Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: wYJNyfIgIdOm2Ml9B9BQIlP7ZmrLcSYpGTAmud1NLZc=
Subject key identifier: 38:D0:F0:17:C0:43:A5:AF:5F:D1:4E:BF:0F:9C:4B:BE:51:99:C1:12
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019A4D3CF435D2AA88B5829085FF0180164C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 06B7
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: EmvFzkTwszi8ODt4sgSopgCG1itOonYytNxabt/p3BQ=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f4:35:d2:aa:88:b5:82:90:85:ff:01:80:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=38d0f017c043a5af5fd14ebf0f9c4bbe5199c112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:c2:0d:c4:1a:73:cc:8f:42:d9:13:db:81:
ee:21:c9:ae:2a:4f:be:76:d5:d9:10:73:90:76:66:
d6:86:a2:2f:e2:9d:51:a3:1b:d4:f0:fd:30:1b:49:
b7:48:3b:3f:ec:53:6e:25:9d:e7:a2:14:2f:8b:e3:
26:a1:95:1e:50:f4:28:55:b1:dc:eb:f6:52:fa:b2:
6f:03:97:5b:15:12:4e:af:09:5f:70:eb:3f:ac:8e:
8f:46:e6:86:b6:25:7f:13:7d:92:ce:60:0f:ad:11:
a0:96:31:9a:0d:7c:60:2f:ee:47:bb:78:83:21:16:
da:24:e7:8c:19:e0:cc:5e:83:0a:26:96:4f:39:27:
2f:ba:d9:60:1f:a9:76:95:60:64:9b:8b:ed:ff:41:
83:34:b1:61:75:a4:1c:c4:fb:62:79:45:15:2f:d2:
f5:3d:4e:4c:04:e9:7c:cc:1f:8a:99:ea:04:6f:ac:
2f:5e:c7:3a:d8:7f:c3:bc:e4:c5:c7:86:54:4e:d6:
78:bb:ac:bf:2b:c2:87:93:34:42:67:87:56:26:10:
5f:1d:1c:65:05:42:61:87:de:a3:d9:d1:54:8c:61:
49:0a:f2:3c:9b:3f:d4:ba:a3:b0:8b:cd:33:2a:25:
d7:fc:0c:78:70:91:eb:20:f0:8e:ec:72:cb:0b:d1:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:F0:17:C0:43:A5:AF:5F:D1:4E:BF:0F:9C:4B:BE:51:99:C1:12
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3f:b6:90:af:ec:00:d8:a7:13:24:44:0b:b3:9a:8c:e7:7a:
f0:d1:92:dc:3c:d0:8d:c0:06:80:8f:e3:77:37:dd:0c:e2:ae:
b4:90:dd:81:23:9c:75:a6:ec:73:0f:2c:70:b7:54:d5:a7:8a:
97:94:5e:33:2c:24:fd:07:68:29:16:64:c1:aa:f9:c4:48:df:
7f:9f:a6:53:ba:58:82:f0:39:8c:6d:4b:bc:5c:d0:88:98:02:
8b:9e:ab:68:b5:26:35:e3:61:a3:b8:57:67:9b:e4:26:ae:8c:
81:c8:58:a1:e4:46:b8:82:0d:c5:ed:b6:7f:2b:8d:16:10:de:
1c:df:e2:32:86:d3:c9:d9:be:a6:09:14:7d:38:bf:24:8a:96:
07:c1:9a:07:d7:05:94:66:47:6c:28:6e:7d:fc:9c:60:2c:95:
48:e3:07:e1:5e:bf:bb:27:19:ca:4d:22:44:f4:0e:98:a8:26:
cb:c8:ef:d1:d9:ee:67:1e:cd:2c:d1:ed:0b:65:d9:e1:2d:3e:
77:ce:2c:fc:12:66:2d:e9:12:b1:dd:b0:b2:89:b5:21:c3:e0:
9d:5e:20:36:7a:29:36:b8:fc:3d:2d:4c:24:bc:52:86:57:d3:
35:e4:82:13:db:41:4d:67:8a:d5:c3:78:9b:8f:36:69:b0:2c:
84:a7:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:03 2025 by rpki-client