Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: wkTrpxhk/MA/sjOtPFkraYnhu/Hbnlh/L56A2iQSFMU=
Subject key identifier: 63:63:02:24:9E:4E:2C:43:80:0B:C9:25:C5:E6:E5:9D:C2:0B:5F:B5
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 019A4EF5E86727321436B77A3BB05A1A9FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0E02
Signing time: Tue 04 Nov 2025 13:02:09 +0000
Manifest this update: Tue 04 Nov 2025 13:02:09 +0000
Manifest next update: Wed 05 Nov 2025 13:02:09 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: vIgBqPHXJqkSGCiIWFakncfyVERSUGenvMBCdDKwxOs=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e8:67:27:32:14:36:b7:7a:3b:b0:5a:1a:9f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Nov 4 13:02:09 2025 GMT
Not After : Nov 5 13:02:09 2025 GMT
Subject: CN=636302249e4e2c43800bc925c5e6e59dc20b5fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:07:6e:2a:42:a7:54:8f:a6:46:80:a6:c6:
c6:95:68:a5:16:00:23:31:9f:6f:9d:fd:92:24:63:
fd:e9:6f:e9:88:1a:28:0f:5a:4b:cf:4a:96:5c:26:
2d:ae:bb:07:8a:78:f0:0f:91:3f:b5:e7:10:ac:69:
4a:ad:be:4a:ce:1a:04:a7:7b:5e:b5:81:8d:89:7b:
7f:10:0e:61:81:05:3a:c3:16:ba:77:c2:85:ba:c3:
72:14:37:93:cf:37:05:b6:68:cd:d9:b9:8a:d7:ed:
56:20:b9:fa:6d:31:d6:3c:c1:96:85:d2:1e:93:ae:
17:f7:a3:1e:1d:bb:90:52:16:7b:34:b6:0d:7c:de:
93:07:c4:25:c4:77:18:82:1e:dc:ef:db:93:ee:6b:
6c:97:c2:6b:f6:4b:49:e0:25:73:ca:31:68:bc:1f:
00:b1:e5:21:1c:c1:02:e9:27:d5:86:9d:08:b9:b2:
3f:e5:a8:c3:2d:3a:2a:b1:94:ca:8d:25:4a:f3:8e:
63:47:4a:8f:9a:7a:c9:1f:65:31:37:29:98:01:1f:
40:5f:b4:a3:f9:99:5c:ed:fc:dd:5a:b0:11:65:f1:
54:b5:72:b4:9e:1f:d7:7d:0a:d2:86:bd:80:a4:e7:
71:3c:f3:56:01:68:a9:2b:0d:cc:c7:7f:cf:87:81:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:63:02:24:9E:4E:2C:43:80:0B:C9:25:C5:E6:E5:9D:C2:0B:5F:B5
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:68:84:ed:23:bf:63:d2:5f:51:ee:10:26:10:3a:05:61:4a:
20:5b:97:9a:29:f3:ea:2f:9f:5c:35:83:f0:37:da:0e:7a:4e:
2d:d5:c0:88:10:11:5f:11:e5:43:f0:ab:df:24:a1:22:03:0a:
20:e6:11:ff:57:38:5b:a3:3f:21:40:e2:5e:1f:28:c6:5a:0d:
b1:75:73:e8:39:c9:a7:5e:e3:d8:0a:c5:b5:06:55:58:33:82:
32:40:f0:30:e1:c0:0c:66:00:32:20:a1:dd:49:9c:67:d1:1b:
27:d6:fd:9f:5f:4e:03:66:33:69:6b:1e:c3:39:70:df:55:ef:
a6:a1:5f:8e:a9:9f:e8:4d:5e:e4:aa:b0:9b:bf:9e:a9:c1:53:
85:e1:b5:f0:3c:a0:c1:95:88:0b:25:2b:4f:9c:b4:95:36:5f:
8b:1b:ac:12:5f:0e:a5:26:be:f3:cd:61:d2:3a:c5:d1:88:b6:
60:8a:73:48:13:6d:9e:85:49:04:ce:cb:72:70:c2:76:f5:77:
03:7c:9f:bc:b9:fd:6d:30:a1:a6:15:f2:b3:56:46:c2:5f:27:
2f:09:80:0d:83:33:4a:34:56:00:1b:1a:dd:cb:0b:31:43:d9:
4d:c9:cd:23:2d:d5:00:da:6b:67:94:ef:de:17:d6:c7:73:d9:
62:38:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:41 2025 by rpki-client