Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: 7EpTZPHGaVO6FZvzbhedZpExuOUeqGwzB6wshVbsljI=
Subject key identifier: 80:CA:12:B9:13:B4:7F:92:97:12:CC:8C:47:AC:49:0B:FD:FE:69:E4
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019A4F61F35D05231E3BC4985BCD9B6690A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0DEF
Signing time: Tue 04 Nov 2025 15:00:10 +0000
Manifest this update: Tue 04 Nov 2025 15:00:10 +0000
Manifest next update: Wed 05 Nov 2025 15:00:10 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: 58ePKLR87zEAkGkqb3ZzcQ2c0Eo+NMCtdc8QByot9pw=)
2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f3:5d:05:23:1e:3b:c4:98:5b:cd:9b:66:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Nov 4 15:00:10 2025 GMT
Not After : Nov 5 15:00:10 2025 GMT
Subject: CN=80ca12b913b47f929712cc8c47ac490bfdfe69e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:27:62:98:64:3b:a3:8a:7f:cf:19:2e:fb:
d3:d8:b3:e7:ae:34:d8:9f:86:fc:86:71:38:5b:37:
1e:3c:60:aa:f9:aa:73:bf:44:96:c8:6c:bd:d1:9f:
ea:ae:aa:c6:e4:a3:d2:66:46:df:48:a6:58:d0:22:
08:00:b1:d5:76:a1:04:4c:69:0e:50:7b:02:cd:92:
d6:a0:45:29:e8:dc:43:64:e5:45:ff:f2:3a:d5:9e:
61:a0:78:6e:c2:2d:81:0b:d3:23:1d:34:c8:fc:5b:
e8:32:6e:fd:de:21:fd:be:9d:7b:9c:3c:3b:03:eb:
56:07:5b:c6:52:df:47:e8:19:e0:08:61:28:9f:d3:
38:b5:d1:3a:d7:fc:5c:4f:9c:58:3d:6c:6a:81:c6:
21:19:4e:4f:ec:2b:22:5f:12:63:07:4c:c1:64:40:
69:34:d2:4d:4b:88:82:69:ea:32:e8:40:b8:e4:0e:
6f:2a:16:8b:38:39:15:cc:4d:df:c0:09:f7:c0:14:
b1:ac:1f:1a:42:76:06:02:5c:5f:c4:1f:35:f4:6f:
63:04:59:08:21:58:6b:66:84:17:41:55:95:b9:78:
cd:b7:f8:80:38:56:a4:18:d5:0e:da:51:ff:e4:51:
bc:d8:02:d0:51:7c:f0:df:cf:b8:1c:4e:3c:81:4b:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CA:12:B9:13:B4:7F:92:97:12:CC:8C:47:AC:49:0B:FD:FE:69:E4
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:35:88:e9:f8:0a:c0:26:12:af:1b:2c:0e:da:f5:77:d3:bd:
b5:af:de:e9:a5:d4:cf:a4:1d:c5:cf:54:96:16:1c:b0:cb:7d:
65:a0:ee:37:7c:4e:7b:d1:d4:51:a4:1b:cb:19:87:a1:9c:3d:
5c:b6:c2:40:1b:41:a5:48:48:b0:17:dd:91:5e:0d:eb:c4:76:
16:79:ec:e3:6d:fd:31:02:1a:e2:ac:42:c1:d6:07:9a:55:7c:
04:29:ab:0c:4d:48:e9:5c:c0:3b:70:2b:ab:bb:4b:d9:05:bf:
ed:00:bc:50:92:d3:bb:78:cd:a3:bb:0c:ae:df:bd:0e:7c:96:
35:11:16:49:cf:e8:ea:c4:c4:64:d1:26:96:3c:b1:d3:b2:26:
af:c9:8e:ea:4f:60:14:e0:9d:15:b5:c7:41:86:d0:47:0c:22:
cd:6b:11:31:f2:c5:e4:e3:77:b7:39:92:83:7d:9c:19:cb:06:
a2:70:8f:96:63:7e:54:17:65:18:4f:56:d5:ac:e5:dc:64:2e:
76:07:97:fa:e9:77:81:dd:c8:34:d6:ed:13:44:66:5b:c3:9c:
41:c4:60:57:32:aa:5f:72:a6:96:9f:0c:ef:b2:9e:c8:c7:9f:
df:49:f4:9e:80:fc:8e:73:0a:08:89:77:f1:f8:f4:ae:03:a1:
fb:dc:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:28 2025 by rpki-client