Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: r+iJYxzVtuodApVWBLhZH+xOBmrOid8m4Gpvy8epW/8=
Subject key identifier: 9F:CE:98:DC:1D:A2:EC:9F:A3:DC:8A:CE:65:BB:A0:29:58:32:F7:B0
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 019A4D744FCD2EE5435AB66F3882A22267EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0A02
Signing time: Tue 04 Nov 2025 06:00:59 +0000
Manifest this update: Tue 04 Nov 2025 06:00:59 +0000
Manifest next update: Wed 05 Nov 2025 06:00:59 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: mw7t19/BFL7YXJleBLeczciHoy6tunk0qgbbtOpdKSQ=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4f:cd:2e:e5:43:5a:b6:6f:38:82:a2:22:67:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Nov 4 06:00:59 2025 GMT
Not After : Nov 5 06:00:59 2025 GMT
Subject: CN=9fce98dc1da2ec9fa3dc8ace65bba0295832f7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:f5:58:be:14:72:31:3a:fa:c9:e2:bd:35:
31:e2:c9:8d:2a:9f:21:59:f8:8f:81:12:fa:91:79:
9d:8d:63:b2:d4:be:37:20:35:d9:1d:d0:ca:d8:bf:
d7:46:77:fe:9c:e1:4c:f2:e4:91:b8:f8:64:5f:83:
c1:46:a8:08:fb:3c:ec:33:73:12:1b:7c:57:30:cd:
b2:dc:8f:10:84:1e:0d:03:dc:47:4b:d2:28:e8:89:
f3:de:83:0e:36:89:a1:e3:02:7a:3c:85:ce:9f:a4:
e5:9f:b4:88:aa:f9:64:60:c4:79:fa:fa:33:88:e2:
2b:9c:2e:da:95:8d:8a:ab:ce:a4:d1:b0:b2:5c:ff:
94:35:e0:f4:e2:66:55:3a:d1:9e:2c:d6:cf:97:66:
3c:36:79:59:05:6e:9e:a8:ad:5f:6b:12:0c:db:78:
26:9c:d8:1b:1d:a7:fc:78:c3:5e:78:47:b3:9b:f9:
8e:dc:fc:dd:6f:13:51:78:78:41:9c:91:e9:84:05:
65:65:54:13:92:cc:69:3d:50:30:cf:9d:bc:32:df:
3a:3f:00:f2:3c:81:4f:8c:d0:bc:81:ff:f7:3e:7b:
14:0c:a9:70:bb:a2:77:fe:67:97:26:5f:78:22:c5:
05:00:42:ea:1d:a8:9a:f1:71:9a:dc:9d:9f:43:14:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CE:98:DC:1D:A2:EC:9F:A3:DC:8A:CE:65:BB:A0:29:58:32:F7:B0
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9f:04:2a:96:2b:60:d0:16:c8:7b:b8:22:45:8d:a5:c8:d2:
02:bf:99:d9:ac:98:ea:8b:0d:ed:9f:a9:dc:07:e5:6f:16:63:
65:69:0c:12:ae:2b:cd:f0:c9:a2:1c:73:8e:48:d9:cd:c7:bd:
21:e9:14:a1:95:0d:82:bd:fe:77:f8:4f:30:03:10:65:c3:4d:
96:f0:c5:e0:34:1b:48:18:17:e5:2f:e1:8f:96:0c:16:c2:f7:
65:48:3a:ab:38:f3:63:39:d3:b3:f2:57:f7:6a:8c:6c:21:5a:
b8:1d:fb:4d:3f:70:d9:9a:ca:79:3b:13:39:79:93:32:50:fc:
d5:e3:1d:1a:84:3d:34:52:04:d1:9d:b1:c1:6b:46:06:06:55:
de:b8:7d:48:38:63:0d:e5:28:e3:19:d9:9b:02:f1:19:26:c4:
12:a5:bb:20:a0:a5:91:cd:13:83:58:61:d9:21:8e:96:75:5b:
4e:bd:93:7e:24:9f:74:12:32:7f:d6:e6:6f:a1:d5:d8:ee:e0:
64:21:d7:b5:10:e8:11:64:58:7c:c5:1c:9a:65:e7:74:f9:72:
46:d8:d2:58:32:c5:7a:52:a8:50:f5:69:5b:db:e7:e4:e3:d4:
41:1f:75:b1:66:2d:52:48:37:72:bd:a7:30:3b:dc:a5:66:fd:
fa:ce:08:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdE/NLuVDWrZvOIKiImfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YmYwN2YwNGNjNzZhOTBhZDk3ZjlmMTc0OWZhYmNmMDVj
MzVkNjIwHhcNMjUxMTA0MDYwMDU5WhcNMjUxMTA1MDYwMDU5WjAzMTEwLwYDVQQD
Eyg5ZmNlOThkYzFkYTJlYzlmYTNkYzhhY2U2NWJiYTAyOTU4MzJmN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSj1WL4UcjE6+snivTUx4smNKp8h
WfiPgRL6kXmdjWOy1L43IDXZHdDK2L/XRnf+nOFM8uSRuPhkX4PBRqgI+zzsM3MS
G3xXMM2y3I8QhB4NA9xHS9Io6Inz3oMONomh4wJ6PIXOn6Tln7SIqvlkYMR5+voz
iOIrnC7alY2Kq86k0bCyXP+UNeD04mZVOtGeLNbPl2Y8NnlZBW6eqK1faxIM23gm
nNgbHaf8eMNeeEezm/mO3PzdbxNReHhBnJHphAVlZVQTksxpPVAwz528Mt86PwDy
PIFPjNC8gf/3PnsUDKlwu6J3/meXJl94IsUFAELqHaia8XGa3J2fQxRmXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/OmNwdouyfo9yKzmW7oClYMvewMB8GA1UdIwQY
MBaAFHS/B/BMx2qQrZf58XSfq88Fw11iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgt
ZWMwODQxMzdlMjQyLzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgtZWMwODQxMzdlMjQy
LzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ8EKpYr
YNAWyHu4IkWNpcjSAr+Z2ayY6osN7Z+p3AflbxZjZWkMEq4rzfDJohxzjkjZzce9
IekUoZUNgr3+d/hPMAMQZcNNlvDF4DQbSBgX5S/hj5YMFsL3ZUg6qzjzYznTs/JX
92qMbCFauB37TT9w2ZrKeTsTOXmTMlD81eMdGoQ9NFIE0Z2xwWtGBgZV3rh9SDhj
DeUo4xnZmwLxGSbEEqW7IKClkc0Tg1hh2SGOlnVbTr2TfiSfdBIyf9bmb6HV2O7g
ZCHXtRDoEWRYfMUcmmXndPlyRtjSWDLFelKoUPVpW9vn5OPUQR91sWYtUkg3cr2n
MDvcpWb9+s4ICQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:47 2025 by rpki-client