Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: HCMwFkv/8J6QW1unGtoJhXePPAFmR/yArfk3owkDC9Y=
Subject key identifier: 8E:89:F5:4E:9E:35:4B:8D:BD:7B:54:9D:07:D7:E8:43:C5:E1:0F:E3
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019A4E18F001FD18D73CCDC0A3B0217CEE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 128E
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: +maVE3GKCOJim4zeHU4F9pUb9+mUMO/VeffZt5cYjJs=)
2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f0:01:fd:18:d7:3c:cd:c0:a3:b0:21:7c:ee:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=8e89f54e9e354b8dbd7b549d07d7e843c5e10fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:57:04:03:e9:78:71:74:c5:5d:a2:2e:0e:
81:1b:ea:1a:25:ad:4e:4f:ef:af:37:24:13:9f:43:
73:2f:18:38:fe:24:f1:a2:f0:13:86:34:90:f9:8b:
21:d9:bb:c6:54:17:0d:6a:35:f4:b2:52:66:5b:08:
2f:5b:54:b1:29:58:b7:57:bf:5c:02:49:c8:1d:d6:
29:e0:97:8b:40:4b:c9:5f:cc:11:ac:4d:bc:93:53:
5a:b2:7a:9c:8f:a2:d4:dd:4b:35:ee:99:70:4f:81:
11:0c:03:64:42:a4:d7:af:52:e9:f8:7e:90:9e:75:
e3:82:f2:8d:b8:8a:db:66:69:51:23:a5:b0:80:cf:
87:37:d6:b5:1a:88:4a:00:8b:c5:89:ed:3b:8b:4d:
46:9b:7d:b5:96:5d:75:a1:50:f3:7f:d2:ae:6c:28:
e5:e6:ef:80:8a:1c:13:8b:75:ef:ac:34:01:ad:53:
24:da:4a:33:0f:63:68:b4:ec:a1:61:ea:2f:80:eb:
85:e4:62:59:9f:85:89:a5:87:5f:47:d1:a9:64:9a:
eb:4a:ea:65:f1:8f:4e:a6:29:b8:92:e9:66:5d:50:
35:eb:96:3f:88:89:91:9d:45:f5:e3:40:16:14:43:
6a:2f:f0:dc:1c:dc:e6:d6:96:36:e1:74:3d:37:af:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:F5:4E:9E:35:4B:8D:BD:7B:54:9D:07:D7:E8:43:C5:E1:0F:E3
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0e:a3:d6:4a:4d:af:75:77:ed:83:5e:74:94:2c:bf:e5:f0:
fd:4e:26:3d:1c:e9:b2:28:77:4d:72:cf:82:e4:45:6b:e2:d7:
5c:4f:85:99:96:98:97:0e:d5:48:bc:e6:59:20:87:23:89:26:
6c:28:be:d7:15:6c:d1:5e:67:25:05:b6:29:d8:ed:26:fe:fe:
e7:e2:d2:97:cd:fb:6a:50:32:27:63:d0:31:60:9d:2d:bf:a7:
a6:f5:64:c3:a3:d8:ad:56:32:d2:d6:bb:32:6d:36:83:bb:49:
f1:a8:71:64:c1:96:7d:c3:46:95:cb:8b:a1:a3:0b:b5:98:2f:
b6:4c:e3:6c:cc:0f:d5:6f:4d:e6:83:ea:55:7a:da:0a:53:28:
4b:1d:47:e2:fa:c9:d4:14:b2:69:2b:6c:e3:f8:fa:34:62:f1:
ec:b3:86:47:83:a7:09:7d:20:bc:af:43:38:68:2a:8d:f3:08:
a1:b1:54:5b:20:ce:a8:cd:9d:87:32:cd:da:eb:cf:0e:9e:9a:
68:32:63:44:6a:a4:c0:78:ef:14:6b:ae:34:94:cc:f6:54:7d:
0f:b6:f9:02:41:59:df:7c:33:2a:0a:1f:ae:3c:75:ef:6d:af:
b1:11:4e:27:5a:82:4c:88:32:30:60:a3:cd:38:6b:4c:fc:22:
62:dc:5c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGPAB/RjXPM3Ao7AhfO5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj
NDE0YzcwHhcNMjUxMTA0MDkwMDQ4WhcNMjUxMTA1MDkwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZTg5ZjU0ZTllMzU0YjhkYmQ3YjU0OWQwN2Q3ZTg0M2M1ZTEwZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNJXBAPpeHF0xV2iLg6BG+oaJa1O
T++vNyQTn0NzLxg4/iTxovAThjSQ+Ysh2bvGVBcNajX0slJmWwgvW1SxKVi3V79c
AknIHdYp4JeLQEvJX8wRrE28k1Nasnqcj6LU3Us17plwT4ERDANkQqTXr1Lp+H6Q
nnXjgvKNuIrbZmlRI6WwgM+HN9a1GohKAIvFie07i01Gm321ll11oVDzf9KubCjl
5u+AihwTi3XvrDQBrVMk2kozD2NotOyhYeovgOuF5GJZn4WJpYdfR9GpZJrrSupl
8Y9Opim4kulmXVA165Y/iImRnUX140AWFENqL/DcHNzm1pY24XQ9N69nFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6J9U6eNUuNvXtUnQfX6EPF4Q/jMB8GA1UdIwQY
MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt
NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3
LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAg6j1kpN
r3V37YNedJQsv+Xw/U4mPRzpsih3TXLPguRFa+LXXE+FmZaYlw7VSLzmWSCHI4km
bCi+1xVs0V5nJQW2KdjtJv7+5+LSl837alAyJ2PQMWCdLb+npvVkw6PYrVYy0ta7
Mm02g7tJ8ahxZMGWfcNGlcuLoaMLtZgvtkzjbMwP1W9N5oPqVXraClMoSx1H4vrJ
1BSyaSts4/j6NGLx7LOGR4OnCX0gvK9DOGgqjfMIobFUWyDOqM2dhzLN2uvPDp6a
aDJjRGqkwHjvFGuuNJTM9lR9D7b5AkFZ33wzKgofrjx1722vsRFOJ1qCTIgyMGCj
zThrTPwiYtxcrw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:41 2025 by rpki-client