Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier: IRCfNbVHBckkkuBhVErqxnUosWLfLgBmIHEoPr3YxkM=
Subject key identifier: 20:C8:36:B1:96:C5:C3:D9:75:AD:AF:A7:D9:A7:96:D0:99:FD:6C:73
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial: 019A50E353CC5712B8902A075B3D1C7BF07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:06 +0000
Manifest this update: Tue 04 Nov 2025 22:01:06 +0000
Manifest next update: Wed 05 Nov 2025 22:01:06 +0000
Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: dGsF8FtoBTdFY6NC4ljIQu43WWqCxUHU4YAmARw4Bnc=)
2: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (hash: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:53:cc:57:12:b8:90:2a:07:5b:3d:1c:7b:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Validity
Not Before: Nov 4 22:01:06 2025 GMT
Not After : Nov 5 22:01:06 2025 GMT
Subject: CN=20c836b196c5c3d975adafa7d9a796d099fd6c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:5b:ad:68:be:4c:63:6d:7e:6e:8c:e5:21:
43:53:b2:a7:e0:8b:61:9d:09:9d:c1:a8:ef:e0:70:
3c:61:d5:90:6f:0f:42:a6:20:29:27:a0:e0:41:b9:
51:93:a8:b4:c1:1e:f6:43:ac:d2:42:38:35:94:35:
0c:fe:c9:46:58:af:1b:eb:ae:09:08:2e:ab:3a:f4:
ce:eb:99:ab:3b:c5:ee:d7:48:6a:f0:7a:11:43:f4:
a8:3c:5c:9f:e1:8d:2c:8f:55:97:07:f1:04:a7:59:
92:ff:2a:e6:50:f3:18:b1:9e:50:2a:7f:1a:d4:6e:
56:4a:d9:e1:f9:3c:4a:3c:1d:0e:fc:3b:c5:b4:b4:
fe:a0:e3:56:68:b3:11:ba:7b:ff:3d:b4:57:7d:e4:
77:46:93:09:c1:53:ce:5a:ac:14:1a:3f:cc:49:2a:
6e:65:c5:32:47:69:fc:23:85:b1:17:c8:7f:01:e1:
c1:b6:00:5a:88:db:93:bb:92:95:df:49:2a:7a:5c:
ce:dd:58:f1:72:4b:e0:bf:67:c7:d9:18:eb:24:89:
41:1d:63:42:c4:74:d4:8d:36:27:c9:6a:6b:f0:71:
6f:91:b1:6d:11:92:c4:f3:07:f4:12:6e:98:8a:20:
71:e2:64:ee:55:e1:04:bc:55:c3:19:05:4c:6e:70:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:36:B1:96:C5:C3:D9:75:AD:AF:A7:D9:A7:96:D0:99:FD:6C:73
X509v3 Authority Key Identifier:
keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:64:f0:42:a7:be:d9:b6:d7:ae:5c:41:b2:8f:88:dc:e2:
7c:ce:f5:04:99:0c:fe:9e:f1:60:42:10:9d:81:61:fa:b8:96:
63:1e:7d:eb:97:d8:ab:10:68:bd:af:47:08:fb:8f:d6:24:2b:
5f:0f:c5:31:00:f6:93:d5:a9:b2:3e:c4:27:fa:11:7b:2b:8a:
16:3c:8a:38:96:60:ab:52:68:81:eb:ed:89:ba:65:60:1a:d3:
bf:b2:37:52:85:e1:e0:5f:a3:ad:89:d5:26:6c:aa:5f:06:20:
d6:c5:89:36:6a:19:27:8d:b6:f6:52:13:8f:2d:4e:2c:db:9c:
53:dc:e0:b8:39:3a:37:6a:58:15:33:e6:d9:c5:eb:3a:51:b5:
52:5c:07:be:2c:b7:8e:c3:dd:d2:13:39:1d:3f:68:79:96:51:
33:9b:d0:5d:ad:87:b6:79:c2:f8:f5:e9:6a:c3:a7:b8:cc:95:
01:86:98:23:1f:cb:f4:39:a4:7d:d6:e3:10:e3:51:37:00:2a:
24:ec:e8:a0:32:b8:2d:51:d7:1b:80:94:78:ca:56:2d:4d:6d:
59:88:83:7b:4b:29:ed:ff:c0:6f:7c:d6:ca:04:ed:14:93:12:
6c:a4:52:08:9c:0a:45:b4:6e:62:2d:34:90:83:55:ff:d7:02:
6c:95:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:47 2025 by rpki-client