Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: sW9QakNkZUVFKY3aFSO004oUqoFeZuwYwZhHu9C07GY=
Subject key identifier: AA:11:CD:1F:6F:DB:52:0D:C9:F0:0F:9D:65:BF:C3:03:42:1C:BC:58
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 019A4D7406BA0A19864239C29777C0D5125A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 06:00:40 +0000
Manifest this update: Tue 04 Nov 2025 06:00:40 +0000
Manifest next update: Wed 05 Nov 2025 06:00:40 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: N06FoMnFI4CcSHN3nUfdJKODiZVhFb3YiQc+gS0gKBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:06:ba:0a:19:86:42:39:c2:97:77:c0:d5:12:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Nov 4 06:00:40 2025 GMT
Not After : Nov 5 06:00:40 2025 GMT
Subject: CN=aa11cd1f6fdb520dc9f00f9d65bfc303421cbc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:d8:95:44:81:9e:87:7b:20:92:c1:04:fe:
4d:d8:51:18:e1:8c:3d:cc:43:40:63:7d:f7:38:74:
40:74:ae:89:7d:7f:77:b9:17:60:d0:e5:70:18:9c:
6a:25:a5:ed:11:d6:d2:bd:49:67:6c:45:dc:f6:5e:
7d:fc:c3:33:48:4e:3c:e0:6d:d5:3b:15:07:f1:67:
47:8a:a5:c8:7a:b1:f3:16:0f:50:92:c2:ba:2e:e2:
2d:1b:78:0d:89:15:3f:03:ec:92:c4:c9:aa:9a:90:
96:fc:4d:ab:92:0b:5f:b2:a0:0d:6e:f6:cc:06:1d:
03:1d:71:35:f7:02:fd:bc:df:3d:99:b6:d5:b7:b3:
13:a3:07:1d:2a:f8:72:0f:5b:62:23:b6:b9:94:a2:
e8:9c:39:a9:37:51:46:d1:34:49:3a:08:c6:19:9d:
84:d1:65:a9:dc:5c:00:75:17:6c:7f:2b:27:e6:99:
43:6a:48:40:ab:7f:f8:da:81:9c:fc:d4:3f:34:4f:
85:5d:1a:c4:e0:bb:cc:16:7c:87:3d:7e:6a:f8:81:
97:24:a3:43:47:f5:e8:df:d0:96:1a:ca:89:bf:86:
63:0e:67:ca:71:c4:08:31:fb:37:b4:11:60:fe:71:
c0:80:7e:9b:f6:a4:56:bc:4f:39:3c:f8:19:01:29:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:CD:1F:6F:DB:52:0D:C9:F0:0F:9D:65:BF:C3:03:42:1C:BC:58
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:88:7c:14:10:b0:ca:fb:66:4c:46:8c:fa:a6:ab:09:d4:f4:
6a:83:0a:89:d6:e8:5c:2d:e5:df:a5:3e:f6:70:78:97:1e:80:
ff:3b:1d:f5:00:a4:b9:a8:04:a4:dd:c1:15:54:27:97:f1:17:
53:3d:ff:f1:12:64:9b:0c:8a:9a:88:7a:98:de:fc:9d:f4:5c:
29:93:68:ed:39:51:09:39:58:6a:f7:d2:90:c3:9b:46:cc:11:
fe:4a:42:55:87:9e:47:1e:1a:9f:ae:00:57:37:28:db:c8:11:
09:42:b7:8f:11:7e:7b:8e:b2:40:f1:26:d5:8f:f7:5d:e4:e8:
ad:9b:42:cf:3c:7e:1c:47:9c:11:8b:6f:46:20:47:13:2e:88:
27:ed:78:29:3a:c7:88:c9:6e:d8:79:3f:eb:9b:2e:1c:d7:90:
20:2f:61:93:3b:a6:0d:ab:49:e8:d8:7e:19:5c:e8:2e:6e:8a:
22:cd:22:bf:31:87:fe:70:3b:1b:6c:ef:52:3b:a9:f1:fe:2a:
31:1d:6a:ec:2b:a3:0d:2f:15:6e:32:77:73:3f:6b:3f:ac:d1:
ec:de:5b:1f:8d:66:a9:a7:22:1d:b2:f0:36:af:d5:96:af:f8:
92:3b:36:76:af:3f:de:51:44:b7:23:22:ad:28:80:39:0d:c9:
34:81:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:28 2025 by rpki-client