Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: 4q2Z+n3ljXA+KBqeXqAIFVqX97P9ra6R5mKK5fDBvys=
Subject key identifier: CB:6D:15:BA:7F:8C:44:49:4C:AB:6F:1B:2D:33:6A:1F:1C:D5:6F:3B
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 019A50E4014351A07BAC28338D76EA16F210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:01:51 +0000
Manifest this update: Tue 04 Nov 2025 22:01:51 +0000
Manifest next update: Wed 05 Nov 2025 22:01:51 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: MRJCkYrL2Kj21amhdM9H2XTGG/en3t9WqskLC4hkqdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:01:43:51:a0:7b:ac:28:33:8d:76:ea:16:f2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Nov 4 22:01:51 2025 GMT
Not After : Nov 5 22:01:51 2025 GMT
Subject: CN=cb6d15ba7f8c44494cab6f1b2d336a1f1cd56f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:e7:7e:6d:61:47:49:ba:bb:80:97:a2:e9:
4a:18:b4:9d:3d:21:b9:2b:bc:cb:4f:d0:69:b3:79:
1a:0d:4d:c6:8f:ec:db:43:3c:bd:7f:bf:f8:ba:0b:
a5:5c:e1:8e:89:83:b7:df:76:20:4b:2a:13:bc:90:
29:06:87:65:7c:14:64:34:d8:35:ff:9c:d4:0c:cc:
b8:6c:6e:52:be:35:c3:1e:38:c2:f6:ce:33:01:ac:
3b:1f:8d:9c:ae:a2:72:c1:ac:33:4d:b1:80:71:5d:
57:81:90:9d:9b:72:dd:6c:4f:00:9e:fd:d7:07:44:
82:ef:0b:ad:e5:76:3f:2a:c0:2e:32:99:ee:e5:9f:
3f:f0:9b:09:56:94:94:e3:84:fb:c0:b6:a2:89:5f:
7d:17:26:1b:7e:b2:27:1c:96:08:be:40:14:2c:f4:
c2:77:f0:1a:39:db:88:2e:cd:d6:85:c3:e7:b1:e0:
70:f8:23:42:9d:a6:32:10:86:59:97:fe:6c:19:90:
51:69:75:24:eb:79:70:41:50:fe:eb:69:82:59:a9:
3f:6b:63:6c:3f:bc:e3:20:51:dd:fd:b8:d1:71:53:
34:3e:d7:b7:89:50:56:03:b0:c7:8c:ab:b5:a1:b6:
57:01:e6:d1:a5:c8:25:e5:41:94:42:ce:60:33:d0:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6D:15:BA:7F:8C:44:49:4C:AB:6F:1B:2D:33:6A:1F:1C:D5:6F:3B
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:f9:45:eb:24:04:2f:fe:56:29:d3:fc:c6:57:49:f0:0c:
33:1a:e0:85:3d:ce:a9:91:59:39:b8:ee:08:1d:d5:ce:69:d8:
60:2b:24:8b:ef:82:06:51:a4:33:71:7d:f8:53:3b:57:a0:b8:
fc:32:b2:ed:13:d8:14:43:68:90:8e:03:3e:4d:0e:5e:9c:17:
84:23:e7:6b:0a:b2:7b:5b:7f:df:09:41:69:76:5b:ac:5f:36:
aa:cd:b4:d2:02:7c:b4:44:98:0f:1b:0e:f8:10:35:93:d1:25:
27:01:23:d7:c7:6e:30:3c:35:9b:28:96:21:1d:25:42:80:32:
2e:19:98:cb:83:48:a2:74:5c:eb:45:04:6b:0a:bd:07:9b:96:
6d:96:c6:56:58:ac:4b:3e:0d:4c:a4:c8:43:bd:8c:a0:c6:34:
86:19:14:f2:0a:c1:bd:47:94:57:06:9b:22:1f:80:a2:e6:80:
ac:02:10:a1:c7:fb:be:a1:e5:75:bc:6e:4f:20:50:53:df:18:
6c:c0:69:83:12:2d:de:ab:b4:86:e4:eb:f2:d5:6f:5a:82:fc:
0e:f2:cd:b8:f3:7e:6a:1b:76:84:61:7c:18:fc:15:f2:46:5f:
72:5c:8f:84:ce:25:40:70:5e:7b:bc:69:7b:43:85:00:9b:bf:
98:6c:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:47 2025 by rpki-client