Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier: 4Ea73dI5GqyOVU/zMdte9zxXplL+D59Fz/HGsXiCbsM=
Subject key identifier: 2C:0E:5E:59:A9:DE:07:0C:BF:1E:04:44:6A:85:9F:47:13:72:B0:DD
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 019A4F2B834BF35C4586C9EF50949AA9A257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number: 1721
Signing time: Tue 04 Nov 2025 14:00:42 +0000
Manifest this update: Tue 04 Nov 2025 14:00:42 +0000
Manifest next update: Wed 05 Nov 2025 14:00:42 +0000
Files and hashes: 1: 0_EpdViy3Y27mqejc66l1--sjBk.roa (hash: 5pxFxSH3+mNeuLlB3lfUr3Q81qL23oDYt7nqdhFYvqU=)
2: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: SVRfIvuAOpl5Mqtp+VNtUnGwxM5OxOiv9Wdjd8EOKwM=)
3: LcFyOrobUrG-q36ENaVBWkIxyec.roa (hash: aiGhAwWl1vo/+1mZ5amS0ElRqf0Ru78HcL61kI16D7M=)
4: mJjYnvCF0aJWwcOO87dJLulTej8.roa (hash: cyYF0//qn6HDiGNvk9163fm1e6ldk0sS9GYuhZI3HqU=)
5: oOM7QrbyKmK3sX9tSspvcF4LQYc.roa (hash: FI0q4cfrXLcPzOiQWzP6cR+1RIpvdT5irQXBJq3jipE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:83:4b:f3:5c:45:86:c9:ef:50:94:9a:a9:a2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Nov 4 14:00:42 2025 GMT
Not After : Nov 5 14:00:42 2025 GMT
Subject: CN=2c0e5e59a9de070cbf1e04446a859f471372b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:e7:75:95:83:50:bf:d7:80:3b:24:92:42:
d9:32:62:79:bc:65:2b:23:72:27:d8:d0:ca:51:c4:
58:6c:75:a2:a0:c5:5a:b8:f6:d5:65:46:d0:81:40:
0c:55:30:4c:aa:43:5d:75:8f:ed:e8:7b:18:62:97:
08:73:bc:a7:71:9f:8c:a7:0f:0f:b9:9f:9b:c2:b8:
82:69:f2:4b:eb:6d:ae:f1:b9:09:2c:6e:f0:23:4e:
ff:fc:83:d5:9a:e1:16:58:31:4f:c4:0a:19:51:a5:
f7:26:aa:cf:47:75:a9:86:f0:4e:63:75:48:0a:ef:
6b:3d:fa:0f:c3:d5:58:0a:33:66:d1:a7:ef:72:a0:
c3:d5:0f:9b:c1:73:b2:46:95:79:af:86:0b:36:96:
3d:70:b8:db:00:f2:d7:cf:44:6a:98:34:14:8c:94:
6a:a9:2a:b2:82:6e:56:98:bf:02:44:cb:95:66:77:
a6:c1:c6:e9:b3:59:69:64:49:d4:83:80:6d:b8:83:
bb:89:4b:95:f4:9f:48:f9:cc:64:79:7a:8c:e0:f1:
82:59:4d:bd:af:39:af:53:ee:f0:e4:0c:9b:d4:a2:
b5:3b:49:50:63:ca:fd:9c:ff:3e:c3:1f:c2:2d:54:
b2:ea:13:d6:2f:48:61:06:c1:84:72:4f:c4:7d:2b:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0E:5E:59:A9:DE:07:0C:BF:1E:04:44:6A:85:9F:47:13:72:B0:DD
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:bc:ac:74:e9:18:03:2f:a8:bc:15:ae:f9:56:93:62:71:
