Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: 9V6ZYiVQdH0k469Lh0kv+A2SmmdeVDAp4bD6NDtuVsc=
Subject key identifier: BD:75:2A:1C:F3:DF:21:9E:6E:A6:5C:19:07:44:F9:AC:61:31:76:A5
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 019A4D3CE5BD461C8DFD90AD4860536D9B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 1072
Signing time: Tue 04 Nov 2025 05:00:27 +0000
Manifest this update: Tue 04 Nov 2025 05:00:27 +0000
Manifest next update: Wed 05 Nov 2025 05:00:27 +0000
Files and hashes: 1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=)
2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: BfUBz31a08jA4Wo2qq2iklhW6cR1q2DU9GY4T33jxzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e5:bd:46:1c:8d:fd:90:ad:48:60:53:6d:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Nov 4 05:00:27 2025 GMT
Not After : Nov 5 05:00:27 2025 GMT
Subject: CN=bd752a1cf3df219e6ea65c190744f9ac613176a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:1b:74:68:55:f5:28:ba:98:3e:3b:56:62:
68:be:83:8d:8e:c1:f9:33:95:74:b5:6e:97:61:9e:
26:ea:36:1e:8f:f8:29:97:07:90:68:d5:6f:9e:5d:
36:83:3f:b1:b0:31:4d:01:62:0e:55:3b:cb:37:32:
b8:52:49:ca:c0:4c:7a:25:01:81:e7:91:86:58:e2:
6b:55:c3:33:4e:13:2f:ca:31:cc:70:b8:34:2f:a6:
87:af:04:da:8a:58:bd:e7:43:d2:3b:5f:5f:22:f5:
0f:2d:f2:61:62:fa:f8:60:ff:cf:ae:8b:b5:67:f2:
03:4d:b0:0c:4d:0b:10:ed:93:d4:5f:2a:d0:a1:8a:
1a:5c:99:11:e4:82:2b:c7:5a:99:84:2e:75:da:ff:
b1:0e:9a:45:c5:c6:70:dd:72:88:5e:ea:b4:7c:83:
de:40:38:30:b4:64:80:ae:66:e2:63:71:a9:bd:94:
3f:b6:85:ce:f4:38:81:d5:7f:4b:e0:f3:63:ef:3e:
b9:53:53:20:3a:97:f2:fd:b1:29:55:14:80:0c:08:
5f:bd:31:18:68:2e:1b:9b:a7:bc:0b:5e:f8:24:90:
19:60:e9:83:0c:8c:67:c1:91:98:4f:b4:2f:35:9d:
49:32:e5:cb:a8:80:06:9b:dd:01:dd:a8:ab:a4:a2:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:2A:1C:F3:DF:21:9E:6E:A6:5C:19:07:44:F9:AC:61:31:76:A5
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d1:c6:76:8e:9d:73:89:ca:7b:49:03:b1:6a:ad:b1:18:8c:
d6:a7:7d:ab:aa:bb:a4:ef:f3:fd:ba:e3:f0:20:dd:fd:fc:26:
f2:12:4d:6e:2e:c3:99:ac:0f:80:79:12:02:11:67:7c:41:fc:
48:04:f7:1c:81:3a:f0:a2:a9:7e:61:9b:ad:37:b5:92:c1:fd:
42:41:6c:1e:37:6b:c2:ce:7e:d1:89:e2:42:1a:5d:61:f9:1a:
dd:4c:d5:43:dc:d4:b1:0d:83:b1:ed:2e:72:b9:68:66:18:8f:
71:59:72:54:30:b4:df:fe:ba:9a:5b:6f:c6:21:5f:5c:e0:15:
f8:c1:14:e6:4e:77:7e:a8:06:c9:10:bd:44:6d:32:4f:b3:ac:
88:11:3f:0e:ad:89:9b:bf:12:dd:51:e2:97:a8:59:df:3e:16:
0a:8e:71:11:bc:4e:5a:66:2a:a5:b6:d4:94:b8:47:e6:f6:08:
d8:7d:60:87:db:6d:03:16:86:77:8c:71:2e:4f:0e:ab:10:be:
74:df:85:fe:3d:93:31:24:63:d5:a8:41:ed:0f:97:5c:6e:86:
c3:27:b6:75:f8:4e:cc:d8:64:2b:63:62:2f:8c:28:48:fa:2b:
18:bd:12:89:b7:92:e9:bb:28:8f:79:1c:ed:e1:0b:7d:87:c5:
19:c7:35:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPOW9RhyN/ZCtSGBTbZuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm
ODJlOTQwHhcNMjUxMTA0MDUwMDI3WhcNMjUxMTA1MDUwMDI3WjAzMTEwLwYDVQQD
EyhiZDc1MmExY2YzZGYyMTllNmVhNjVjMTkwNzQ0ZjlhYzYxMzE3NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojAbdGhV9Si6mD47VmJovoONjsH5
M5V0tW6XYZ4m6jYej/gplweQaNVvnl02gz+xsDFNAWIOVTvLNzK4UknKwEx6JQGB
55GGWOJrVcMzThMvyjHMcLg0L6aHrwTaili950PSO19fIvUPLfJhYvr4YP/Prou1
Z/IDTbAMTQsQ7ZPUXyrQoYoaXJkR5IIrx1qZhC512v+xDppFxcZw3XKIXuq0fIPe
QDgwtGSArmbiY3GpvZQ/toXO9DiB1X9L4PNj7z65U1MgOpfy/bEpVRSADAhfvTEY
aC4bm6e8C174JJAZYOmDDIxnwZGYT7QvNZ1JMuXLqIAGm90B3airpKLVEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL11Khzz3yGebqZcGQdE+axhMXalMB8GA1UdIwQY
MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt
YmE2MjZkMzI1ZDU5LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5
LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdHGdo6d
c4nKe0kDsWqtsRiM1qd9q6q7pO/z/brj8CDd/fwm8hJNbi7DmawPgHkSAhFnfEH8
SAT3HIE68KKpfmGbrTe1ksH9QkFsHjdrws5+0YniQhpdYfka3UzVQ9zUsQ2Dse0u
crloZhiPcVlyVDC03/66mltvxiFfXOAV+MEU5k53fqgGyRC9RG0yT7OsiBE/Dq2J
m78S3VHil6hZ3z4WCo5xEbxOWmYqpbbUlLhH5vYI2H1gh9ttAxaGd4xxLk8OqxC+
dN+F/j2TMSRj1ahB7Q+XXG6Gwye2dfhOzNhkK2NiL4woSPorGL0SibeS6bsoj3kc
7eELfYfFGcc1Xw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:05 2025 by rpki-client