Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: VRF8H6WSVJt54aaykLYJKpPdk7df0nPcHOQN9gDTa9Q=
Subject key identifier: 25:38:36:21:EC:5C:B5:64:AE:75:42:29:4A:E7:1F:4E:E5:07:40:7F
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 019A4E862C755CF2C4EBE918C4F170504062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 1000
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: /b2K0bVjOljqMm7z9ga9yxPw7hsas3fQ5JrDP/SCkcQ=)
2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2c:75:5c:f2:c4:eb:e9:18:c4:f1:70:50:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=25383621ec5cb564ae7542294ae71f4ee507407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:9e:ff:79:a8:41:cb:82:3f:a4:8f:3d:21:
60:ea:1c:cc:8d:5d:5f:a4:97:7c:9a:9f:b9:11:24:
cb:9c:8e:6d:56:7d:de:50:d9:bf:62:3d:44:98:97:
77:a2:19:17:5b:7a:b0:ba:30:6a:03:89:02:72:22:
03:f8:dc:ac:44:fa:12:3e:74:b6:df:79:4b:48:16:
b8:62:ff:97:d7:94:55:96:cb:ba:06:da:61:fa:b7:
49:12:c1:80:1e:54:c5:39:83:5c:bb:e5:a3:f4:a6:
92:db:99:29:41:d3:a8:a1:20:68:3a:cf:25:7a:7f:
1a:d4:80:40:92:b4:7b:50:6f:cb:30:0d:82:99:36:
4a:2f:e7:0f:96:40:7f:b8:3f:9c:10:22:21:b5:da:
39:a8:b6:e1:61:48:9a:34:b6:9e:b0:f6:29:b9:ce:
4d:3d:8e:e4:ef:37:a8:d4:77:0f:fd:a2:bb:1c:5e:
25:56:e5:4c:56:74:54:36:42:f3:62:c6:fe:e5:66:
d8:4c:84:5d:bb:18:94:34:34:e4:f8:7b:59:cb:b6:
7e:2a:19:ce:46:4c:76:49:55:53:42:59:be:fb:b4:
68:7b:3c:be:71:87:cc:e2:d3:df:e2:27:ea:d6:e6:
4f:c2:bd:9b:3c:a6:23:61:66:ff:a0:0a:f2:1a:ee:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:36:21:EC:5C:B5:64:AE:75:42:29:4A:E7:1F:4E:E5:07:40:7F
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:22:de:8b:69:33:30:25:70:cb:e5:bd:09:ba:29:b7:83:ad:
21:23:9b:cd:62:a9:91:57:57:cf:91:3e:12:95:8a:c1:d5:8f:
86:37:b8:a5:6c:ec:df:de:3d:e9:69:a5:66:7e:35:22:42:a9:
95:ae:01:b0:4c:7e:da:17:ff:6a:fb:4a:b8:5d:2d:e7:1e:89:
49:e9:fb:3d:da:57:de:9f:79:48:3b:60:c1:ac:68:1e:6b:2b:
fe:d6:97:9f:b6:c3:ae:98:2e:a3:43:21:de:25:5f:32:db:45:
45:3f:06:8f:4a:0d:1d:3c:f8:72:86:1a:63:a7:39:9a:58:96:
6c:12:18:94:f2:22:13:66:dd:30:aa:50:b7:ad:65:fb:4e:d2:
5a:10:00:d4:ee:7d:ec:95:72:ab:96:de:86:30:ec:9d:72:c5:
c4:2e:17:76:8a:0a:5e:5a:3a:c7:8b:b0:88:04:a2:d0:38:97:
67:78:25:2f:3e:be:66:54:50:8f:e2:8e:61:2f:0f:97:08:a7:
71:41:ad:cb:3d:e5:33:a8:cf:4a:58:8c:77:60:88:14:85:5b:
ab:c9:10:fe:aa:d5:45:d5:6c:03:9a:83:33:8b:c1:38:70:20:
98:4a:96:79:5a:fc:21:9b:ed:b2:fc:b8:af:d6:cb:a7:4e:8f:
a2:93:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:48 2025 by rpki-client