Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: +Fqvmi6ImZQ5SFqulWLmfEWudd71E6xdxbHGF9Vbcq8=
Subject key identifier: B6:E7:93:8F:16:B7:A0:26:4C:01:AE:F7:79:1A:CA:92:52:92:42:E2
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 019A4DAB212F72A50CD530E999283CDF15A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 0FD7
Signing time: Tue 04 Nov 2025 07:00:51 +0000
Manifest this update: Tue 04 Nov 2025 07:00:51 +0000
Manifest next update: Wed 05 Nov 2025 07:00:51 +0000
Files and hashes: 1: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: sJU4rT302pAe95WgbkAdtxuVAS8Cq6i5TFXfqrhAcKo=)
2: m7fQ-cMMDdeyLl0RJP3A0VDHgVE.roa (hash: rB/+iXy3MWnMmudzmSTexHxDroAo7zhjaO5iq26LcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:21:2f:72:a5:0c:d5:30:e9:99:28:3c:df:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Nov 4 07:00:51 2025 GMT
Not After : Nov 5 07:00:51 2025 GMT
Subject: CN=b6e7938f16b7a0264c01aef7791aca92529242e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:fa:d2:14:7e:45:b2:c0:60:8e:56:5c:87:
8a:79:0c:68:b1:c5:0a:b6:5f:7b:9d:05:dd:28:8b:
35:ce:e9:4a:73:9f:30:3a:0e:c2:f2:59:d2:41:75:
b8:25:c5:f0:41:db:14:c4:2d:b5:c3:91:7a:f9:df:
20:1d:31:ef:62:79:fa:c3:59:2f:e5:f9:cb:de:ff:
53:d9:82:f8:0a:7d:1f:18:c4:d9:f8:7c:b6:31:6b:
d0:e7:76:5e:7b:46:02:f5:e5:78:90:53:e5:23:fd:
a7:ab:8a:18:ee:30:17:60:98:f7:38:26:2f:5e:51:
df:51:21:c1:57:1e:70:c4:90:26:53:61:43:d9:56:
3a:a6:a1:0d:25:60:76:83:d2:c8:9e:06:c9:cf:6a:
7b:ee:da:a6:31:39:9c:6f:8e:c5:44:fb:9f:cf:41:
bd:f4:94:6c:44:79:79:66:fb:11:45:0d:81:2d:ae:
74:b3:ce:a8:71:bc:52:8a:ff:2b:15:ab:4f:9d:2f:
8b:55:8d:c2:5a:7e:76:ed:6e:5b:44:20:e4:70:7b:
c5:c8:1b:7c:bd:e0:cf:b4:b7:3c:31:11:69:64:ef:
6d:e5:7a:a9:8f:73:e1:6b:2d:55:4b:7b:1e:30:c5:
e4:52:5a:55:39:09:87:10:6b:ba:3b:8f:41:2a:0a:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:93:8F:16:B7:A0:26:4C:01:AE:F7:79:1A:CA:92:52:92:42:E2
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0b:56:eb:40:48:ca:37:1c:ca:9b:9e:3d:6d:42:24:ec:f6:
24:86:45:d3:f7:32:b3:35:de:03:8b:e4:b2:05:c4:0c:46:ba:
b2:7d:fe:3b:7b:6a:2a:e3:51:f9:23:28:7e:e7:74:f8:ed:00:
a5:c3:75:8a:a0:a2:c9:ea:a1:d0:3c:3e:a2:6d:d9:ce:82:bc:
13:e8:22:ba:22:0e:13:e5:9a:f7:6a:fb:a8:8b:77:8c:f5:8f:
fb:70:3f:df:f8:01:28:30:36:8d:23:a7:cc:d7:72:64:a9:8d:
cf:97:2a:c6:d1:2d:50:47:26:b8:b0:3a:e4:7d:d6:16:fd:79:
c1:2f:69:dc:86:24:b3:d0:68:23:04:9a:e1:6f:41:22:86:a5:
e9:9a:0e:b2:bd:1b:d1:b9:6f:33:89:e3:6d:4c:74:df:ee:40:
1c:9b:b4:eb:4e:dc:31:02:28:92:77:39:63:21:9a:4f:eb:b4:
72:2a:91:cf:f7:37:ca:68:ac:cb:b5:39:7f:f4:0e:3c:57:ae:
77:3b:5a:36:b2:2e:f1:0a:ad:b2:39:58:f5:87:20:dd:b5:aa:
22:28:da:73:da:4d:6b:f9:73:77:a0:05:fc:98:a2:92:df:24:
ee:e0:f3:af:be:04:4e:f0:b1:c1:6b:be:98:4b:36:64:2c:7f:
e4:4e:f0:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqyEvcqUM1TDpmSg83xWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGM2OWRhOTRjODVlZGQ0OGQ5YzFmZDhlMzMyYWUzYmVl
NjYwMDQwHhcNMjUxMTA0MDcwMDUxWhcNMjUxMTA1MDcwMDUxWjAzMTEwLwYDVQQD
EyhiNmU3OTM4ZjE2YjdhMDI2NGMwMWFlZjc3OTFhY2E5MjUyOTI0MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU/60hR+RbLAYI5WXIeKeQxoscUK
tl97nQXdKIs1zulKc58wOg7C8lnSQXW4JcXwQdsUxC21w5F6+d8gHTHvYnn6w1kv
5fnL3v9T2YL4Cn0fGMTZ+Hy2MWvQ53Zee0YC9eV4kFPlI/2nq4oY7jAXYJj3OCYv
XlHfUSHBVx5wxJAmU2FD2VY6pqENJWB2g9LIngbJz2p77tqmMTmcb47FRPufz0G9
9JRsRHl5ZvsRRQ2BLa50s86ocbxSiv8rFatPnS+LVY3CWn527W5bRCDkcHvFyBt8
veDPtLc8MRFpZO9t5Xqpj3Phay1VS3seMMXkUlpVOQmHEGu6O49BKgpDQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbnk48Wt6AmTAGu93kaypJSkkLiMB8GA1UdIwQY
MBaAFPKMadqUyF7dSNnB/Y4zKuO+5mAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZGNkOTYtMGFlMy00ZjVjLThkMjEt
YTkwMmIwMDk2Yjk5LzEvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZGNkOTYtMGFlMy00ZjVjLThkMjEtYTkwMmIwMDk2Yjk5
LzEvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAtW60BI
yjccypuePW1CJOz2JIZF0/cyszXeA4vksgXEDEa6sn3+O3tqKuNR+SMofud0+O0A
pcN1iqCiyeqh0Dw+om3ZzoK8E+giuiIOE+Wa92r7qIt3jPWP+3A/3/gBKDA2jSOn
zNdyZKmNz5cqxtEtUEcmuLA65H3WFv15wS9p3IYks9BoIwSa4W9BIoal6ZoOsr0b
0blvM4njbUx03+5AHJu0607cMQIoknc5YyGaT+u0ciqRz/c3ymisy7U5f/QOPFeu
dztaNrIu8QqtsjlY9Ycg3bWqIijac9pNa/lzd6AF/Jiikt8k7uDzr74ETvCxwWu+
mEs2ZCx/5E7wRw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:34 2025 by rpki-client