Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: wDkoU2AvOhg06iKlFoIvLW0wBJx5IZXBsCaZhzxTQ8o=
Subject key identifier: 5B:CB:50:B6:FE:BE:79:A5:9D:C4:E6:1F:16:CD:BC:24:6A:61:D9:CA
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 019A53762A008CF1D31805586F43EF0FCEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 10:00:44 +0000
Manifest this update: Wed 05 Nov 2025 10:00:44 +0000
Manifest next update: Thu 06 Nov 2025 10:00:44 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: skh+ZC+bGX4PHy6pbbsK08jTPrVjdC39P2yXUG/9RAU=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:2a:00:8c:f1:d3:18:05:58:6f:43:ef:0f:ce:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Nov 5 10:00:44 2025 GMT
Not After : Nov 6 10:00:44 2025 GMT
Subject: CN=5bcb50b6febe79a59dc4e61f16cdbc246a61d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:d5:f8:69:48:bb:1e:a1:c4:f3:32:3e:68:
16:16:fa:b0:33:9d:a5:f6:91:ca:26:08:5a:3b:de:
05:07:6d:26:5b:9c:10:b2:f3:e2:4f:b8:8b:2f:c3:
eb:39:5b:32:93:d0:94:5f:61:b3:8b:12:92:a5:8d:
f2:56:a3:2c:51:a0:16:50:28:51:ff:90:ae:4b:92:
ce:33:ca:94:20:26:32:4f:44:02:4e:c6:50:71:cc:
4e:3b:82:eb:db:68:9c:08:75:35:6b:eb:a9:c8:1d:
76:2e:ba:83:82:ee:18:ea:2e:84:b7:c3:ac:97:2d:
b0:28:7e:fb:55:6d:a1:2d:c3:85:93:4f:57:17:07:
d7:a1:c1:41:16:53:04:bf:f9:73:2a:c0:7d:5e:6c:
a0:00:85:9b:b1:61:b0:07:f2:77:6a:45:ca:7d:49:
14:5d:1c:e5:47:2c:e7:bf:d9:a6:3a:b9:0c:d9:1d:
23:3b:4f:b5:be:90:e5:61:6f:db:2a:18:59:aa:98:
f5:38:0a:18:25:82:64:53:cc:a7:d7:0a:6b:36:50:
43:f2:f9:ef:c3:4d:6f:b8:35:2f:93:fe:38:2b:8c:
8e:91:d5:8c:69:f9:bd:d7:62:20:2a:89:c1:a9:f8:
3a:cc:d2:8d:14:e5:bd:63:b6:d7:5b:07:de:a6:93:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:50:B6:FE:BE:79:A5:9D:C4:E6:1F:16:CD:BC:24:6A:61:D9:CA
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:14:96:46:ca:80:62:3c:0c:af:52:c0:80:f1:33:fd:68:cb:
80:b3:86:cd:d8:a5:8c:37:57:11:72:7c:5f:7f:b3:83:0a:b9:
9d:a5:be:e2:98:45:d3:80:b8:6c:c1:4a:56:a7:ba:6a:58:38:
1b:7f:ce:9d:b6:2b:66:81:23:05:14:5d:dd:f0:02:02:94:8e:
5a:b0:fc:3e:09:98:84:3e:29:09:b1:24:6b:78:03:5a:66:7d:
06:ad:be:3f:b3:68:8d:71:69:eb:48:94:ef:3f:fe:bf:1e:fe:
d6:8c:2f:6b:91:6d:6f:19:0c:ca:e0:c8:de:82:e6:e2:63:ab:
3f:07:b7:36:70:05:38:de:fa:33:a9:4e:0b:a4:73:73:37:4c:
db:55:52:54:6b:3b:f5:c6:a9:34:d7:ed:3e:42:5d:92:c3:09:
79:9a:7b:30:db:54:4c:88:9e:15:75:6d:f4:d8:06:8e:d8:c6:
b8:ba:8e:9f:bc:a6:1a:ca:10:f8:c2:c2:d0:2a:06:4c:3a:cd:
7b:8d:82:cd:9e:1a:07:1a:85:9e:48:98:f6:83:a2:73:2d:26:
07:4d:4c:de:5f:12:99:29:5f:93:cd:f7:c8:00:72:05:1e:66:
ae:49:e0:6d:5f:96:32:d9:26:f8:d9:53:cd:66:63:f1:ab:a4:
6f:93:01:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdioAjPHTGAVYb0PvD872MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh
YWI2OWEwHhcNMjUxMTA1MTAwMDQ0WhcNMjUxMTA2MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg1YmNiNTBiNmZlYmU3OWE1OWRjNGU2MWYxNmNkYmMyNDZhNjFkOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAombV+GlIux6hxPMyPmgWFvqwM52l
9pHKJghaO94FB20mW5wQsvPiT7iLL8PrOVsyk9CUX2GzixKSpY3yVqMsUaAWUChR
/5CuS5LOM8qUICYyT0QCTsZQccxOO4Lr22icCHU1a+upyB12LrqDgu4Y6i6Et8Os
ly2wKH77VW2hLcOFk09XFwfXocFBFlMEv/lzKsB9XmygAIWbsWGwB/J3akXKfUkU
XRzlRyznv9mmOrkM2R0jO0+1vpDlYW/bKhhZqpj1OAoYJYJkU8yn1wprNlBD8vnv
w01vuDUvk/44K4yOkdWMafm912IgKonBqfg6zNKNFOW9Y7bXWwfeppMb/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvLULb+vnmlncTmHxbNvCRqYdnKMB8GA1UdIwQY
MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt
OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm
LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphSWRsqA
YjwMr1LAgPEz/WjLgLOGzdiljDdXEXJ8X3+zgwq5naW+4phF04C4bMFKVqe6alg4
G3/OnbYrZoEjBRRd3fACApSOWrD8PgmYhD4pCbEka3gDWmZ9Bq2+P7NojXFp60iU
7z/+vx7+1owva5FtbxkMyuDI3oLm4mOrPwe3NnAFON76M6lOC6RzczdM21VSVGs7
9capNNftPkJdksMJeZp7MNtUTIieFXVt9NgGjtjGuLqOn7ymGsoQ+MLC0CoGTDrN
e42CzZ4aBxqFnkiY9oOicy0mB01M3l8SmSlfk833yAByBR5mrkngbV+WMtkm+NlT
zWZj8aukb5MB8Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:22:28 2025 by rpki-client