Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File: 8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier: BcOh3nmQIFaRxbWderaLBmDRRZ7hCnzKlGZT40X1UY8=
Subject key identifier: 46:DF:15:79:05:8C:5C:4D:E2:89:C9:20:E8:AC:DC:D0:37:20:DF:5C
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial: 019A4E4F40E906D33549672864C32DDDE031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number: 1433
Signing time: Tue 04 Nov 2025 10:00:07 +0000
Manifest this update: Tue 04 Nov 2025 10:00:07 +0000
Manifest next update: Wed 05 Nov 2025 10:00:07 +0000
Files and hashes: 1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: 3As2e22gYByVvYW/BXBGbvVjyO9YhqYlpxkyMTOD+ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:40:e9:06:d3:35:49:67:28:64:c3:2d:dd:e0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Validity
Not Before: Nov 4 10:00:07 2025 GMT
Not After : Nov 5 10:00:07 2025 GMT
Subject: CN=46df1579058c5c4de289c920e8acdcd03720df5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:ce:7e:58:60:6e:0c:20:7e:c3:1d:af:3c:
32:01:23:ee:70:3e:04:be:bc:df:e0:bd:e1:e4:78:
2b:11:40:ce:51:7b:82:9f:e2:a0:84:2f:27:d0:05:
22:59:bc:32:2a:63:00:36:d6:e6:52:c1:0d:df:97:
fe:ca:ae:35:b3:2d:7e:7c:13:0f:04:9e:20:c6:3f:
f4:48:2a:80:a5:82:5c:c1:d0:c7:4a:f0:9c:d7:eb:
00:c8:1b:cb:ce:a3:63:e3:39:fa:73:d5:56:01:1a:
1b:69:f2:4e:f9:d5:e8:1d:65:e9:af:22:98:18:a1:
ad:b1:16:a6:62:b5:dd:31:93:5e:28:22:89:98:8f:
45:18:a8:81:8a:60:e1:fa:11:b1:a4:2c:d6:45:94:
3f:2b:cd:75:cb:9c:fa:24:0a:54:fa:33:c5:69:fc:
34:e6:8b:c4:0b:ab:70:e2:4d:57:e1:6c:bb:78:b9:
f7:a7:24:20:cc:3f:ef:8d:86:f9:82:c3:a9:56:24:
ae:cc:b2:f4:6a:88:2b:d5:a2:bc:81:3a:18:c0:bb:
58:7e:de:b0:2d:40:68:fa:e7:9c:55:5a:d4:ac:3a:
02:e4:f2:d9:60:6f:e4:f6:f6:8f:2e:73:30:a3:3c:
66:48:ae:69:4e:39:8b:be:a1:92:99:be:0d:11:42:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:15:79:05:8C:5C:4D:E2:89:C9:20:E8:AC:DC:D0:37:20:DF:5C
X509v3 Authority Key Identifier:
keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ad:92:ac:c8:cb:dd:af:5d:1e:55:da:c6:f7:00:b0:72:dd:
2f:2b:7a:dd:c8:2f:0a:23:f4:55:ae:15:f2:2d:79:75:8e:64:
78:a7:d9:f3:68:96:32:33:9b:54:97:3b:aa:5a:54:84:bc:d1:
4e:92:e1:76:a2:f7:25:20:46:2f:52:fa:da:a9:da:44:65:cb:
d5:2c:2e:80:77:c9:af:43:9a:29:8a:4d:ca:3d:52:b8:16:4b:
4c:1a:bc:d3:c5:0a:e7:3a:5d:5f:23:ee:cd:52:a8:5a:2c:bb:
73:6c:3b:ab:6c:29:8a:55:62:03:5f:7f:7d:b4:34:78:97:50:
25:0f:21:d4:60:68:85:ba:f3:4f:e1:bb:f8:e3:c6:b8:af:cc:
0e:b2:29:1a:31:56:a2:92:ed:3f:de:65:04:2b:b2:92:58:b9:
06:3e:a0:c2:41:45:bf:43:2a:e1:4a:ad:b3:ea:f9:e1:79:95:
6f:49:c1:16:a4:46:b7:91:51:1e:de:be:a2:09:aa:bb:74:7e:
80:5b:22:b9:b9:02:17:08:53:15:c1:10:96:85:af:eb:4f:cf:
9d:6b:6a:4a:a5:e5:d5:40:fa:9c:3e:54:16:8a:2e:45:61:f2:
57:cb:8e:74:fd:11:6d:71:da:d6:76:4f:6b:59:5e:4c:14:00:
60:ca:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:59 2025 by rpki-client