Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: CncviirX5TA75CY+SSAoUPDY9ghxUpHSR9Cydh/4lg4=
Subject key identifier: DD:E0:33:DF:21:B9:99:8B:B6:96:4C:6D:D6:CC:E0:0E:9C:98:45:9F
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019A4EF51E0BD5A5CE8D24EFC4413729EE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: oIB/9G7yC1weAjq8TLnGE4vvJOjACwI5aRhrJMiGaFw=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1e:0b:d5:a5:ce:8d:24:ef:c4:41:37:29:ee:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=dde033df21b9998bb6964c6dd6cce00e9c98459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:66:3d:6e:c2:97:5c:8a:2a:01:43:ae:4f:
f8:59:2c:32:35:15:c2:e2:2a:0b:72:40:f8:87:ab:
6d:01:0a:cf:54:11:02:5c:24:bb:14:ea:fa:1f:0f:
e1:23:7a:b1:8e:6e:01:5e:b4:aa:30:77:01:2a:fb:
46:66:c0:8a:e2:19:3f:66:4b:14:f7:5b:33:f0:ef:
40:62:4e:49:98:81:a0:16:43:8b:96:b9:c2:53:b7:
5d:19:30:6d:6b:de:5e:cb:93:05:58:d8:fa:5f:53:
ab:e0:a6:16:ba:7c:78:94:95:c9:a4:a5:c9:f2:d7:
4e:75:0b:58:67:63:21:f0:a3:2a:02:c6:4f:7c:8a:
ec:bb:e7:12:e1:24:e4:7c:c5:84:ca:85:a8:a4:21:
4f:3e:60:3e:2c:c4:32:36:8f:d2:7d:5e:9b:23:01:
23:47:cb:8c:19:41:82:ba:7f:7a:fa:2c:07:c1:2a:
a3:67:1c:69:de:f8:d0:3a:5e:35:73:1d:90:96:fa:
e7:ea:cc:3a:77:93:5b:d6:b7:b8:30:e7:05:07:7c:
08:f0:c4:4e:40:8e:bb:8a:d4:4a:fd:62:a5:c2:73:
9e:a0:79:8e:a8:0b:1f:e4:28:ee:94:01:2f:19:20:
80:5e:62:a1:9d:5b:aa:3c:a8:34:13:89:e0:27:e9:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:33:DF:21:B9:99:8B:B6:96:4C:6D:D6:CC:E0:0E:9C:98:45:9F
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:25:74:52:e8:e4:e5:c5:2f:75:ed:2a:01:c9:a7:b1:ee:
a1:16:56:41:e4:9e:0c:bd:78:74:d9:04:0d:dd:4f:e8:29:02:
43:d0:d0:bb:78:8a:d5:54:30:3b:00:a7:89:8f:52:17:4d:80:
27:71:ea:f0:6a:bd:f1:cc:c1:a5:14:66:0f:fa:20:e1:44:e5:
4e:95:40:2c:70:83:71:25:81:bf:e9:14:e0:44:62:22:3b:c0:
dc:ac:9a:ad:e8:16:d5:96:a9:2d:7f:75:cb:45:a8:02:39:d5:
66:64:5e:7d:f2:20:58:b3:ac:09:86:6c:d0:02:e4:ed:7c:38:
ee:c0:5b:96:1a:5b:ee:4b:d0:e1:7a:39:f9:7c:0c:83:10:d7:
69:18:12:ca:15:58:e5:37:c7:28:1e:1a:a8:a1:4b:af:b2:f0:
9b:18:b7:77:0d:79:59:71:77:22:44:fe:4c:fc:5b:0a:25:49:
7d:2c:a0:80:4b:23:2e:6b:a4:6e:09:ac:3b:c8:a9:05:7b:df:
56:49:0b:73:09:9a:87:69:b6:5a:67:89:e1:87:05:bb:81:f8:
3c:68:29:a8:47:6e:88:b4:b8:ce:b0:40:06:c6:4d:cf:1f:aa:
75:0a:5a:a1:58:82:82:60:c4:38:48:77:e8:f3:d3:ae:da:42:
91:27:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:13 2025 by rpki-client