Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
File: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json)
Hash identifier: E9wotl6SS72MVanzTttKNzXtZBT5KPf9xxDFyyubRVg=
Subject key identifier: 55:D2:03:FF:D9:06:59:3B:EC:75:79:C4:41:E7:CF:77:B9:A9:1E:6F
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Certificate issuer: /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial: 019A4DE1C6232A5024E11F06E3508665ECA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:33 +0000
Manifest this update: Tue 04 Nov 2025 08:00:33 +0000
Manifest next update: Wed 05 Nov 2025 08:00:33 +0000
Files and hashes: 1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: mH+3uNV6KkZytEkSRx4ex7gQx7LI/YeP4Yf/4yT3au8=)
2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c6:23:2a:50:24:e1:1f:06:e3:50:86:65:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Validity
Not Before: Nov 4 08:00:33 2025 GMT
Not After : Nov 5 08:00:33 2025 GMT
Subject: CN=55d203ffd906593bec7579c441e7cf77b9a91e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:0f:8b:59:e7:02:70:a6:69:5c:d2:20:4b:
3a:81:6b:93:78:ad:cb:5a:36:f2:f8:49:df:f6:fc:
12:4e:7b:42:d2:1b:40:08:19:14:e0:29:76:12:fc:
a5:f7:b5:23:dc:41:75:9e:91:4a:3a:c5:d9:fb:68:
00:1a:d2:15:99:74:90:ee:24:62:5c:f3:ae:bd:4f:
53:61:0a:53:60:58:f4:43:30:8b:51:9c:cd:0e:d6:
87:11:90:a8:3c:f6:7d:88:5f:4b:ec:cd:c3:2b:ee:
84:fd:c6:2b:38:0e:80:40:18:86:ad:cd:3d:09:90:
ab:32:a9:8d:44:28:b8:f1:a6:83:e8:14:a8:5a:62:
00:d1:4b:24:95:32:2f:76:22:c2:e0:12:3d:81:41:
37:a4:72:f2:33:2d:a7:92:c6:64:70:83:94:f5:dc:
a3:15:a3:ec:67:40:20:fc:ce:c3:f8:cf:82:30:44:
52:e4:97:af:01:84:5a:f6:b9:9f:2d:fa:25:b2:c4:
59:98:a9:85:98:f9:81:57:88:f1:57:98:4f:51:cf:
38:a5:70:a8:49:8c:7a:72:e0:40:91:a3:ff:77:3f:
71:4c:9b:79:94:7a:2c:0a:e0:ab:4d:07:36:e7:7d:
94:6d:63:94:53:f7:66:1f:28:29:99:fb:71:4d:a4:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D2:03:FF:D9:06:59:3B:EC:75:79:C4:41:E7:CF:77:B9:A9:1E:6F
X509v3 Authority Key Identifier:
keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6a:23:c6:d7:a2:a8:40:dd:08:72:8d:03:2d:b6:88:16:54:
c7:4c:95:fe:f9:bb:9c:7b:a9:50:18:ee:1e:39:f1:8b:75:74:
63:e8:1f:0a:be:25:5d:4f:33:15:f9:6d:7a:72:83:d9:27:2f:
b8:cf:04:bb:83:8d:83:e8:3e:32:4e:89:44:ac:1d:7f:15:62:
72:3d:24:72:ec:55:82:a3:67:2f:b0:18:7d:29:f8:45:0f:26:
f4:d1:4a:23:06:ba:09:4e:c6:5a:32:04:58:15:b7:00:98:97:
4a:69:f3:f5:89:d0:48:fe:f5:10:c7:2c:6b:d5:c4:f4:0e:6a:
0f:a9:51:3d:10:d1:fa:8b:c4:73:4d:a3:51:2a:0f:ae:6f:11:
d6:2a:90:1e:58:ac:bc:9f:cf:92:6b:e1:0a:0a:1e:c5:49:19:
57:a5:ac:55:e4:09:b3:88:aa:ee:a8:71:03:41:7b:74:a6:96:
48:75:8d:5b:69:24:52:8a:e3:dc:17:4a:ec:94:e9:a5:29:78:
b4:26:99:fd:b0:68:e0:9a:27:78:d5:e6:a4:4e:9b:c0:c4:ec:
ab:e6:bd:68:3f:77:6d:c7:22:0b:fd:e4:48:26:c5:f6:e1:8c:
96:b3:78:9d:b9:4c:26:b2:df:db:74:f0:e4:84:6a:03:75:c5:
04:1a:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:57 2025 by rpki-client