Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: GkmDxdtotkpXxS7nk4AqbWaZhFlHLEhQN7gLTTUEK8s=
Subject key identifier: 8B:B2:F0:8C:FE:37:2C:1D:70:93:4E:02:30:E2:7D:EC:8D:FF:E7:6E
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 019A4DE16CB1691086B08F9834D9EB6DA66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 16DA
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: 8A0o9z2crllQR/KAIHAv754z2UZ85TUGUUqLDtWkEMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6c:b1:69:10:86:b0:8f:98:34:d9:eb:6d:a6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=8bb2f08cfe372c1d70934e0230e27dec8dffe76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:19:da:0b:3f:d1:74:09:cb:89:7b:b3:98:f9:
2e:02:ce:56:31:b9:91:3d:fd:f3:25:bb:3a:6b:bb:
7e:68:4e:b1:2a:24:13:9f:8c:be:90:d4:a6:42:43:
d0:b8:05:4a:d6:17:7b:4e:8c:6e:d2:12:c0:7c:09:
eb:e2:d8:ad:66:ca:7f:4a:94:21:ce:1a:84:3b:37:
d3:a4:ea:8c:b2:60:4c:89:5c:b8:6c:43:6c:35:31:
fc:dc:ce:44:68:a1:e4:52:80:12:a2:fe:66:95:63:
2c:cb:bb:a1:3a:b0:2c:49:3d:92:26:de:1d:05:60:
f1:fa:be:d1:64:c1:37:22:6a:02:09:0a:e5:5b:05:
d5:b0:d6:4f:e1:d3:6a:4b:fe:07:e7:2a:67:2c:e6:
f7:79:fb:ba:f1:8f:58:60:c9:ec:2f:66:db:e3:3e:
e1:2f:e7:c1:c3:b1:73:83:48:26:5d:45:28:e6:c6:
21:9e:47:ae:ae:40:e5:b1:2d:d8:32:69:5c:e2:8e:
6a:94:23:e4:2f:08:2a:3d:70:41:bd:3a:55:4c:fa:
db:44:ea:c0:25:c4:13:12:c8:a4:3c:5b:32:43:7b:
3f:36:9d:bd:7f:e4:c0:94:3f:e0:ad:b2:32:6b:a1:
ae:cd:9a:5b:b8:98:55:d5:62:36:4b:b6:7b:cf:eb:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B2:F0:8C:FE:37:2C:1D:70:93:4E:02:30:E2:7D:EC:8D:FF:E7:6E
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:e7:a2:19:7e:d4:93:80:c9:e0:f3:4c:8f:79:80:3b:ce:
ce:78:cc:b5:7f:50:38:31:0e:d2:72:a0:f8:34:44:f0:69:10:
c1:3f:bb:10:12:80:dc:53:f3:27:85:5f:a8:67:f4:61:97:ee:
14:ac:0d:9a:da:87:c2:d1:96:2b:2b:ca:cd:9a:64:dc:36:d7:
8e:23:1d:35:e4:9e:0b:3a:6d:62:7b:7e:2c:dc:0b:de:14:1a:
51:10:55:02:a8:4b:a7:b5:2e:e7:76:d2:e7:0a:53:49:a4:89:
0d:d4:d5:80:8e:fb:af:3e:47:ec:42:8c:52:c4:bb:c9:6e:ca:
6a:e3:d8:67:44:bb:0c:b4:36:9e:cf:d1:49:09:d2:4b:5c:27:
27:8e:b3:da:41:2f:ce:e1:bf:ee:05:34:21:6a:5b:03:94:43:
6e:c5:e5:9a:24:fd:5e:f3:2a:76:68:72:6f:da:d2:e9:ef:1d:
6d:82:97:65:66:66:b7:a2:79:3b:44:48:8b:25:30:bc:9d:9a:
71:d4:d2:d9:c6:42:2a:bc:39:18:7d:2a:71:f2:2d:89:8e:7d:
5e:cf:db:75:b1:06:da:0f:0d:d3:a5:72:a2:f2:b0:0d:90:82:
4f:7f:c4:fc:d7:9f:62:a1:69:db:73:bb:7f:90:33:1e:ba:5b:
7f:be:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:47 2025 by rpki-client