Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier: jTuuorPSYqkypoKYsPEmK4H5ZJpEvi7XIJFCysBrBqc=
Subject key identifier: E9:98:C5:FE:CB:81:B2:8D:63:67:85:D6:AB:C7:57:94:23:2E:5B:E1
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial: 019A4FD09FBE25F5FE0061AD3BB15E4319B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number: 0569
Signing time: Tue 04 Nov 2025 17:01:03 +0000
Manifest this update: Tue 04 Nov 2025 17:01:03 +0000
Manifest next update: Wed 05 Nov 2025 17:01:03 +0000
Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: MLpbSzOAk7KQUH6Tm7yDlEoMA1d9Qe6e1uJ3n6oqzOg=)
2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:9f:be:25:f5:fe:00:61:ad:3b:b1:5e:43:19:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Validity
Not Before: Nov 4 17:01:03 2025 GMT
Not After : Nov 5 17:01:03 2025 GMT
Subject: CN=e998c5fecb81b28d636785d6abc75794232e5be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:b5:99:0a:fa:86:cd:5f:a4:3e:00:78:43:
0b:28:83:f0:53:76:02:33:cc:2a:b6:6a:ef:da:84:
b0:13:5a:77:e3:25:24:9f:dd:17:29:30:e2:1f:bf:
ec:d4:80:45:3c:6c:0e:0d:0b:af:c9:9e:05:a5:07:
f5:26:1e:db:ea:dc:29:00:65:1a:e4:43:62:f3:bc:
3e:14:27:9b:19:c1:f0:86:5d:9b:dc:64:1a:ee:03:
4a:9e:49:9b:b1:f8:a3:9f:02:b5:70:c3:dd:99:84:
0f:ac:51:fc:9f:fe:6f:7e:c2:6e:1d:d8:cb:00:0a:
09:86:1e:9a:05:a4:a7:7c:e4:5a:52:35:25:0b:2f:
64:0d:66:15:39:5d:93:d4:df:95:a1:ed:02:7f:cf:
9d:c7:5e:39:3b:31:d1:17:ee:8e:99:2a:aa:b2:40:
63:ec:6c:b4:a2:20:4a:07:1b:a7:9d:08:a6:b6:a6:
0d:2c:00:3a:81:ad:24:d7:bb:55:b5:27:48:c6:42:
1c:7f:50:7b:ae:8c:45:84:12:04:f2:0e:d0:c1:55:
ea:fe:1e:e5:8d:d3:ef:3f:45:82:ac:1c:a3:04:8a:
17:5c:e2:86:1d:21:c0:2b:8f:a0:8d:11:5e:f3:4b:
e1:f9:e5:c6:9e:64:d3:f8:42:07:09:ea:af:80:ba:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:C5:FE:CB:81:B2:8D:63:67:85:D6:AB:C7:57:94:23:2E:5B:E1
X509v3 Authority Key Identifier:
keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:5a:13:c5:2b:4b:f6:58:fd:a9:05:fb:cf:5b:35:e9:c9:
8a:c0:25:73:f1:14:56:f4:1f:b4:73:3e:6f:00:b8:1c:9b:63:
15:60:cf:1c:a9:52:51:6b:57:79:2a:17:19:b3:88:ad:38:ab:
40:1b:5d:5f:ba:72:e5:cc:16:03:24:07:49:0e:59:6e:86:f4:
17:9a:e7:37:96:93:e4:5b:49:c7:33:af:0d:36:44:97:b5:ce:
b8:d8:8e:38:4b:75:d5:c5:dd:a1:cb:9c:a1:22:88:80:e8:ed:
15:c8:f9:0a:90:ad:0e:53:d2:53:47:18:1e:09:a1:78:f3:c2:
5f:80:1d:6b:58:e1:27:38:6b:6e:1f:ec:ed:86:a2:20:c6:ae:
08:e3:1a:53:42:2d:fe:8f:ec:e2:6c:d6:87:0b:28:fa:20:8c:
ff:71:2d:74:eb:21:fb:7a:d7:e8:ed:7c:91:8a:22:26:7c:c1:
25:41:f7:e8:12:5e:d3:ac:33:36:39:09:8f:7c:7c:44:1a:3b:
e5:9e:25:b0:12:43:ca:64:0f:0b:a0:e0:1c:2d:0c:a0:79:02:
60:8c:a5:4a:da:9a:19:bb:dc:a4:99:9f:34:0c:79:e7:9a:c7:
c9:11:82:81:1c:95:0c:89:e0:c0:25:d7:fd:13:1d:27:67:9f:
ea:9b:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:35 2025 by rpki-client