Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: xF9D5Q3MVRpTXPP1fJks4Dg9CK+38wM/kJ+OC6fQAbw=
Subject key identifier: 26:F5:95:25:8A:18:28:90:67:1F:A6:34:21:24:7E:DC:C0:99:3A:11
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019A56ADCD84939283325B9BC8EB777B2275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 07FC
Signing time: Thu 06 Nov 2025 01:00:22 +0000
Manifest this update: Thu 06 Nov 2025 01:00:22 +0000
Manifest next update: Fri 07 Nov 2025 01:00:22 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: tn1BeSzSx2ZBTuf6O0B9OvEaqP1q4IdBsB59c1FtjmU=)
2: 9BXUrv8yMotCa9wi2rTgBBgI1OA.roa (hash: 4WrQuplF7eXybB0cG6ut10OAMsEsYkXu1xsES1nQaEs=)
3: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ad:cd:84:93:92:83:32:5b:9b:c8:eb:77:7b:22:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Nov 6 01:00:22 2025 GMT
Not After : Nov 7 01:00:22 2025 GMT
Subject: CN=26f595258a182890671fa63421247edcc0993a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:05:d3:81:e8:d0:6f:71:37:b7:74:02:0b:
f3:14:c5:7c:6b:fd:9d:37:68:f7:2c:bb:b7:10:a2:
dc:47:bd:12:e2:94:51:e6:8a:26:b9:1f:68:43:52:
7b:ca:f7:6e:75:99:5f:d2:b6:ed:13:8b:17:ab:a6:
53:61:79:4d:40:e4:04:2a:4e:d1:25:e4:5d:f5:a5:
d9:3c:94:53:52:f0:78:e4:9b:de:f7:ef:19:98:ae:
b9:8d:9f:40:78:fa:a4:c3:8d:cc:b2:eb:97:23:c9:
a0:81:00:94:eb:26:fd:fa:ae:80:1f:f4:64:a5:3f:
95:fa:1e:0b:8b:45:e7:d9:d3:d9:55:97:de:16:42:
7f:56:d1:62:78:d0:e1:1f:86:89:d7:d2:7f:b7:8a:
98:bb:21:2c:cf:04:4a:ad:b7:65:20:6b:b7:d5:f9:
7d:66:e7:5f:34:bc:59:b8:00:eb:d5:ba:98:af:82:
0b:d5:b9:a9:1d:91:03:b5:01:27:97:6f:4f:13:44:
6a:25:22:7f:43:d5:26:93:03:2b:0b:a2:93:19:ef:
a9:4e:4f:90:cc:4b:f0:69:28:c3:42:2d:b5:98:6f:
7c:aa:27:c9:63:86:fa:f7:4c:29:23:fc:a0:76:8a:
e9:ed:b3:1e:63:1a:fb:3f:8b:d0:ad:96:bd:2d:3c:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:95:25:8A:18:28:90:67:1F:A6:34:21:24:7E:DC:C0:99:3A:11
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:29:de:70:40:ad:44:ff:9e:70:02:b1:20:f7:65:84:d9:2a:
6d:51:26:3e:11:cd:75:77:43:47:38:cc:62:c7:62:4a:73:db:
4a:4f:f8:d4:ec:cf:d4:0c:e0:25:60:1d:c3:5b:28:f5:28:80:
e7:3e:7f:67:4d:00:69:5d:d3:e6:9a:b0:2b:61:73:9a:aa:ed:
62:10:20:c8:89:de:38:66:eb:f0:e6:13:76:8c:10:73:ac:9a:
20:cf:f9:5b:b5:b8:58:99:6c:01:f9:53:12:18:ed:13:21:b0:
08:0d:06:01:1f:f3:10:18:84:f1:51:55:85:78:53:90:34:16:
25:e9:bc:fc:64:64:af:6e:58:1c:05:ae:cf:69:e9:7e:05:4d:
03:23:d6:14:e4:e9:11:7a:62:68:56:35:75:ad:46:8b:49:6b:
a7:8c:7c:61:85:36:0b:60:f1:d9:f4:d7:6c:26:3e:b4:a4:6e:
a1:ba:a5:9b:7e:5d:75:1c:82:ae:c1:52:c8:32:3f:5d:1d:72:
f0:10:8a:c5:60:bd:a7:0a:70:7c:50:36:df:d3:81:5c:39:7c:
5b:2f:01:3e:84:34:7b:4f:e5:83:38:99:11:46:50:3b:92:bf:
ba:b4:f3:24:af:f1:54:cb:2d:2b:09:7d:a7:b3:d8:27:6e:6e:
06:59:82:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWrc2Ek5KDMlubyOt3eyJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDljYmJlZmRlNjEyZTYxZTBjZDBmZjBiODcxOTYxY2Jm
Nzk3ZTMwHhcNMjUxMTA2MDEwMDIyWhcNMjUxMTA3MDEwMDIyWjAzMTEwLwYDVQQD
EygyNmY1OTUyNThhMTgyODkwNjcxZmE2MzQyMTI0N2VkY2MwOTkzYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9EF04Ho0G9xN7d0AgvzFMV8a/2d
N2j3LLu3EKLcR70S4pRR5oomuR9oQ1J7yvdudZlf0rbtE4sXq6ZTYXlNQOQEKk7R
JeRd9aXZPJRTUvB45Jve9+8ZmK65jZ9AePqkw43MsuuXI8mggQCU6yb9+q6AH/Rk
pT+V+h4Li0Xn2dPZVZfeFkJ/VtFieNDhH4aJ19J/t4qYuyEszwRKrbdlIGu31fl9
ZudfNLxZuADr1bqYr4IL1bmpHZEDtQEnl29PE0RqJSJ/Q9UmkwMrC6KTGe+pTk+Q
zEvwaSjDQi21mG98qifJY4b690wpI/ygdorp7bMeYxr7P4vQrZa9LTzlIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCb1lSWKGCiQZx+mNCEkftzAmToRMB8GA1UdIwQY
MBaAFPDZy7795hLmHgzQ/wuHGWHL95fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQt
ZjkyOTE1YTk2OGJjLzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQtZjkyOTE1YTk2OGJj
LzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdinecECt
RP+ecAKxIPdlhNkqbVEmPhHNdXdDRzjMYsdiSnPbSk/41OzP1AzgJWAdw1so9SiA
5z5/Z00AaV3T5pqwK2FzmqrtYhAgyIneOGbr8OYTdowQc6yaIM/5W7W4WJlsAflT
EhjtEyGwCA0GAR/zEBiE8VFVhXhTkDQWJem8/GRkr25YHAWuz2npfgVNAyPWFOTp
EXpiaFY1da1Gi0lrp4x8YYU2C2Dx2fTXbCY+tKRuobqlm35ddRyCrsFSyDI/XR1y
8BCKxWC9pwpwfFA239OBXDl8Wy8BPoQ0e0/lgziZEUZQO5K/urTzJK/xVMstKwl9
p7PYJ25uBlmC7A==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:11:14 2025 by rpki-client