Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: ofYx4QKphFq6hJs8EW8TRYdi1CoDNm14v7LI2Uco+C0=
Subject key identifier: 62:66:D9:4E:93:FD:B8:9A:F2:69:6E:FD:DA:0B:52:FE:7D:E8:7B:02
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 019A4EF55A7C186140766FECCF6ECC5669C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 03EE
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: Hbi2Px5vK63vCc5HgPxvlFgvfH/6ybtoFyrHJ+m9Heg=)
2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=)
3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=)
4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5a:7c:18:61:40:76:6f:ec:cf:6e:cc:56:69:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=6266d94e93fdb89af2696efdda0b52fe7de87b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:6c:cf:28:26:76:58:03:48:4f:4c:f6:0a:
82:ed:a4:8b:fa:4b:6c:fd:ef:15:3b:dc:08:4d:63:
7c:1e:20:5b:68:44:18:24:ba:4e:04:b8:d9:ce:6c:
3a:81:df:1c:b8:46:6c:58:0c:cc:10:e7:22:84:8b:
8a:30:12:db:f9:4b:9f:95:89:aa:99:d3:0f:6c:a2:
8b:7d:91:84:da:64:72:e6:fa:2e:c1:15:b1:78:dc:
e2:d6:86:f5:0a:1c:4c:7b:6d:cb:d8:33:08:6c:80:
8d:54:da:97:28:17:de:b5:79:67:3a:c4:fd:56:01:
dc:5a:78:dc:e2:85:37:59:b2:a0:30:94:6e:15:af:
01:33:5f:23:b0:ad:42:ae:04:9c:32:1f:dc:d5:3e:
f0:1a:bf:6c:30:3c:5c:e7:5e:54:7c:af:11:c9:6c:
40:66:c7:07:2c:2c:95:bc:2c:6f:c6:12:5a:3e:15:
12:50:67:fe:66:f0:92:bd:6d:fb:71:50:44:fd:11:
84:fd:ff:fc:07:af:f9:46:2d:c8:a0:6a:5a:15:2b:
2a:96:27:fd:ef:a3:e5:65:ca:36:2e:c8:09:f7:2d:
9a:f8:9f:bc:27:e6:dd:d9:7f:b0:55:db:13:68:b7:
d7:f1:32:a7:38:ee:09:b2:11:20:ec:5c:eb:42:91:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:D9:4E:93:FD:B8:9A:F2:69:6E:FD:DA:0B:52:FE:7D:E8:7B:02
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f3:d3:f1:cb:d0:5c:56:33:cf:61:e3:51:0f:88:dc:8f:a4:
ee:59:95:a6:f7:bc:e8:3f:31:9e:25:aa:7e:2a:94:b5:96:25:
1b:c9:57:95:ec:1c:19:87:d7:1c:1c:60:59:0e:dd:a8:83:d2:
8c:35:bf:90:23:51:3e:7e:00:44:75:1c:cb:ed:0b:38:4d:cc:
64:1e:cd:13:13:e5:2b:bb:df:66:b0:43:a6:b0:19:f0:53:30:
68:68:0a:d8:44:d3:82:be:ed:24:50:47:9b:de:c0:ca:6e:30:
bb:02:c9:34:0a:10:8a:a5:89:29:8e:37:dc:e3:47:5b:a9:1a:
7b:5d:2b:d2:bc:92:68:3b:d6:55:a1:fd:7b:5b:82:64:48:38:
79:6f:11:7e:43:54:62:df:b3:f7:b0:8f:70:0a:72:f5:c2:f8:
48:dd:01:49:c2:eb:82:15:5d:a1:7b:11:37:a0:20:a9:e7:3f:
16:0c:f8:4f:c0:35:bd:c6:a9:8e:f8:dc:0b:ec:02:4f:e5:bf:
d4:5a:9e:b4:d1:7d:12:19:b7:a0:e5:11:0c:9e:62:14:3c:66:
bf:b9:2a:e5:24:62:17:ad:86:3c:39:14:da:d2:37:a9:a7:88:
62:8b:be:56:09:2c:73:10:4d:8c:01:bc:8a:8a:dd:1d:81:1b:
31:b8:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:42 2025 by rpki-client