Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: 45Ty17ys8zFSDQmCY4djbFLNBnjeZ7CC3ssD9Fhh5mk=
Subject key identifier: E2:5C:F3:3F:F6:16:DA:05:A5:BF:7C:7C:37:25:88:C2:F9:27:1B:78
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 019A4D3CFC8D45CA4F0D86DC730BFC84BF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 124D
Signing time: Tue 04 Nov 2025 05:00:33 +0000
Manifest this update: Tue 04 Nov 2025 05:00:33 +0000
Manifest next update: Wed 05 Nov 2025 05:00:33 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: tzBm7MXrdcMtH+VhVOBD9FWy2tRj1Ng4Wzh5sdia0ys=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:fc:8d:45:ca:4f:0d:86:dc:73:0b:fc:84:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Nov 4 05:00:33 2025 GMT
Not After : Nov 5 05:00:33 2025 GMT
Subject: CN=e25cf33ff616da05a5bf7c7c372588c2f9271b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:bc:1f:12:a6:29:f0:87:e6:93:ad:60:9e:
6c:83:fd:28:90:45:7c:40:f4:af:a8:2a:f4:03:77:
33:60:a9:eb:39:95:b2:8b:99:6f:68:db:fd:e9:63:
29:1c:47:9e:c3:bb:30:45:37:7b:34:26:18:8f:15:
31:9e:60:b5:fd:67:87:87:6e:14:58:70:66:c2:9a:
e6:ce:28:cc:12:c9:f1:04:37:6b:fe:f6:ad:3d:8f:
c5:0f:f4:fb:f1:7a:d8:ca:18:d1:d6:a3:c9:59:36:
c0:da:c3:da:92:4f:82:1d:a8:01:d3:e1:a8:5b:69:
c7:f8:dd:5c:b1:7a:86:f6:42:93:42:76:e7:1b:68:
b3:a1:91:d1:ad:18:cb:4a:66:78:d5:35:44:a7:64:
77:a7:20:78:1c:81:5d:ab:4a:99:04:b2:41:2f:e0:
56:19:ed:a3:4b:d7:fa:a5:07:c9:fa:2f:e8:45:ee:
cf:57:29:2e:76:bf:9b:b0:38:a0:73:d4:12:2f:bd:
b7:14:68:9b:23:49:d7:9c:4e:07:92:6a:e3:28:a8:
fe:48:53:70:95:ca:37:18:be:cc:0a:fd:14:62:14:
67:b9:86:3e:e6:e7:7e:a7:45:34:a4:ad:3f:f9:b8:
46:de:dc:a3:f8:41:ef:3f:1b:50:77:7d:76:1c:86:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:F3:3F:F6:16:DA:05:A5:BF:7C:7C:37:25:88:C2:F9:27:1B:78
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e3:0e:62:a7:20:b9:11:ef:b9:21:df:8e:92:fc:8d:db:c1:
68:ea:56:57:27:eb:8b:f3:7e:55:e2:2c:54:b2:d0:4d:eb:d3:
d2:de:92:e8:7c:ab:84:0a:e4:d0:a4:0f:2b:58:44:4b:9c:53:
9f:aa:df:94:27:8b:0f:bc:1f:02:c3:69:2c:e9:8d:14:76:2a:
da:ec:2d:9c:50:f8:d2:85:ac:c0:07:1e:51:5c:7d:24:c5:53:
2d:28:0e:ea:d5:47:91:67:32:1d:1b:e2:63:a4:e0:b0:c5:8e:
68:c6:31:34:cd:09:43:db:69:ec:9c:63:3b:24:5b:a0:59:17:
31:18:d1:1a:d3:c2:f1:67:81:8a:74:a6:9f:40:8c:01:c0:b3:
cd:13:b8:e2:22:3a:09:11:fe:d0:87:c8:b6:9e:ac:74:9b:72:
94:05:5e:6a:36:db:ab:55:19:36:bd:94:84:6f:82:ed:a5:d3:
bb:1c:e3:46:d0:97:31:80:87:4c:c4:ce:2c:df:90:73:a4:3b:
bf:43:0a:4d:43:3f:f8:bd:5d:50:0f:6a:8e:f5:a9:a0:c6:57:
f4:97:35:67:7f:44:9a:67:02:1e:16:6b:05:9e:3e:21:21:dc:
ed:2d:bb:49:a7:52:da:59:a7:d8:25:b3:8a:50:5c:80:39:d0:
b3:f7:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:55 2025 by rpki-client