Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: FbL2EANPQzjXFe1ylmspcH8oR2IqkHvC095xzwp3Lb0=
Subject key identifier: BD:6E:48:2F:6D:02:9F:36:A6:99:36:AA:A4:BF:BA:C2:5F:E1:C2:E9
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 019A4F2B1DAFAE1680FCA86596D2A8369B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 08B8
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: SbuBG8MV1hrJiwhjrC9eH4NCiTD0XAA8KSnDRrg+FvA=)
2: Mqsj_mYBdYcPJ5l_74z5bHNTr1k.roa (hash: +l1/GGdu0QqetRbkoCyavDfKTfdB+pfAVXCWByI+XBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1d:af:ae:16:80:fc:a8:65:96:d2:a8:36:9b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=bd6e482f6d029f36a69936aaa4bfbac25fe1c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:bc:b0:ef:85:0e:92:16:a2:00:51:87:44:
ed:5c:97:19:f6:b8:04:89:f5:bc:44:82:30:8f:a2:
cc:cd:d3:3f:ca:95:fd:8c:14:92:46:3c:27:65:45:
be:e2:c1:84:6a:f4:ad:ec:66:e2:f1:60:46:1a:53:
30:39:be:e5:c1:69:6e:2d:be:ec:d9:ac:16:10:ac:
b0:a9:50:d9:27:87:e4:d5:4f:f6:46:73:f0:e3:22:
17:f6:45:d0:b5:1e:14:f3:00:d9:2d:b0:ca:54:ef:
91:28:d4:c5:49:30:21:9f:5c:fd:dc:19:05:aa:b1:
dc:3f:06:5a:47:d6:67:e4:77:79:b3:9b:8e:7b:6e:
35:c4:e6:63:1d:2f:e0:41:6a:87:58:56:fd:4c:e9:
b3:e3:f2:68:bc:b4:5c:b7:00:03:70:55:e2:3a:93:
9f:c9:42:1f:10:01:ef:9f:8c:15:b6:55:ba:b6:5a:
cc:9c:98:01:70:2a:8e:2a:86:b0:af:46:2b:f6:07:
64:bd:08:b9:81:bf:07:58:83:71:62:85:36:a9:a0:
23:a5:83:7d:2b:a3:1d:4b:64:0b:c1:00:19:7c:fa:
80:31:0b:f7:52:1c:06:3e:4a:70:ec:b5:09:30:27:
a6:ca:54:15:5e:cc:b3:cd:16:c9:67:e9:2e:6b:e4:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:48:2F:6D:02:9F:36:A6:99:36:AA:A4:BF:BA:C2:5F:E1:C2:E9
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0a:2c:58:ad:d2:43:9e:cf:2a:3d:40:8d:11:11:82:19:35:
90:b4:39:2c:57:10:98:1e:a6:d9:be:fd:dc:76:e2:64:da:b3:
b5:9f:ff:d6:5c:8c:2c:01:42:36:04:10:c3:ec:89:29:ee:cd:
27:f8:0b:d7:1b:a3:ad:f1:59:59:16:74:d6:56:00:84:29:6b:
3a:70:13:ec:ff:08:f8:d2:47:f3:b2:32:42:91:2b:7a:9d:38:
b2:bf:36:7f:fc:bc:40:06:1d:64:32:a2:1b:6d:b8:2e:2c:76:
eb:f5:7e:29:07:7e:a6:5c:30:02:cf:f2:82:47:b5:3a:f9:bf:
13:ca:e3:1d:12:63:3a:35:f2:02:d5:90:37:75:42:6f:d9:93:
04:51:9e:6a:d2:16:c1:ac:60:4b:9c:23:a6:7a:e2:bb:92:22:
b8:74:fe:f8:ca:cd:5e:e4:59:95:bb:f1:99:90:f7:ff:b1:31:
3e:61:41:30:dd:98:d5:78:7e:b1:d9:43:96:62:29:f0:71:dc:
6b:b8:a3:07:d6:5c:f9:0c:ab:14:44:2d:d6:35:54:86:7f:b2:
a8:e8:f9:46:2d:f0:7c:1e:a2:e9:01:5c:27:0d:b7:8c:9d:b9:
ea:95:a4:6e:96:b4:d8:ff:ba:35:71:c8:af:27:8c:8b:0b:83:
30:09:82:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKx2vrhaA/KhlltKoNps0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWM3YzFhMWJhZWQzMjYwZDk1MGQ0Y2ZjZTlhODk3Y2M5
N2ZhMzAwHhcNMjUxMTA0MTQwMDE2WhcNMjUxMTA1MTQwMDE2WjAzMTEwLwYDVQQD
EyhiZDZlNDgyZjZkMDI5ZjM2YTY5OTM2YWFhNGJmYmFjMjVmZTFjMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7W8sO+FDpIWogBRh0TtXJcZ9rgE
ifW8RIIwj6LMzdM/ypX9jBSSRjwnZUW+4sGEavSt7Gbi8WBGGlMwOb7lwWluLb7s
2awWEKywqVDZJ4fk1U/2RnPw4yIX9kXQtR4U8wDZLbDKVO+RKNTFSTAhn1z93BkF
qrHcPwZaR9Zn5Hd5s5uOe241xOZjHS/gQWqHWFb9TOmz4/JovLRctwADcFXiOpOf
yUIfEAHvn4wVtlW6tlrMnJgBcCqOKoawr0Yr9gdkvQi5gb8HWINxYoU2qaAjpYN9
K6MdS2QLwQAZfPqAMQv3UhwGPkpw7LUJMCemylQVXsyzzRbJZ+kua+SHawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1uSC9tAp82ppk2qqS/usJf4cLpMB8GA1UdIwQY
MBaAFPecfBobrtMmDZUNTPzpqJfMl/owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQt
ZDEyYjU4Y2NiODdjLzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQtZDEyYjU4Y2NiODdj
LzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQosWK3S
Q57PKj1AjRERghk1kLQ5LFcQmB6m2b793HbiZNqztZ//1lyMLAFCNgQQw+yJKe7N
J/gL1xujrfFZWRZ01lYAhClrOnAT7P8I+NJH87IyQpErep04sr82f/y8QAYdZDKi
G224Lix26/V+KQd+plwwAs/ygke1Ovm/E8rjHRJjOjXyAtWQN3VCb9mTBFGeatIW
waxgS5wjpnriu5IiuHT++MrNXuRZlbvxmZD3/7ExPmFBMN2Y1Xh+sdlDlmIp8HHc
a7ijB9Zc+QyrFEQt1jVUhn+yqOj5Ri3wfB6i6QFcJw23jJ256pWkbpa02P+6NXHI
ryeMiwuDMAmCeg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:21 2025 by rpki-client