Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: 3TjvFz55vlBksdHWUnJh8KxgEHphP9PJTTrveDNc7nI=
Subject key identifier: 8E:40:2B:86:72:39:5F:77:A7:BB:E3:48:D0:86:F4:2F:DE:D3:1C:7D
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019A54518F842E76D4DCF77FFF64B94EBA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 65
Signing time: Wed 05 Nov 2025 14:00:22 +0000
Manifest this update: Wed 05 Nov 2025 14:00:22 +0000
Manifest next update: Thu 06 Nov 2025 14:00:22 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: +Ux7lZb1Pidd9lDoaycb4RDoolnbEzOmMD6I7qCSNHk=)
2: Xd7ijHjwtfXf4zZiE_HQf8TmqP0.roa (hash: w9B2n3G58lCmyJiIUIJesOdWt7RmGyJHNmHtEsf7LS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:8f:84:2e:76:d4:dc:f7:7f:ff:64:b9:4e:ba:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Nov 5 14:00:22 2025 GMT
Not After : Nov 6 14:00:22 2025 GMT
Subject: CN=8e402b8672395f77a7bbe348d086f42fded31c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:35:84:b3:00:d0:16:2a:44:7c:48:47:e6:91:
85:7e:46:54:7c:d1:28:2d:bd:1d:f7:6e:f5:1a:8c:
29:b7:86:c7:9a:32:f8:d2:cf:25:00:bc:90:4f:c8:
c8:2c:d4:14:58:eb:ff:1f:42:b3:09:0b:f3:e3:30:
d1:84:d8:ef:18:15:b4:84:e8:72:b5:09:2d:f5:0e:
f1:96:e0:b2:da:ff:71:5b:1e:b2:bd:0c:65:81:63:
a0:09:ed:ce:e7:e8:01:b8:7e:75:0c:0f:c4:d9:73:
da:33:aa:79:c7:db:a3:7c:39:ad:73:c0:1d:00:c6:
28:58:b2:c0:df:00:65:c5:87:35:5e:19:c9:b8:ed:
fc:be:d2:47:3b:3e:61:37:4b:8c:04:b9:61:85:ae:
1f:01:5d:a5:92:ef:0e:06:99:47:fd:e6:33:61:10:
26:86:20:0f:a9:25:b4:6b:e7:40:2a:b9:b5:f8:9d:
f6:17:40:df:3b:80:fb:f0:68:fa:c4:d0:62:c2:f6:
d4:48:34:35:25:9a:9f:56:f4:b8:3e:a1:28:97:1b:
83:1e:df:0a:2c:a3:05:8f:55:04:c0:3a:9f:d0:8d:
52:d0:bd:10:5f:25:67:86:b2:d4:44:96:23:63:83:
df:06:46:0c:1a:53:92:9b:ac:bc:af:b6:20:ea:87:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:2B:86:72:39:5F:77:A7:BB:E3:48:D0:86:F4:2F:DE:D3:1C:7D
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0f:a9:39:b0:de:41:ce:13:ce:78:8a:61:22:d6:7c:f2:b7:
8d:11:bd:80:46:a5:b1:42:98:9e:a6:97:6a:10:86:ee:51:d0:
22:a2:6b:30:85:52:53:c7:05:bf:b0:84:4a:71:6d:0f:79:34:
3c:66:7a:2f:23:66:66:05:d5:72:bb:72:12:d4:a4:9c:1d:dc:
43:91:10:48:1f:10:e6:93:d4:1a:b5:08:36:cf:c3:68:5a:ad:
b8:41:66:7e:82:31:ab:7c:ba:d3:36:0e:4d:29:f3:22:fb:46:
69:4d:6c:a9:83:ab:de:50:49:7b:19:c6:ad:1f:1b:08:96:57:
95:2f:9e:26:dd:3e:7f:80:14:85:dd:b3:38:eb:2d:a0:cb:27:
91:44:cf:be:cf:7f:4b:14:52:c2:7f:8b:2c:78:58:fe:e6:27:
df:5b:45:e5:e8:54:fa:6c:1f:a0:ae:23:dc:db:ff:f0:14:36:
f1:38:de:22:6d:c6:77:25:de:07:fc:59:bf:05:b4:30:e7:77:
08:24:0c:54:09:6c:88:ad:b8:02:73:df:96:aa:02:9c:84:7b:
b7:11:2a:0d:94:7f:2e:4d:32:5f:62:71:a7:5d:f3:07:8e:ef:
e3:51:f3:6d:c9:e3:34:dc:b3:f9:1f:08:17:b1:3a:ce:d9:22:
0d:2b:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:03:45 2025 by rpki-client