Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: rn9YM59n/3Xivf8KUdnzFQcfwtvo9PUkLMYH+EsZ/p0=
Subject key identifier: 24:35:7D:F4:20:F7:E1:9B:14:60:A8:CC:DD:FB:84:04:52:BF:F0:2B
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019A4E18BD3E1D75954E091807F2D190415B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: HtNuNXbv/ChgRS4sJb5m5j5dF521WvONuy3HjNdGQAE=)
2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bd:3e:1d:75:95:4e:09:18:07:f2:d1:90:41:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=24357df420f7e19b1460a8ccddfb840452bff02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:8f:b4:27:3e:64:d7:2e:86:21:91:82:46:
e2:2c:28:fd:93:75:a1:75:67:4f:96:3e:70:dd:7a:
99:79:6c:fc:91:85:04:0d:dc:43:b1:40:14:b0:92:
db:db:0c:7c:ac:3e:e5:a0:dc:46:b0:39:13:e6:25:
b4:fc:d2:84:07:06:98:30:d5:ef:77:4f:66:de:83:
e0:b1:7a:79:dc:b2:67:79:73:50:df:fc:06:d3:56:
ba:37:38:e5:c6:03:2b:cc:1b:46:66:92:ba:2d:1c:
7d:7f:d0:7f:d2:f1:7d:e0:2a:34:ca:b6:33:65:6c:
cd:67:82:1e:c4:37:02:7d:91:0e:f0:7d:f0:61:14:
01:95:4f:24:25:84:03:46:99:b9:44:18:67:55:b2:
77:70:9c:b7:ab:91:ce:54:9c:62:d4:42:0d:e5:2d:
0a:20:8d:4a:c2:fa:50:92:0f:9b:65:0a:af:f2:04:
b7:2d:7f:6c:b3:7b:b8:e5:d8:76:b3:c6:63:d2:49:
70:d5:08:dd:34:23:1d:17:36:59:77:2d:74:64:ef:
3a:28:cc:e4:d4:4c:0a:6b:a1:fa:a2:7e:ca:6a:22:
d2:45:a1:73:18:c8:af:09:e6:85:4b:ba:c2:2a:43:
86:ad:85:48:9e:22:5a:8f:05:f4:73:ab:5d:29:84:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:7D:F4:20:F7:E1:9B:14:60:A8:CC:DD:FB:84:04:52:BF:F0:2B
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ed:7b:fa:25:5f:59:7a:f9:f4:78:36:38:60:99:85:aa:43:
c4:a2:55:2e:64:50:a0:66:28:96:fd:90:c6:d1:ea:af:4f:e1:
c6:f5:d0:3a:b3:6c:59:7d:41:c9:17:2a:05:e0:5d:d2:40:a6:
28:85:4e:58:54:20:cd:fa:fb:ba:3f:c4:b5:29:c9:37:30:77:
09:d2:ae:db:66:8a:55:4b:ca:e4:4c:48:31:f9:2e:bc:1c:16:
a5:8f:d8:f8:d4:b7:a8:3d:cf:f8:86:bd:87:40:f5:62:13:37:
9b:2d:27:13:f7:ce:48:7f:5a:ea:00:d4:7a:4a:b2:d9:44:b9:
55:6b:6f:10:aa:24:77:9d:d2:e7:42:f5:66:ba:74:9f:53:ae:
54:97:33:53:eb:5f:07:23:71:11:29:46:f3:ce:99:3b:35:82:
bb:65:79:53:d1:1c:b5:81:57:0e:96:48:bf:f5:03:65:a0:ea:
d7:da:89:33:99:e2:3c:5d:07:95:9d:fe:97:2d:13:ba:dd:c0:
89:c8:58:7d:20:f1:12:8d:22:45:d7:22:8d:81:23:f9:0f:d2:
54:59:d7:da:7f:7b:57:7f:cc:9e:74:51:eb:13:68:9c:bf:ab:
0c:5b:d1:7d:a6:90:4d:a9:51:ab:48:6a:9d:bc:0f:2a:9e:5b:
72:53:56:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGL0+HXWVTgkYB/LRkEFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjE0NGM4MjQ5NTk3MTFiNjUyZDc4YzE4NzAyYmY0MzJm
MjE5NWMwHhcNMjUxMTA0MDkwMDM1WhcNMjUxMTA1MDkwMDM1WjAzMTEwLwYDVQQD
EygyNDM1N2RmNDIwZjdlMTliMTQ2MGE4Y2NkZGZiODQwNDUyYmZmMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXCPtCc+ZNcuhiGRgkbiLCj9k3Wh
dWdPlj5w3XqZeWz8kYUEDdxDsUAUsJLb2wx8rD7loNxGsDkT5iW0/NKEBwaYMNXv
d09m3oPgsXp53LJneXNQ3/wG01a6NzjlxgMrzBtGZpK6LRx9f9B/0vF94Co0yrYz
ZWzNZ4IexDcCfZEO8H3wYRQBlU8kJYQDRpm5RBhnVbJ3cJy3q5HOVJxi1EIN5S0K
II1KwvpQkg+bZQqv8gS3LX9ss3u45dh2s8Zj0klw1QjdNCMdFzZZdy10ZO86KMzk
1EwKa6H6on7KaiLSRaFzGMivCeaFS7rCKkOGrYVIniJajwX0c6tdKYQj6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ1ffQg9+GbFGCozN37hARSv/ArMB8GA1UdIwQY
MBaAFPJhRMgklZcRtlLXjBhwK/Qy8hlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjIt
MzViNDgzYmI0Yzg0LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjItMzViNDgzYmI0Yzg0
LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu17+iVf
WXr59Hg2OGCZhapDxKJVLmRQoGYolv2QxtHqr0/hxvXQOrNsWX1ByRcqBeBd0kCm
KIVOWFQgzfr7uj/EtSnJNzB3CdKu22aKVUvK5ExIMfkuvBwWpY/Y+NS3qD3P+Ia9
h0D1YhM3my0nE/fOSH9a6gDUekqy2US5VWtvEKokd53S50L1Zrp0n1OuVJczU+tf
ByNxESlG886ZOzWCu2V5U9EctYFXDpZIv/UDZaDq19qJM5niPF0HlZ3+ly0Tut3A
ichYfSDxEo0iRdcijYEj+Q/SVFnX2n97V3/MnnRR6xNonL+rDFvRfaaQTalRq0hq
nbwPKp5bclNWdw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:12 2025 by rpki-client