Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: c2qwmoKjzCspjQAdzAe2armQkQvGDKKWzDVyYvQ/SQU=
Subject key identifier: CB:F7:74:3F:20:44:2B:9E:7B:CA:13:75:C7:F0:F2:FF:F6:21:46:E6
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 019A4E1872610BA6D916AA95F51A676CD305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 04DD
Signing time: Tue 04 Nov 2025 09:00:16 +0000
Manifest this update: Tue 04 Nov 2025 09:00:16 +0000
Manifest next update: Wed 05 Nov 2025 09:00:16 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: qLJZPlpoAUyJmGEY0XvsGBoe9Xjlk3HrW5rztGoqEeg=)
2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:72:61:0b:a6:d9:16:aa:95:f5:1a:67:6c:d3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Nov 4 09:00:16 2025 GMT
Not After : Nov 5 09:00:16 2025 GMT
Subject: CN=cbf7743f20442b9e7bca1375c7f0f2fff62146e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:74:9a:26:26:69:88:75:b0:46:79:18:b1:
e8:ca:34:4a:71:a7:79:40:28:82:e0:ff:66:bf:5e:
66:04:a8:de:d3:a1:19:39:f9:52:5f:6a:d8:a9:65:
f4:3d:0a:cc:92:ef:49:18:67:6a:aa:72:8f:e1:3e:
8c:10:a8:db:83:d4:af:f2:ea:f1:58:3a:8d:bf:2a:
2a:21:c5:af:5d:5e:fb:3b:9f:b2:57:09:e3:49:d2:
67:e1:bd:44:38:32:26:0d:37:41:e5:59:1f:e7:ed:
90:3e:64:75:7c:6e:fb:a4:d5:70:82:7e:00:bc:99:
9f:08:d4:24:4a:ea:a0:32:4f:a0:02:a0:2d:60:cd:
3a:9a:12:14:c7:4f:82:11:36:65:43:63:7a:e5:83:
a9:00:ab:db:ba:31:ea:6a:08:e5:ae:c9:f3:c8:64:
ac:06:87:41:ed:1f:2c:18:0b:ea:de:48:ad:97:07:
ca:32:3d:3e:e3:86:55:8a:03:48:88:9b:9f:de:d9:
a9:3d:67:9d:8e:f8:ec:6e:e4:5c:1c:98:bc:25:16:
0f:eb:0f:fa:64:7d:a9:10:d3:d8:68:4f:79:fa:8e:
2a:de:d7:7b:25:d5:69:8a:4a:f1:38:dc:bb:90:b5:
ed:05:7d:c4:f8:1c:5e:1f:3e:22:02:38:2c:fc:94:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:74:3F:20:44:2B:9E:7B:CA:13:75:C7:F0:F2:FF:F6:21:46:E6
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c8:7a:76:02:33:1d:9d:b3:95:52:3d:ac:55:71:a7:77:1f:
eb:4c:b1:b4:b6:7c:c6:b0:e4:07:7a:1e:15:7c:d1:bd:12:00:
c0:00:ed:4a:fc:49:3b:4e:fa:34:f6:9a:81:de:d2:41:4c:8c:
ee:c9:7e:13:ad:38:27:af:cb:9c:23:a2:38:9a:06:a6:15:c6:
d5:60:8d:ae:5f:12:23:54:0c:2b:81:00:c5:4c:86:12:a8:03:
f2:b2:06:ae:5e:b7:ae:fe:08:c8:d8:c2:ee:38:b0:de:da:45:
b1:20:fb:d5:65:48:70:c0:ce:e0:36:35:b9:dd:1b:58:08:63:
bc:25:00:33:60:38:9a:23:aa:50:b8:88:9d:28:97:35:3a:ba:
1e:83:78:7f:3e:a2:c6:59:3e:f1:6b:ce:5a:ff:66:67:d1:ab:
d5:ef:03:45:fe:5e:cb:1b:d2:10:f4:f3:b0:11:79:e7:15:c3:
d7:8f:37:a6:e4:33:0b:bc:df:d1:74:71:58:37:ba:b7:1f:8a:
69:fa:fa:88:57:9c:2d:a4:b8:f7:2b:c1:fa:99:2c:6a:f3:77:
3d:55:c3:cc:ae:06:08:da:a3:97:38:69:fb:38:64:46:4f:b9:
95:f9:f5:f3:8d:4a:73:b0:65:f4:30:d8:d9:b6:99:c8:fa:4f:
e9:7e:51:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:52 2025 by rpki-client