Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
File: 8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json)
Hash identifier: Ee3jm8bKLnbACghVTQbAVikwtTSOwcV7emAFHMrjXyY=
Subject key identifier: 8E:FC:F2:E6:BB:F7:FE:E5:8E:61:C4:5B:B3:DF:66:D4:0F:06:53:31
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial: 019A533FA8471EE3C5E41AB03819A5C184B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
Manifest number: 02A5
Signing time: Wed 05 Nov 2025 09:01:11 +0000
Manifest this update: Wed 05 Nov 2025 09:01:11 +0000
Manifest next update: Thu 06 Nov 2025 09:01:11 +0000
Files and hashes: 1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: J5Tx629hO4y9asd87dAGqw0Pr/x6mx+4fn9wjCFmpKU=)
2: sW8bwiGLsI7Vh96L_GlmvLQDJKY.roa (hash: zwPk0zZ0KWeH/lkVto00u9mSsOX9BDpbaWABcwD0yq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:a8:47:1e:e3:c5:e4:1a:b0:38:19:a5:c1:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Validity
Not Before: Nov 5 09:01:11 2025 GMT
Not After : Nov 6 09:01:11 2025 GMT
Subject: CN=8efcf2e6bbf7fee58e61c45bb3df66d40f065331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:ca:c3:e5:bb:0b:6a:3b:e9:86:c0:2d:65:
ea:27:a8:0c:f0:64:1b:30:e6:ef:96:39:bd:66:a4:
42:97:70:be:5e:00:6a:07:5b:a6:71:36:c2:1b:d8:
e6:44:70:2f:59:37:ae:92:57:b4:c2:bc:6a:d3:ca:
75:c6:f2:87:6a:da:82:34:73:cf:33:ca:4c:96:be:
14:cd:34:9d:60:c6:d7:da:cf:a9:d8:d5:ee:de:e1:
a9:8f:b8:5e:ff:e5:ee:9f:99:67:06:e7:7c:0f:eb:
19:34:11:b6:a7:3b:5d:e9:01:5e:20:63:10:12:a1:
a2:2d:bd:88:9c:f4:d0:37:48:7e:62:14:27:da:3c:
bb:bc:c1:7d:ad:05:64:19:a4:47:8a:2f:92:5b:fd:
75:9f:96:69:7d:31:ce:4c:0a:df:dd:d7:ae:c2:22:
70:d1:72:8b:da:e3:4f:37:33:f3:d5:46:c7:b1:c1:
a9:c5:04:8e:09:94:fb:5e:f6:7d:b4:cf:5b:0d:52:
1e:50:2a:c4:86:6c:1a:a5:e9:2d:07:2d:61:8d:1c:
55:bb:67:15:86:a5:62:15:fd:f8:cb:46:69:ef:dc:
ee:38:13:c9:e0:45:58:ae:7b:40:a1:85:fa:5e:cc:
4e:47:6b:46:01:56:6e:08:b2:67:ac:c2:20:63:89:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:F2:E6:BB:F7:FE:E5:8E:61:C4:5B:B3:DF:66:D4:0F:06:53:31
X509v3 Authority Key Identifier:
keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1a:66:ae:ad:db:85:8f:f7:0b:b5:5a:91:2f:83:a3:aa:e4:
97:8c:02:4e:3b:5d:d4:5b:b0:66:be:83:03:4a:54:95:06:02:
5b:7f:d1:2a:74:cc:cd:a5:5c:11:b9:f1:50:67:cb:5c:ce:08:
ac:66:25:f3:de:d9:a4:93:97:5d:80:9f:08:fe:56:1b:fd:1c:
69:fa:8b:84:11:20:a5:76:05:94:5f:af:74:94:7c:a5:01:aa:
b3:f9:ab:ae:cc:48:4d:cf:10:dd:ea:fb:32:b1:32:ed:10:16:
1d:4b:4e:34:8c:97:37:f8:a9:cc:2d:ef:14:b3:e9:a0:da:dc:
c7:1f:56:b8:6c:87:78:df:4a:11:bb:ef:11:87:88:d2:62:b7:
b3:2a:2a:d2:38:f3:b8:76:0b:9a:87:43:46:63:10:61:5f:25:
a1:27:69:dd:b2:58:de:c0:9d:e2:55:86:b6:0d:67:50:c9:e9:
ab:66:bb:ff:0c:5a:37:f3:d7:00:99:57:b5:c6:75:e8:2e:23:
58:00:e1:4b:44:0e:2d:5d:68:80:75:82:9e:59:85:c8:65:80:
f6:3c:1d:ae:22:33:0d:64:50:75:97:34:39:26:5d:64:02:8d:
d7:cc:23:c1:73:a1:80:1c:b7:81:75:e1:8f:54:f9:af:1d:b5:
21:69:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:36:44 2025 by rpki-client