Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: i7TwxdUhPmk3Fz2ahvHzRNWP/+ukWCMxErHwbFu6xNM=
Subject key identifier: E0:BB:09:62:22:81:E2:7F:06:17:18:2A:0B:94:1A:E2:A8:02:BD:E0
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 019A006BFB40C88A229FC73130A60F7F36ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 05CE
Signing time: Mon 20 Oct 2025 07:01:07 +0000
Manifest this update: Mon 20 Oct 2025 07:01:07 +0000
Manifest next update: Tue 21 Oct 2025 07:01:07 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: ONjQTtPaFOqkRL9Ra/jdqBq7ejLgY0/zZE0XkucrzgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:fb:40:c8:8a:22:9f:c7:31:30:a6:0f:7f:36:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Oct 20 07:01:07 2025 GMT
Not After : Oct 21 07:01:07 2025 GMT
Subject: CN=e0bb09622281e27f0617182a0b941ae2a802bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:1c:c5:70:b2:85:13:e2:f9:d0:c0:15:82:
5f:4e:5f:e8:f2:58:4d:13:27:77:a7:04:2c:33:9c:
73:11:78:ee:58:95:6d:cb:f9:d5:c4:a4:71:ab:35:
b8:f3:3c:3e:1f:1b:cc:48:a2:3d:21:c6:5d:e5:b2:
e9:bc:fc:6d:fc:c6:2b:d7:77:92:2c:e0:dd:57:7b:
8d:8a:5a:a9:34:64:ab:f8:5c:65:ab:20:5c:88:e9:
f1:33:64:82:f2:7e:30:05:91:2b:8f:27:96:c9:8d:
ec:41:54:cb:9e:c3:0c:c8:1f:7a:4b:c5:7e:69:e6:
1c:77:8b:09:2d:c1:63:0f:fd:34:74:86:c7:46:fe:
c0:ae:7b:3e:4b:47:7f:27:5d:1c:69:16:0a:c8:83:
9b:20:cc:3c:36:fa:f6:14:ae:1d:d3:d4:1c:cd:a9:
cc:95:27:e6:21:fa:63:cc:db:65:1f:ec:47:ac:01:
e2:66:13:83:d5:3f:71:0c:4a:6b:0f:90:0b:8b:21:
ff:e3:23:7d:24:b7:9e:f2:45:8c:2c:8c:66:30:2e:
ea:0a:16:4c:bb:45:07:dd:77:b9:9e:de:7d:ab:63:
74:71:76:7d:0c:bf:23:97:a7:73:a1:9a:3d:77:50:
fd:23:c6:41:7e:a6:67:e7:89:e5:c7:ef:fb:4c:36:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BB:09:62:22:81:E2:7F:06:17:18:2A:0B:94:1A:E2:A8:02:BD:E0
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f4:0e:ca:74:47:34:d9:07:19:8f:0f:33:e9:0e:4c:5b:39:
f9:13:d1:5c:84:cd:6b:09:75:3a:e0:8e:1f:d0:93:81:b3:f4:
ba:7a:d2:36:4b:49:4e:2d:39:ba:e6:1b:d7:aa:93:4c:59:76:
c3:c2:a2:e1:da:52:ce:d1:1a:52:ae:a4:02:5b:96:71:2e:de:
a2:1f:a3:9f:36:4d:69:b7:a0:5e:f8:40:f3:3a:47:6d:7d:7a:
13:85:b4:61:76:be:1b:40:52:1c:46:ce:8e:fd:ea:b1:93:4d:
94:96:56:2c:15:dd:15:a2:6f:c2:87:4b:85:3b:7c:5c:0e:12:
81:98:c7:6c:b9:da:de:61:df:a0:c7:16:8f:18:e5:8c:27:d6:
8b:3e:51:82:d0:5a:65:1b:9e:9e:10:3d:bb:9c:f6:5c:68:c2:
f8:60:6e:3a:88:41:82:84:ca:b2:4d:b2:04:fb:c2:28:69:ee:
ff:e0:85:91:8a:0d:42:42:96:7b:4d:e3:5f:9e:51:af:3d:46:
2a:66:3d:56:26:fe:62:a9:66:57:be:1a:d8:99:81:9c:31:e8:
65:83:c3:9f:63:95:56:b0:7e:8d:2d:45:6c:38:47:b0:81:85:
af:e2:13:fd:ce:0b:48:fa:e3:b6:85:89:28:db:b8:48:a8:b3:
d1:51:06:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:34 2025 by rpki-client