Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: RrtgP4tjMh0auxiBejBr89xm9SxPQeAvVwh29ObVznU=
Subject key identifier: 88:DA:98:4B:A8:77:63:7F:92:81:5C:C0:80:C6:95:02:F2:10:9D:AE
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019A5074A7AB17A79BFFFCCBDA67A5B560F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0808
Signing time: Tue 04 Nov 2025 20:00:13 +0000
Manifest this update: Tue 04 Nov 2025 20:00:13 +0000
Manifest next update: Wed 05 Nov 2025 20:00:13 +0000
Files and hashes: 1: 02srA_dodlsqHDgp--vASVvWX9E.roa (hash: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=)
2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: keMUI7cb91Cf01obFvwDFBQpX7qIBDupmpAVPwykx2c=)
3: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=)
4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a7:ab:17:a7:9b:ff:fc:cb:da:67:a5:b5:60:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Nov 4 20:00:13 2025 GMT
Not After : Nov 5 20:00:13 2025 GMT
Subject: CN=88da984ba877637f92815cc080c69502f2109dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:3a:1e:78:d3:77:c3:6d:57:bb:53:4d:5d:
30:41:ba:f2:bf:84:95:06:db:23:e6:c5:9b:9f:48:
c3:9d:9b:28:b4:17:a5:0c:34:07:44:c7:1a:74:f4:
c4:cd:6e:34:0f:ca:50:06:0e:45:08:e6:4e:d9:39:
b7:f4:ac:2f:0e:bc:67:4f:2a:83:3a:eb:ea:07:42:
97:76:14:f3:46:35:6a:5c:cf:be:13:88:47:85:1d:
25:29:bc:c4:b3:d7:42:9d:b7:e4:27:08:cf:a5:a5:
2b:08:1c:d8:28:41:17:ef:9c:49:f6:38:a2:3d:7e:
7f:09:49:c0:de:c1:e8:e8:ab:6f:99:9c:a2:49:00:
da:78:2f:76:6b:24:bb:f7:88:74:ee:5d:ce:17:a6:
4c:4c:1f:7f:e1:ff:ca:02:9c:6b:43:d9:7d:ad:80:
2d:54:56:5d:9c:ec:c6:8d:f3:c6:63:4d:c0:85:e6:
fe:94:1a:96:fa:93:86:e0:c3:a4:81:12:f9:d5:7b:
65:9d:96:5e:26:4b:2f:8d:8c:ff:ac:92:8d:8e:89:
95:4a:9f:61:78:e2:4a:c9:5b:e5:90:9b:c5:93:1e:
c5:96:d2:36:fe:f1:4d:51:85:38:f5:fa:e9:49:5f:
91:4c:29:90:f0:81:01:73:be:9d:d2:63:a8:63:7a:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DA:98:4B:A8:77:63:7F:92:81:5C:C0:80:C6:95:02:F2:10:9D:AE
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:42:61:2d:ee:51:e4:75:31:93:76:c9:d0:88:15:5d:c7:8d:
02:22:92:cc:12:60:cb:4d:9a:f4:f6:be:d6:b3:f3:3a:8d:47:
01:3a:07:6c:8f:c8:a9:8b:63:bd:4f:ab:01:49:85:1d:d8:fc:
e1:54:17:b4:57:ef:bf:3e:32:b6:97:9b:a1:9f:ea:9c:6b:15:
6d:99:ec:74:95:09:13:ed:1f:fc:0b:1b:e2:89:d4:23:50:43:
8c:cc:80:0d:0f:30:56:2d:30:14:1f:14:d4:5a:c3:26:53:5e:
db:45:44:64:32:fb:2d:09:73:f6:52:d5:77:6a:19:99:02:71:
83:6f:f0:e9:62:b4:70:60:31:9f:3f:c5:ec:c9:71:3f:36:a8:
6b:c4:b5:e7:91:f9:e1:27:b3:ca:dc:38:9f:51:7b:92:ee:17:
2f:8c:db:48:43:a1:3d:55:db:b0:12:5c:47:5a:19:29:8d:53:
41:eb:02:2a:ac:2c:df:ec:95:19:b6:4a:bd:f1:2b:63:d8:72:
61:84:34:66:1a:5a:23:b4:4b:90:97:e4:dc:c9:29:2c:e3:3c:
79:a5:f8:e7:fa:7b:2a:df:62:00:f2:f1:9f:fc:b7:94:ba:1c:
c7:74:c2:99:97:2b:a6:b5:70:2b:a1:f9:50:e0:d8:2d:f9:11:
1d:7b:06:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdKerF6eb//zL2meltWDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0
MzdiOTQwHhcNMjUxMTA0MjAwMDEzWhcNMjUxMTA1MjAwMDEzWjAzMTEwLwYDVQQD
Eyg4OGRhOTg0YmE4Nzc2MzdmOTI4MTVjYzA4MGM2OTUwMmYyMTA5ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKI6HnjTd8NtV7tTTV0wQbryv4SV
Btsj5sWbn0jDnZsotBelDDQHRMcadPTEzW40D8pQBg5FCOZO2Tm39KwvDrxnTyqD
OuvqB0KXdhTzRjVqXM++E4hHhR0lKbzEs9dCnbfkJwjPpaUrCBzYKEEX75xJ9jii
PX5/CUnA3sHo6KtvmZyiSQDaeC92ayS794h07l3OF6ZMTB9/4f/KApxrQ9l9rYAt
VFZdnOzGjfPGY03Aheb+lBqW+pOG4MOkgRL51XtlnZZeJksvjYz/rJKNjomVSp9h
eOJKyVvlkJvFkx7FltI2/vFNUYU49frpSV+RTCmQ8IEBc76d0mOoY3pz1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjamEuod2N/koFcwIDGlQLyEJ2uMB8GA1UdIwQY
MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt
NTgwNWQzZjNkYmIyLzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy
LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEJhLe5R
5HUxk3bJ0IgVXceNAiKSzBJgy02a9Pa+1rPzOo1HAToHbI/IqYtjvU+rAUmFHdj8
4VQXtFfvvz4ytpeboZ/qnGsVbZnsdJUJE+0f/Asb4onUI1BDjMyADQ8wVi0wFB8U
1FrDJlNe20VEZDL7LQlz9lLVd2oZmQJxg2/w6WK0cGAxnz/F7MlxPzaoa8S155H5
4Sezytw4n1F7ku4XL4zbSEOhPVXbsBJcR1oZKY1TQesCKqws3+yVGbZKvfErY9hy
YYQ0ZhpaI7RLkJfk3MkpLOM8eaX45/p7Kt9iAPLxn/y3lLocx3TCmZcrprVwK6H5
UODYLfkRHXsG2A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:31:15 2025 by rpki-client