Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: opMCrtjFAgZORWrp0NZV5ofjY6SzOM7nxK9nslYFQiw=
Subject key identifier: 01:75:BF:8D:B8:E4:C7:40:E4:90:3A:15:DC:D2:02:D8:05:5F:E6:8B
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019A51507D85D7B9D9644992F10080DC58E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 173E
Signing time: Wed 05 Nov 2025 00:00:20 +0000
Manifest this update: Wed 05 Nov 2025 00:00:20 +0000
Manifest next update: Thu 06 Nov 2025 00:00:20 +0000
Files and hashes: 1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: cY+CpH3IngpJL2bbSqP6ryMRliaZdLTECbWnWmlv8hQ=)
2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:7d:85:d7:b9:d9:64:49:92:f1:00:80:dc:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Nov 5 00:00:20 2025 GMT
Not After : Nov 6 00:00:20 2025 GMT
Subject: CN=0175bf8db8e4c740e4903a15dcd202d8055fe68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:b9:b1:20:23:d1:51:cf:ab:da:da:78:e2:
c2:44:97:2c:14:22:6c:de:9e:d9:2d:df:1a:47:1e:
5c:67:46:ef:eb:be:e4:83:ce:4c:63:6a:34:e0:2e:
cc:b8:6b:f9:55:1c:2d:1d:99:2e:d3:bf:ab:65:f2:
30:1b:15:40:c4:ca:9d:71:03:c0:09:b2:22:96:4b:
02:35:06:99:1f:f3:8a:2a:8a:fc:4d:f0:42:24:e0:
a5:b6:da:0a:e4:3e:59:0e:05:4a:5f:d8:8b:df:8b:
67:f4:4c:30:47:85:d5:6f:07:c5:27:f5:d1:63:39:
93:ba:a5:44:3a:ed:03:03:41:a1:00:41:10:d2:b8:
af:ff:21:dc:87:97:e9:83:39:c1:7b:41:9c:0b:1f:
c7:ef:79:25:4e:61:59:58:bc:97:60:85:ac:27:1b:
8e:f0:24:55:10:75:83:0c:2d:69:73:78:b5:09:f2:
47:95:22:52:8a:72:45:04:ce:e0:d8:11:dd:0d:be:
d8:60:50:b8:30:1c:19:7e:27:67:43:d6:7f:0e:0c:
ae:f2:37:1d:2d:00:d5:ff:b1:12:47:47:d2:97:37:
9c:53:24:b3:cc:02:f6:87:0d:c6:8d:cd:cf:ba:b4:
5b:b0:96:77:80:38:9c:d1:9a:4d:a3:b9:00:84:07:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:75:BF:8D:B8:E4:C7:40:E4:90:3A:15:DC:D2:02:D8:05:5F:E6:8B
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ec:10:a1:14:8c:6a:60:4e:72:20:50:a5:9c:82:c4:d8:70:
ba:a7:b5:00:ce:49:c2:03:bd:f1:23:7a:a5:35:8c:0c:16:70:
29:b3:a6:a4:9f:ab:f8:a9:25:51:69:2d:ea:2c:ec:0b:5e:5e:
d1:7f:4a:3b:26:1d:45:02:93:9e:3c:05:ec:df:2f:79:09:1b:
ed:7d:e4:43:27:8f:36:cf:23:49:dd:40:83:99:a5:4d:af:a9:
76:c6:b4:cb:8e:8c:e9:a6:0f:33:e6:9a:5f:98:5b:91:29:8f:
3d:3e:bc:69:3f:a8:04:02:b9:da:45:e1:bb:49:01:69:73:8c:
90:dc:94:4d:3c:11:7e:29:3d:cc:56:0b:b8:99:bd:ac:ac:2b:
d3:85:13:2b:64:5c:79:6f:89:2e:cb:a6:aa:bd:27:6a:6a:c1:
fc:3f:27:03:cf:21:38:c8:17:64:86:61:28:2f:21:c4:d3:d7:
75:76:f7:65:97:62:b3:ce:a7:d2:9d:06:ad:52:58:b4:0f:18:
e9:e7:fd:14:fd:3d:9d:9a:74:19:36:da:c9:72:9a:2b:39:45:
2a:da:b8:7e:fd:11:32:65:7c:e6:7b:3e:03:3f:e0:25:ce:eb:
5f:08:3e:1e:e7:16:7f:81:ac:7a:8a:72:bd:d4:97:e6:ae:22:
ff:41:02:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUH2F17nZZEmS8QCA3FjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDc5YjgzYzUyMGQ3ODQ0NDVjMjQ4MjhiYWI2MzNmMGQ3
MDJjZjMwHhcNMjUxMTA1MDAwMDIwWhcNMjUxMTA2MDAwMDIwWjAzMTEwLwYDVQQD
EygwMTc1YmY4ZGI4ZTRjNzQwZTQ5MDNhMTVkY2QyMDJkODA1NWZlNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bm5sSAj0VHPq9raeOLCRJcsFCJs
3p7ZLd8aRx5cZ0bv677kg85MY2o04C7MuGv5VRwtHZku07+rZfIwGxVAxMqdcQPA
CbIilksCNQaZH/OKKor8TfBCJOClttoK5D5ZDgVKX9iL34tn9EwwR4XVbwfFJ/XR
YzmTuqVEOu0DA0GhAEEQ0riv/yHch5fpgznBe0GcCx/H73klTmFZWLyXYIWsJxuO
8CRVEHWDDC1pc3i1CfJHlSJSinJFBM7g2BHdDb7YYFC4MBwZfidnQ9Z/Dgyu8jcd
LQDV/7ESR0fSlzecUySzzAL2hw3Gjc3PurRbsJZ3gDic0ZpNo7kAhAd6gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF1v4245MdA5JA6FdzSAtgFX+aLMB8GA1UdIwQY
MBaAFPFHm4PFINeERFwkgourYz8NcCzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEt
YmRkNGFmNWYzNWQxLzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEtYmRkNGFmNWYzNWQx
LzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuwQoRSM
amBOciBQpZyCxNhwuqe1AM5JwgO98SN6pTWMDBZwKbOmpJ+r+KklUWkt6izsC15e
0X9KOyYdRQKTnjwF7N8veQkb7X3kQyePNs8jSd1Ag5mlTa+pdsa0y46M6aYPM+aa
X5hbkSmPPT68aT+oBAK52kXhu0kBaXOMkNyUTTwRfik9zFYLuJm9rKwr04UTK2Rc
eW+JLsumqr0namrB/D8nA88hOMgXZIZhKC8hxNPXdXb3ZZdis86n0p0GrVJYtA8Y
6ef9FP09nZp0GTbayXKaKzlFKtq4fv0RMmV85ns+Az/gJc7rXwg+HucWf4Gseopy
vdSX5q4i/0ECnw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:51:10 2025 by rpki-client