Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: 1VREnf7tdAp0wYxiwCFfp6yakyypoloPrSdMN6Ndduo=
Subject key identifier: E4:18:4D:D5:22:95:1B:D6:8C:5E:AB:9A:CD:3D:4B:E3:9E:29:06:BB
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019A50E3C79F41CDDFFBBD3F8B2C17215CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0E05
Signing time: Tue 04 Nov 2025 22:01:36 +0000
Manifest this update: Tue 04 Nov 2025 22:01:36 +0000
Manifest next update: Wed 05 Nov 2025 22:01:36 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: Iy0rO9Cf6ZYKrPtBUbVcieg8oLpNYggRcfILESpC4qc=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:c7:9f:41:cd:df:fb:bd:3f:8b:2c:17:21:5c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Nov 4 22:01:36 2025 GMT
Not After : Nov 5 22:01:36 2025 GMT
Subject: CN=e4184dd522951bd68c5eab9acd3d4be39e2906bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:b0:52:2b:e6:16:1e:8a:8a:50:d9:d2:df:
9b:ef:7f:05:45:23:af:2d:8f:00:b8:a2:d4:07:db:
86:95:38:03:60:c4:b1:3f:8f:88:92:43:2f:8c:df:
05:53:68:e6:d4:33:58:31:22:78:ac:ca:4a:86:07:
85:9f:af:e7:35:5d:01:e1:39:d2:9e:af:73:1e:f0:
e1:d3:45:1a:36:a0:89:d4:7e:73:b6:ad:3c:d2:18:
44:7c:c6:91:cc:1a:db:0a:96:f1:2c:30:d7:1b:4f:
11:b9:22:bb:b3:ad:8e:0a:bf:76:66:d3:db:59:f2:
37:6b:a8:ac:ee:7f:b0:18:e1:7e:a1:13:e9:72:89:
c2:e3:9b:d9:a7:9a:d4:b1:90:c1:7f:3f:50:bc:91:
98:70:3f:0d:05:b6:76:6a:bb:42:39:9c:6e:1b:0a:
7a:32:75:f0:6e:1a:3b:2d:07:6b:c6:6e:fe:f0:9e:
cb:b9:cf:68:50:7f:4f:38:9f:77:d6:e0:68:62:03:
79:ef:c4:5b:b2:40:8f:81:31:6c:df:38:36:5e:46:
2f:bf:54:63:83:2e:aa:08:eb:a9:2d:12:51:21:75:
a4:03:0b:46:80:cb:09:30:5c:bb:dc:99:ab:d8:1f:
6e:6f:51:ea:63:e2:97:5c:8b:54:74:79:f1:71:1a:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:18:4D:D5:22:95:1B:D6:8C:5E:AB:9A:CD:3D:4B:E3:9E:29:06:BB
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:30:99:3c:ce:e4:7e:b4:e6:5d:ec:00:e6:64:93:38:3b:
d5:de:04:64:57:a0:54:39:c5:2e:8f:f2:6e:23:7a:bb:07:7f:
d1:57:00:87:60:0a:69:66:86:9b:5e:1d:90:38:26:a1:ff:76:
7d:a4:45:77:3c:77:06:93:f8:8a:97:c3:dd:19:4b:8e:de:55:
4a:97:85:a7:85:a4:fb:51:61:22:15:88:8c:b1:9c:37:4f:21:
52:29:3b:18:68:2a:a7:a5:e1:e4:e7:35:4c:f8:01:f2:15:ce:
2c:0d:e5:62:14:0b:db:1e:32:76:53:49:8c:81:bd:25:c8:a2:
c9:c9:06:fe:a3:35:35:0b:cc:1f:80:26:12:5d:da:96:bc:bc:
18:1c:7c:92:f2:2e:83:ee:f0:0c:31:93:cd:96:90:cb:fb:d0:
db:16:ef:71:8e:99:42:f9:0b:fc:11:fb:17:55:3c:30:e7:bc:
13:16:a3:b3:34:cc:73:5c:0f:0b:ef:b5:fd:bb:f0:83:5a:9c:
57:fb:46:ab:97:af:5b:e2:2e:27:2a:1c:a4:43:20:a1:b0:75:
da:7f:c0:ca:c7:8b:08:8c:13:3d:3f:5a:28:20:98:70:21:06:
e3:0e:c3:c1:7d:95:37:8a:78:d4:6b:da:52:91:a7:83:6c:02:
c5:3d:ef:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ48efQc3f+70/iywXIVysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl
ODI2ZDQwHhcNMjUxMTA0MjIwMTM2WhcNMjUxMTA1MjIwMTM2WjAzMTEwLwYDVQQD
EyhlNDE4NGRkNTIyOTUxYmQ2OGM1ZWFiOWFjZDNkNGJlMzllMjkwNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8GwUivmFh6KilDZ0t+b738FRSOv
LY8AuKLUB9uGlTgDYMSxP4+IkkMvjN8FU2jm1DNYMSJ4rMpKhgeFn6/nNV0B4TnS
nq9zHvDh00UaNqCJ1H5ztq080hhEfMaRzBrbCpbxLDDXG08RuSK7s62OCr92ZtPb
WfI3a6is7n+wGOF+oRPpconC45vZp5rUsZDBfz9QvJGYcD8NBbZ2artCOZxuGwp6
MnXwbho7LQdrxm7+8J7Luc9oUH9POJ931uBoYgN578RbskCPgTFs3zg2XkYvv1Rj
gy6qCOupLRJRIXWkAwtGgMsJMFy73Jmr2B9ub1HqY+KXXItUdHnxcRo1mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQYTdUilRvWjF6rms09S+OeKQa7MB8GA1UdIwQY
MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt
M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0
LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbQwmTzO
5H605l3sAOZkkzg71d4EZFegVDnFLo/ybiN6uwd/0VcAh2AKaWaGm14dkDgmof92
faRFdzx3BpP4ipfD3RlLjt5VSpeFp4Wk+1FhIhWIjLGcN08hUik7GGgqp6Xh5Oc1
TPgB8hXOLA3lYhQL2x4ydlNJjIG9JciiyckG/qM1NQvMH4AmEl3alry8GBx8kvIu
g+7wDDGTzZaQy/vQ2xbvcY6ZQvkL/BH7F1U8MOe8ExajszTMc1wPC++1/bvwg1qc
V/tGq5evW+IuJyocpEMgobB12n/AyseLCIwTPT9aKCCYcCEG4w7DwX2VN4p41Gva
UpGng2wCxT3v7Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:06 2025 by rpki-client