09:3a:5a:c7:07:97:95:d1:97:ab:13:e0:91:e7:25:7a:6e:f6:
26:e6:98:7e:45:5b:bc:0d:a6:10:eb:d5:57:e0:95:4d:bd:b6:
48:f6:f4:2c:22:f9:5a:6c:76:56:12:15:61:e3:d4:df:d6:ba:
3c:4d:f9:3c:80:88:69:5a:be:a1:5d:cf:c6:ec:1b:13:52:80:
d2:ba:2c:cb:30:d1:a8:fb:a6:31:77:cc:6b:ef:b1:24:75:5b:
a1:7f:08:9e:d1:16:1b:b4:9e:66:05:14:dd:b9:88:84:81:ed:
3b:2f:85:2b:61:ea:c9:1d:aa:38:d4:55:e8:13:27:63:c9:bb:
66:a0:2a:6d:1d:bd:fc:a3:cb:e4:6d:be:39:41:d6:8c:b7:5d:
03:26:b4:91:8c:0e:02:d5:1f:81:33:a4:90:22:99:08:aa:7b:
10:54:a8:f5:28:b6:3b:d8:2c:07:83:d1:02:a1:5d:04:c1:d3:
7b:f5:07:9e:3a:e4:98:39:a6:d6:db:5c:97:52:12:1a:55:4c:
a3:88:ea:17:1d:04:83:93:a1:c0:bf:c3:07:6f:ce:0b:91:46:
2c:c1:c4:d8:6c:63:0e:e8:28:98:ba:96:e6:27:1f:ef:ea:e5:
9a:3e:b5:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK4NL81xFhsnvUJSaqaJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzg2OTU3NzJmMGU2NGYzYjlhMTYyMTczM2NjMDI1MDZm
NzQ3MDIwHhcNMjUxMTA0MTQwMDQyWhcNMjUxMTA1MTQwMDQyWjAzMTEwLwYDVQQD
EygyYzBlNWU1OWE5ZGUwNzBjYmYxZTA0NDQ2YTg1OWY0NzEzNzJiMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw3ndZWDUL/XgDskkkLZMmJ5vGUr
I3In2NDKUcRYbHWioMVauPbVZUbQgUAMVTBMqkNddY/t6HsYYpcIc7yncZ+Mpw8P
uZ+bwriCafJL622u8bkJLG7wI07//IPVmuEWWDFPxAoZUaX3JqrPR3WphvBOY3VI
Cu9rPfoPw9VYCjNm0afvcqDD1Q+bwXOyRpV5r4YLNpY9cLjbAPLXz0RqmDQUjJRq
qSqygm5WmL8CRMuVZnemwcbps1lpZEnUg4BtuIO7iUuV9J9I+cxkeXqM4PGCWU29
rzmvU+7w5Ayb1KK1O0lQY8r9nP8+wx/CLVSy6hPWL0hhBsGEck/EfSuGbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwOXlmp3gcMvx4ERGqFn0cTcrDdMB8GA1UdIwQY
MBaAFCvIaVdy8OZPO5oWIXM8wCUG90cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYmZhOWItMDI5MS00OGUzLTgwNWMt
NDNkNjZhMDMzMWVjLzEvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jYmZhOWItMDI5MS00OGUzLTgwNWMtNDNkNjZhMDMzMWVj
LzEvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVce8rHTp
GAMvqLwVrvlWk2JxCTpaxweXldGXqxPgkeclem72JuaYfkVbvA2mEOvVV+CVTb22
SPb0LCL5Wmx2VhIVYePU39a6PE35PICIaVq+oV3PxuwbE1KA0rosyzDRqPumMXfM
a++xJHVboX8IntEWG7SeZgUU3bmIhIHtOy+FK2HqyR2qONRV6BMnY8m7ZqAqbR29
/KPL5G2+OUHWjLddAya0kYwOAtUfgTOkkCKZCKp7EFSo9Si2O9gsB4PRAqFdBMHT
e/UHnjrkmDmm1ttcl1ISGlVMo4jqFx0Eg5OhwL/DB2/OC5FGLMHE2GxjDugomLqW
5icf7+rlmj61xQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:15 2025 by rpki-client