f4:e7:ef:f8:
ae:57:bb:76:d5:c0:2a:8a:25:22:34:55:8f:1e:a3:
61:96:7c:fc:e8:9f:0b:b0:14:d0:a4:92:14:93:38:
c4:6c:35:5b:e8:94:cf:63:17:f8:28:00:39:b5:94:
41:be:f5:2b:97:95:e3:f4:26:20:4f:d1:7d:69:fb:
15:52:20:01:68:2e:4b:ea:fb:a1:d9:7e:3d:28:70:
de:76:09:e2:43:bd:a2:ba:0e:5d:bc:24:13:c9:87:
23:2a:40:d5:4b:23:f2:a4:76:a5:4b:ae:79:a5:4a:
bc:61:4a:5d:b9:0d:72:ee:7d:c7:8e:31:82:30:bf:
65:bb:4e:73:46:fb:09:7b:40:e4:e0:aa:7e:70:db:
66:cd:da:56:79:29:4c:93:21:31:aa:4b:79:79:06:
66:5e:e4:1e:5a:68:1d:c8:6b:83:3b:63:8b:47:2d:
7d:76:f6:f6:ab:17:47:58:13:b5:e2:c8:2e:1d:9c:
51:9d:7d:41:f4:7d:f1:ca:99:4d:45:59:e9:36:c9:
09:a7:7e:21:56:62:2c:bf:67:73:b4:1d:fe:ec:6a:
40:31:32:2a:5f:db:62:b7:15:c9:3d:17:46:dc:b7:
90:53:08:de:50:c0:46:bb:cc:f9:24:65:13:0b:72:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D5:E8:1C:91:FC:2B:D7:A2:7E:1A:32:FD:5F:1B:60:7D:0F:8A:75
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:54:8e:1b:ce:5c:e1:cb:57:89:a2:00:2a:3c:9b:fa:3c:93:
8b:af:f1:a3:d2:fe:5c:9d:56:6d:c8:50:7c:bc:10:54:72:de:
b7:f5:e4:29:1f:06:f2:7b:67:87:e7:07:55:30:fa:6e:5e:1e:
e7:d9:12:c0:7d:50:78:37:38:89:9e:0a:0f:02:58:d3:09:23:
11:a4:cd:92:da:52:96:2e:c9:c8:9e:0a:09:a2:4a:b0:81:13:
79:6f:6c:f5:e8:35:c7:9f:9c:11:2e:a3:6d:34:4e:bf:34:18:
b8:e3:b3:77:6b:39:6e:2f:0c:e6:f4:f1:87:72:7b:d2:46:55:
32:c6:ad:02:80:4b:64:8a:2c:53:4e:4e:0f:48:49:0c:15:8b:
8e:95:c2:65:09:c3:ae:b8:cf:3b:f4:9c:a8:73:00:6f:1f:9c:
46:51:a9:ec:7d:36:d7:a3:5b:03:f9:82:e4:f4:d8:bc:d8:d7:
ad:b6:ff:d1:73:21:9a:6c:10:ef:60:f8:6d:8e:0f:8d:59:55:
85:d3:05:2a:fe:55:ed:94:d6:fb:c6:69:ef:1b:05:03:26:00:
7f:5b:b1:7b:e4:de:72:c4:d4:a8:6a:3f:5b:49:8d:72:d6:9d:
12:e0:32:80:fb:ee:97:ed:67:36:eb:a1:0e:7a:f1:2f:d8:8a:
c8:8e:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:30 2025 by rpki-client