Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier: 4edo8yqUbYt6jtQuAg1LUzYxOhRubWhmIbl2lfbRVWw=
Subject key identifier: 9F:73:06:39:7E:C9:02:9C:7E:AC:8B:B7:9D:4A:16:D2:AA:66:B3:9D
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial: 0199FFC8B46D44EAC648E95A6A7ED63E0DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number: 0D11
Signing time: Mon 20 Oct 2025 04:02:47 +0000
Manifest this update: Mon 20 Oct 2025 04:02:47 +0000
Manifest next update: Tue 21 Oct 2025 04:02:47 +0000
Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: tXd0PUBu5xg6k5B4KB1o9rgNFfu0S9WQd3dd5aQMrT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:b4:6d:44:ea:c6:48:e9:5a:6a:7e:d6:3e:0d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Validity
Not Before: Oct 20 04:02:47 2025 GMT
Not After : Oct 21 04:02:47 2025 GMT
Subject: CN=9f7306397ec9029c7eac8bb79d4a16d2aa66b39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:cd:1e:04:b8:72:52:c4:2c:f2:09:a4:7c:
c8:c3:5d:50:5b:05:0f:72:9b:13:a2:d5:f9:3c:51:
6d:fb:0b:29:53:0c:2d:ce:26:2c:b5:33:66:3b:b9:
dd:09:da:29:e4:36:14:3a:8a:2b:c5:dd:50:1a:e7:
e6:d3:b2:e5:b7:d1:67:30:f6:41:9b:0b:fd:dd:62:
26:51:70:09:44:36:b1:d2:db:49:bf:ae:0e:d9:c3:
3b:4d:e4:f2:d6:bc:8d:d6:c1:b7:4b:93:33:50:e4:
bb:aa:27:40:f9:32:af:73:29:47:7e:e1:bf:42:67:
1f:c9:67:f8:58:57:ee:43:2d:b9:58:a1:25:25:5a:
c5:fc:e9:84:25:8c:02:b1:0b:ce:d4:d9:18:d4:40:
f7:9e:e5:a3:39:d5:94:31:30:af:d4:fd:c5:0d:dc:
a5:39:2c:22:f2:17:86:9e:12:a8:34:77:96:de:fb:
39:1f:ab:a1:de:cf:fc:a5:15:92:b1:ec:06:c5:16:
b8:1a:35:ab:fe:a8:2a:d9:ea:c4:a5:05:ed:8a:95:
63:a4:78:66:b8:06:1c:48:2d:42:cb:77:08:e5:a3:
4e:2a:74:5c:83:f0:22:85:c3:88:81:4f:a9:60:be:
d5:62:2b:ca:e5:02:a7:9a:de:e4:47:db:d1:e1:73:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:73:06:39:7E:C9:02:9C:7E:AC:8B:B7:9D:4A:16:D2:AA:66:B3:9D
X509v3 Authority Key Identifier:
keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:58:d0:cd:56:2e:2d:6c:39:7d:a6:99:65:02:6d:14:39:
64:60:cf:6d:30:a2:01:7b:92:19:5b:58:5a:a1:c0:ca:10:24:
65:ac:f4:b8:52:4f:89:1a:5f:01:72:14:1b:ba:c4:93:b2:2d:
a8:71:e1:03:c3:45:6b:51:34:de:88:96:81:b8:ca:98:f5:3a:
de:b8:cf:c0:0d:24:32:f9:e4:e0:75:e4:a5:a8:3c:c4:08:e2:
59:c8:20:87:f5:d5:6c:f6:19:9e:18:e9:e8:d8:ab:2f:20:1b:
fd:de:0d:ab:3e:0e:56:8c:a4:6d:a6:15:99:55:ad:0b:1a:1a:
e1:2e:ca:a1:54:61:ae:30:72:58:82:a7:6b:9b:43:bc:5b:b0:
46:d6:cb:e7:57:7f:e3:23:77:39:19:bd:a6:30:87:ba:bb:70:
a4:7c:90:ed:9a:79:8a:98:12:ff:7e:8e:e4:cb:3b:50:77:5d:
d4:bd:3d:69:04:93:5b:8e:1b:58:fc:71:1c:0c:10:7b:99:95:
55:c7:16:1e:43:c7:1f:4c:cd:c1:83:22:c9:18:f2:f0:d0:78:
59:4e:b8:a7:37:32:5e:27:39:3a:d2:36:1e:b5:b8:f0:64:03:
fe:d8:07:44:99:e5:ee:4a:bd:85:72:fc:32:64:bd:c2:be:3b:
ce:af:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:38:59 2025 by rpki-client