Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: kQPzN6hFt/SUgMbRhbZKTqloBsK76OV/Q7ceTFnF45I=
Subject key identifier: 40:95:9B:86:BC:85:A8:26:43:93:0D:49:C8:E5:78:D6:E4:74:E1:7B
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 019A4EF569E1262D6516E68EF51DD91C162F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 13AD
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: ft5Xpg7p9WZ8yNLAhZ5Agxwvm1uM3t+sde4D2J3AE84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:69:e1:26:2d:65:16:e6:8e:f5:1d:d9:1c:16:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=40959b86bc85a82643930d49c8e578d6e474e17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:b8:68:6c:e9:2e:4d:2b:a7:8c:bf:88:13:
c5:f0:1e:29:ee:3e:68:64:61:d6:11:fd:cd:c9:1b:
02:25:07:37:fa:32:76:4d:66:2c:96:93:ce:1b:04:
90:c3:53:d6:04:9b:91:fd:ad:63:96:ae:29:70:34:
96:5b:a9:40:8d:80:15:26:e5:25:70:9d:a0:40:56:
b5:c0:8b:97:b7:c5:73:31:61:b8:b9:bf:d1:d0:7e:
53:84:ac:b2:5a:03:d3:13:2d:4c:a3:fa:83:be:03:
36:5d:c7:22:cd:0e:48:3f:5b:a3:35:e5:7e:d4:48:
9f:8f:2b:c6:71:45:30:65:9b:68:ff:5f:af:2a:d1:
e8:d0:86:bb:0a:a2:ad:ae:80:1c:ef:9d:12:c6:8f:
f7:cd:be:39:2c:6d:9d:ee:de:da:8f:a3:63:60:68:
bf:f2:64:2f:ec:b8:28:21:7b:d8:75:22:56:4e:38:
87:f9:ca:e0:58:51:24:f4:59:b7:fc:1a:4f:a1:c2:
8c:7e:ca:1d:f2:a2:99:3a:d7:1a:87:3c:66:a0:41:
68:83:9b:e6:63:6a:e4:02:8f:4e:17:b0:de:83:82:
b8:55:0e:e9:71:8a:a4:1d:c8:23:75:0a:2d:80:90:
66:bc:bb:d5:e9:fb:5f:55:c9:88:6a:db:8e:c3:a2:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:9B:86:BC:85:A8:26:43:93:0D:49:C8:E5:78:D6:E4:74:E1:7B
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:a3:f4:63:8d:4c:5f:2e:0e:7f:bd:e8:5b:1c:30:56:01:
4d:a3:58:88:77:68:de:ea:55:d9:d0:05:d0:69:4a:56:03:38:
6c:b2:d2:26:07:8a:b1:80:ba:1f:63:35:2a:e9:b6:bb:44:53:
a3:98:60:53:6c:e5:e5:68:f6:92:de:64:75:bc:87:ef:df:9e:
4c:5f:de:0f:ce:12:2f:e6:56:6b:7d:26:65:82:5a:ba:e0:fc:
b6:fa:d5:59:0c:4b:f8:ef:f6:62:75:3a:1e:48:1b:e6:f2:20:
b5:84:1e:37:e6:ba:eb:00:1f:51:f7:50:32:6d:74:71:c3:15:
34:38:82:3e:45:3b:08:60:33:ce:05:48:0b:b4:e1:7c:0b:fe:
64:b8:33:6e:9d:2d:1d:b6:b5:a3:d6:f1:00:8b:12:3d:7a:63:
16:41:c8:d8:2a:ea:cf:7c:01:9f:84:24:43:c5:87:fe:c2:65:
2e:09:19:86:84:17:c8:09:08:4a:92:75:da:49:89:b4:82:e5:
59:9d:12:6c:d4:73:33:49:ad:12:ef:be:5e:41:5d:ca:ce:52:
f8:f5:55:7e:16:1f:35:4a:4a:05:58:6c:f5:d5:2c:04:2c:e8:
c6:fd:79:17:28:cf:86:ba:5c:b0:a1:7b:35:f1:d4:d6:bc:9b:
a7:d1:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:31 2025 by rpki-client