Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: YBLoY4wvnFx2x3cJhB5sdXfUkqEMR6rXsXzqKm+aX4Y=
Subject key identifier: 7E:24:B5:AE:9E:89:A8:BC:52:A7:EE:43:38:08:65:6C:73:3C:46:A0
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019A4F6224E7DD3727E3E0806F84120CE2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0E7B
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: Dina/aLXGyT7LHhI5E2+ZQo7amsr8JB1pPIwdVPBVs8=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:24:e7:dd:37:27:e3:e0:80:6f:84:12:0c:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=7e24b5ae9e89a8bc52a7ee433808656c733c46a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:98:7d:34:d1:27:e6:96:fc:87:9e:3d:37:
05:71:cf:2e:3b:2f:ec:da:49:b8:4e:11:cd:88:20:
5e:ac:a9:54:59:5b:6b:4a:8f:fb:32:d3:9d:76:d6:
f2:d0:60:3a:92:79:bb:2c:72:fc:bf:76:43:ba:08:
09:11:cb:75:e7:a8:47:ea:38:04:49:1d:79:65:af:
ab:9d:88:01:46:6f:c6:74:4d:da:f4:ac:0a:13:21:
63:72:91:35:79:dc:90:49:42:49:c1:6c:ca:da:af:
40:4b:b5:88:15:27:ac:5b:a7:5e:97:97:ae:39:39:
e4:7a:27:64:da:4e:51:b2:d0:ac:99:e1:1a:9f:92:
80:fc:6e:79:69:1a:b2:4f:66:94:95:a2:db:f3:6a:
ca:b5:fd:74:20:3e:ee:47:a3:af:59:6f:c3:b2:f9:
0b:df:e5:89:d4:3e:d9:a8:24:8e:66:e9:8f:cc:e4:
dc:45:84:59:bc:d1:c5:ae:2b:03:51:b8:c0:b0:92:
9c:e0:52:3c:3c:80:d3:1d:12:3d:18:ee:b0:d9:ab:
16:03:c0:8b:4d:e8:e3:4c:7e:69:4e:63:ff:39:b1:
f9:8f:1f:4c:fa:71:07:08:60:c0:8b:5e:f5:82:41:
9c:c9:20:a3:ee:37:6e:88:a1:1a:49:d4:6a:6f:c8:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:B5:AE:9E:89:A8:BC:52:A7:EE:43:38:08:65:6C:73:3C:46:A0
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:04:46:ff:2e:70:33:02:20:44:b1:7d:62:da:cc:dd:ac:ae:
6d:3c:3f:ed:d3:97:9d:b8:a6:b1:e7:4a:da:ef:4c:80:59:6f:
78:9b:5e:c9:4e:3a:d0:79:b2:f3:33:76:ba:02:1e:eb:f3:9b:
cc:74:be:24:b0:99:d6:bb:17:ee:dc:65:50:df:af:8f:c4:6a:
c1:fa:05:56:e1:81:ff:95:99:43:61:80:bc:ea:8d:24:c9:83:
2e:3c:7b:eb:38:bc:04:41:46:c4:69:71:e4:38:77:15:57:d5:
fc:81:b9:dd:31:ab:23:e9:25:b3:35:74:26:65:37:a5:29:58:
e5:cb:9f:93:d1:2c:b7:ed:fe:bb:d7:73:7f:78:c2:51:a5:55:
ee:22:df:4a:d5:07:23:d7:ce:bd:1d:1b:cf:7a:d4:6d:37:8e:
35:95:a9:79:cb:d3:61:a0:1e:79:be:d2:2d:7c:b1:37:ce:af:
07:f3:3c:15:77:82:84:a8:22:b6:e3:67:e5:84:45:50:4d:37:
b9:f0:42:2b:8c:0d:d8:70:99:f2:ea:10:19:6c:8c:65:3e:7b:
c0:a2:ba:59:50:2d:81:4f:b0:60:f2:2b:ac:40:83:a7:98:0b:
5d:6c:45:22:f7:c9:42:81:39:c8:46:a9:64:73:3b:19:5c:8c:
0f:c0:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:25 2025 by rpki-client