Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: 3qDV9VSGa2VGKpaGl9vevSFDvqTvhpPWTZupkP4pC2Q=
Subject key identifier: D1:A7:8C:1D:CC:B7:4C:8C:22:4F:3D:EE:43:21:22:67:87:D7:2B:4C
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 019A4DE171F560F4B5AB19CD08D0AD658813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 0DEC
Signing time: Tue 04 Nov 2025 08:00:11 +0000
Manifest this update: Tue 04 Nov 2025 08:00:11 +0000
Manifest next update: Wed 05 Nov 2025 08:00:11 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: /I34LP+/FaYPecemHdVIyZooWgrfQTQJ9tRFUc32Xiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:71:f5:60:f4:b5:ab:19:cd:08:d0:ad:65:88:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: Nov 4 08:00:11 2025 GMT
Not After : Nov 5 08:00:11 2025 GMT
Subject: CN=d1a78c1dccb74c8c224f3dee4321226787d72b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:0a:37:59:d7:d9:2b:cb:86:3d:5e:86:71:
42:e3:e8:58:4a:85:7f:69:d4:e8:ed:a9:78:1c:2c:
fb:9f:a3:a3:8f:1d:35:0a:16:69:3e:89:a0:ae:b7:
42:14:b1:5c:e8:1c:d0:c7:99:86:25:a2:38:d7:73:
11:8b:e9:cc:c5:a5:7e:c7:a3:6e:44:e0:20:81:34:
ca:ac:ed:7f:18:98:b9:72:3a:62:13:33:8d:d7:b6:
df:d6:87:0b:14:9f:6c:9e:a4:d5:db:72:95:fe:b2:
dd:db:f1:df:2d:ee:3a:36:e1:b6:a9:18:60:37:fa:
5e:76:06:96:29:18:27:5a:d1:fd:45:02:d8:65:71:
8d:fb:fd:30:6a:7e:af:5b:56:fd:49:bc:35:12:8b:
28:89:30:7c:18:e3:89:95:30:bb:0b:b5:0c:8c:cf:
8a:9e:be:d5:ec:01:86:45:4c:1b:46:59:98:a9:63:
e1:29:31:74:81:fb:a7:c4:84:d7:c8:85:18:f7:d6:
2c:48:7a:97:10:56:96:68:9b:f0:89:9c:bb:44:37:
d4:82:b5:6a:47:b2:e8:48:de:3d:7f:fb:28:ee:b9:
b4:a5:25:f6:f5:fe:0d:e1:98:03:01:e7:89:74:7f:
04:5d:48:b4:a5:46:26:32:d7:b7:d7:6e:8c:fd:fd:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A7:8C:1D:CC:B7:4C:8C:22:4F:3D:EE:43:21:22:67:87:D7:2B:4C
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:10:3a:da:67:1c:12:8e:dd:12:4e:32:f7:36:5a:65:0d:74:
e4:73:b6:30:fc:c1:b7:a5:34:1e:2e:43:68:81:4a:9b:d0:09:
50:14:9d:34:50:dd:ee:71:94:53:5d:0e:4b:7e:53:26:b8:2b:
97:08:29:1b:0a:a0:83:bb:61:2a:33:10:95:39:da:c8:5b:d4:
ad:82:aa:39:fa:31:46:29:f4:02:98:a3:3b:d6:19:5a:a2:6e:
25:49:14:36:56:fc:e5:7b:32:b6:08:7f:6e:fe:64:28:ff:66:
27:34:fe:e6:e8:9c:49:5d:37:dd:44:c6:ee:07:e4:67:f8:00:
83:c6:90:e0:f9:d4:ba:57:3b:e9:2d:a1:00:d7:e9:8e:cf:ff:
99:db:54:6f:fe:65:14:de:26:d5:21:e1:c1:d0:0b:60:8e:4e:
42:ac:22:4f:48:cc:a4:9e:6c:0d:a7:e7:91:3d:e9:e0:cf:00:
10:55:3f:46:28:91:74:ba:6b:db:61:68:4d:65:9b:a0:bb:7c:
d9:e2:af:0a:6a:19:00:68:fe:6e:d5:08:87:9d:b1:d1:2c:05:
1c:7f:2d:e0:a0:f1:e2:55:2b:6e:04:36:8e:34:63:11:93:e1:
da:95:ca:d3:82:f2:3e:ca:ea:d8:e0:a2:c7:b5:75:55:16:33:
d0:4d:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:06 2025 by rpki-client