Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: +uK6Nh1uRRnSnDoxqNG2dTzgytn+bI/zm4HSMPVg0pw=
Subject key identifier: 8C:7A:E5:94:09:64:3B:7D:91:6B:47:4C:52:38:85:60:F7:69:9F:37
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 019A4F9985541C5EC77C8072645DAE7C2F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 1664
Signing time: Tue 04 Nov 2025 16:00:52 +0000
Manifest this update: Tue 04 Nov 2025 16:00:52 +0000
Manifest next update: Wed 05 Nov 2025 16:00:52 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: E+EkeisrRs1c0xA0djag+waeMyqa9JqBpaBzhkTOoEo=)
2: nevmretTwrxwqsKKQjHFsjVUEY0.roa (hash: fWFJu1Hs2S96Xtm1+v7RRTX9W7ZYHV7fdQSuyQbPzQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:85:54:1c:5e:c7:7c:80:72:64:5d:ae:7c:2f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: Nov 4 16:00:52 2025 GMT
Not After : Nov 5 16:00:52 2025 GMT
Subject: CN=8c7ae59409643b7d916b474c52388560f7699f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:88:e3:4f:0b:ef:20:d2:01:9a:bc:28:e5:
34:43:43:92:12:42:3f:a1:9d:2d:6d:19:63:f4:05:
cb:a0:b2:4f:24:2c:c7:cb:1a:68:56:2f:7e:1c:13:
bd:71:4d:62:5b:bd:9c:42:9e:a5:7f:6a:33:cf:0b:
e4:34:69:72:6e:72:a8:6d:18:07:d2:1b:b4:84:58:
c7:c8:82:e9:13:b3:bf:df:e6:ef:63:41:52:a5:8c:
39:dd:3d:35:40:de:b0:49:b8:fe:f7:ed:33:a6:d1:
d1:66:49:ad:a1:fe:71:fc:0c:e2:81:34:76:dc:00:
ad:de:1a:66:19:a0:cc:7b:a6:26:5f:cf:42:ed:15:
44:1c:aa:9c:4d:3a:af:38:7c:63:54:df:02:8c:9c:
b8:30:90:2c:1f:bc:f7:8c:05:f4:92:0c:cf:93:7a:
cb:6c:d6:24:04:f8:2b:33:f6:ac:93:ce:99:54:19:
e5:5c:d3:88:3b:ea:4b:5b:5b:d6:c4:3a:f7:05:57:
ad:2c:1f:2a:81:82:a1:53:33:c6:c3:b6:3a:f7:60:
c2:da:8f:bb:7d:fb:3a:fd:33:0d:0e:7b:83:4a:44:
fc:c4:36:84:40:4e:b3:f0:a7:dc:eb:27:c1:be:01:
64:56:b4:38:11:1c:dd:54:c3:40:7a:94:98:2e:0c:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:E5:94:09:64:3B:7D:91:6B:47:4C:52:38:85:60:F7:69:9F:37
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ea:16:94:b0:f0:42:1f:7f:32:e6:c9:2c:72:99:9b:84:ab:
ec:11:bb:72:dd:fc:33:a2:77:e5:59:9c:00:e5:3a:da:3b:02:
24:86:4e:e5:40:49:3c:48:46:61:54:13:14:0f:89:63:69:d3:
84:49:70:d7:a6:7e:54:5e:bc:0c:fe:3a:b1:e9:8c:e9:7b:84:
91:0c:15:c5:5d:a6:f7:16:48:dc:4b:6f:4f:81:86:72:f2:d5:
28:33:00:eb:e6:cf:93:01:28:d7:a5:32:52:58:12:ca:73:be:
4c:a3:0c:36:d9:b2:73:84:06:ad:d5:da:97:65:91:d5:09:ea:
be:0c:3a:b4:82:13:5e:a4:74:e2:d3:2d:0d:66:43:b6:64:3c:
4c:fc:aa:19:e0:61:cf:54:d4:a5:be:ab:3a:fe:50:30:5d:a0:
a4:68:30:f3:d7:11:aa:f2:ce:cf:e2:aa:27:52:9c:88:7d:97:
51:02:ab:a5:ba:d6:84:65:2f:2f:b8:5f:ba:20:e5:ba:bf:b5:
f7:97:61:39:22:a6:53:77:e0:33:de:d6:5f:da:e7:e3:35:4d:
35:90:53:d5:6a:41:be:ac:2c:38:4d:e4:67:4e:8a:03:8b:98:
22:d2:a9:84:59:b3:ab:96:14:f2:f3:a4:60:94:86:f3:5d:e8:
0d:ae:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:26 2025 by rpki-client