Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: 7AHd5sMFDoKCl9vVHFQyjtxxYnbUJfKXacdEgEKQcj0=
Subject key identifier: 4F:1A:DF:B6:9C:7B:34:C3:2F:08:0D:8C:00:65:2C:2A:69:40:91:34
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019A50E44691B2442654E16D9BCB02657CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:02:08 +0000
Manifest this update: Tue 04 Nov 2025 22:02:08 +0000
Manifest next update: Wed 05 Nov 2025 22:02:08 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: ANgyqPIHfYKlk/ooz2XN4tscVHq3iJ3R0OGOxoWzFow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:46:91:b2:44:26:54:e1:6d:9b:cb:02:65:7c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Nov 4 22:02:08 2025 GMT
Not After : Nov 5 22:02:08 2025 GMT
Subject: CN=4f1adfb69c7b34c32f080d8c00652c2a69409134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:1e:8d:a0:b4:58:c1:7b:3f:7c:17:11:91:
ab:e4:b1:53:75:da:24:2e:c8:3b:9c:48:ff:89:97:
22:d1:82:9f:c3:89:53:eb:91:28:de:5f:c0:27:8c:
69:fe:0b:c4:01:ab:48:2b:9e:3c:bc:94:1f:41:ed:
4a:ad:b1:13:b3:32:24:6b:64:b7:54:9d:89:48:8b:
3d:44:27:e3:0a:eb:9d:3d:c4:1b:a4:8c:e1:51:66:
e8:fe:d9:71:d9:9e:25:e1:1e:17:b6:f8:01:67:22:
3f:b7:3a:2f:bf:20:4d:14:3a:75:53:0b:ab:52:27:
1a:31:90:54:0f:c9:97:6c:37:f1:75:cb:14:a2:94:
f7:bc:51:4f:c6:d5:ac:f8:48:79:32:bb:b8:f3:ff:
9a:e3:b4:0a:30:70:de:d6:c2:47:57:12:73:ba:63:
93:2e:5b:23:b4:d5:44:c9:fd:d1:c6:b3:05:70:fb:
a4:fc:10:43:1c:83:4f:51:af:ce:3e:1a:5a:e7:a3:
12:9a:aa:37:de:b1:9f:20:ce:a6:c5:00:f6:c5:10:
cb:1f:d5:b0:28:63:88:40:73:79:61:2d:e2:b8:8a:
be:fe:86:a4:c7:8b:82:ab:86:99:96:40:6d:21:d2:
61:32:fe:18:c4:a8:a4:05:5b:93:55:89:ec:b4:4d:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:DF:B6:9C:7B:34:C3:2F:08:0D:8C:00:65:2C:2A:69:40:91:34
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:b5:57:66:b2:29:18:f0:55:cb:5f:70:a2:6a:0a:1c:a5:
a4:73:ea:93:c5:65:bb:1e:d5:4f:c9:45:28:11:e1:f0:4c:a7:
30:73:e2:e7:e9:9a:66:e7:22:df:86:ac:6f:bc:3a:b7:07:00:
79:dd:f1:ba:2b:54:a4:60:9b:c4:98:b0:d6:2f:24:0a:25:d9:
98:1a:b3:80:4f:91:f9:1a:48:80:e1:03:2e:74:6a:b9:ed:d7:
6d:e2:2b:e8:2c:a1:28:a3:30:5b:3f:4d:a2:e8:a8:fc:1e:22:
67:fb:2a:83:4f:1b:bd:8e:ca:ec:d2:38:97:30:3e:94:21:c4:
95:0d:5b:b5:a0:ba:a2:1a:43:1f:87:31:b1:e8:ea:6a:2b:1f:
41:70:93:01:69:d4:05:ff:96:9a:14:c9:1f:47:d3:bb:45:65:
ac:00:b3:6a:e1:77:75:63:5f:b8:0a:89:e7:53:22:41:42:11:
7a:7e:7d:21:df:38:0a:f3:ca:a0:3a:32:53:51:42:f2:8b:16:
23:c5:60:1f:78:3f:96:8e:2d:83:dd:0b:10:d9:ac:89:e6:17:
ea:e2:10:d9:bf:85:42:e2:9a:fb:b6:fb:eb:7d:1c:40:79:11:
39:05:d5:0a:4e:d2:b2:b5:94:b1:5d:63:4c:7e:ff:d8:ae:28:
65:a9:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:09 2025 by rpki-client