Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: FTGNsx6lpOXLIgDNCqCb9lkNJ6h5JpiwkyQ17HxTxVA=
Subject key identifier: F6:92:7F:74:60:33:5D:3C:7E:06:F8:68:FB:D2:FD:EA:3B:F7:66:30
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019A4EF4A3CD0509359785B2399EBCD50427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:46 +0000
Manifest this update: Tue 04 Nov 2025 13:00:46 +0000
Manifest next update: Wed 05 Nov 2025 13:00:46 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: z5xNSUmv3EsPVF+MyNXqQPlf8+vGLHsYevSbxXImp9Q=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a3:cd:05:09:35:97:85:b2:39:9e:bc:d5:04:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Nov 4 13:00:46 2025 GMT
Not After : Nov 5 13:00:46 2025 GMT
Subject: CN=f6927f7460335d3c7e06f868fbd2fdea3bf76630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:a1:6c:bc:7e:a9:42:e2:84:52:6d:5a:99:
24:c6:48:4c:e7:87:f2:a2:18:e3:8b:a6:b3:a8:3e:
d4:92:de:79:30:06:dd:62:cc:dc:09:15:8b:b3:52:
c5:af:66:20:4a:f1:13:6e:bd:2c:0f:71:b5:a8:11:
14:2c:c2:2a:8d:9d:d7:db:17:d4:f9:be:29:f4:b6:
bb:aa:dd:52:ef:c7:87:32:42:aa:ed:8c:ce:70:da:
59:18:d8:3d:78:df:23:af:dc:97:7e:a5:79:0e:d6:
a2:e8:de:ac:08:b5:9e:39:ed:8f:c2:76:8b:c2:9c:
96:5e:97:cf:c0:75:c6:0a:2a:cc:70:a3:dc:e9:93:
ee:4c:1f:24:37:06:2b:82:20:97:56:6b:ea:f9:3e:
46:53:39:0a:95:5d:f3:2b:6c:61:6c:12:ed:6b:45:
d0:c1:b9:ef:bd:ca:bf:f3:e8:14:f1:fc:22:52:15:
a5:21:c7:e8:05:4d:20:2d:41:e1:30:fb:53:05:8c:
75:22:b3:04:9c:15:72:97:e1:95:11:d6:d8:3e:29:
6a:2c:04:ba:2d:5c:cb:ce:af:0c:16:d8:95:06:29:
0e:4b:cc:bb:95:4a:7e:d2:6e:71:cf:b6:e9:fd:ad:
ee:9a:94:d1:4e:55:59:6f:2f:c7:3d:a1:11:04:a2:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:92:7F:74:60:33:5D:3C:7E:06:F8:68:FB:D2:FD:EA:3B:F7:66:30
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:6a:62:1b:46:cd:0d:d2:a5:c5:2f:fe:d5:d7:93:be:4f:
51:0c:12:ea:35:2a:46:53:ca:e4:04:82:bd:48:b4:d8:96:7c:
62:ec:81:91:6a:79:9f:45:1f:c2:e2:8b:da:65:05:6b:67:97:
4c:e1:2c:ba:12:50:88:3b:75:33:24:36:eb:fd:40:9a:3b:5a:
70:ca:5f:9b:a7:b4:d8:2c:be:db:99:87:86:c6:96:1d:92:4a:
f8:78:97:09:ec:61:55:5a:f1:e8:79:1d:27:2d:01:e4:32:29:
5c:41:02:85:66:94:b6:f7:63:ed:46:26:ba:44:1a:af:ca:e1:
89:27:3c:92:12:dc:6c:b0:45:10:3e:c2:84:b7:e8:cf:b5:f0:
64:08:40:de:f5:3e:f8:33:5a:05:9b:5b:a5:3a:6c:fe:88:45:
3a:b1:14:7d:62:06:5d:09:96:48:3b:b7:1b:6d:15:d1:21:a1:
69:a0:87:09:62:f4:16:42:e6:c5:76:29:8a:d3:29:d4:a5:c3:
d4:a6:b5:1f:74:45:cb:fc:dc:f4:78:00:00:d8:7d:43:d0:b1:
11:95:2c:02:55:86:5c:03:a6:7a:ea:83:44:84:b5:de:50:61:
a7:f1:f0:78:09:f8:14:71:0e:71:32:9c:52:8f:13:ca:19:a3:
a6:e5:25:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KPNBQk1l4WyOZ681QQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNTZhOWVkYjJkOWFkZTIwNGQ4MjMxM2NjZTk4YjY2MjNh
OWQ4YWMwHhcNMjUxMTA0MTMwMDQ2WhcNMjUxMTA1MTMwMDQ2WjAzMTEwLwYDVQQD
EyhmNjkyN2Y3NDYwMzM1ZDNjN2UwNmY4NjhmYmQyZmRlYTNiZjc2NjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKyhbLx+qULihFJtWpkkxkhM54fy
ohjji6azqD7Ukt55MAbdYszcCRWLs1LFr2YgSvETbr0sD3G1qBEULMIqjZ3X2xfU
+b4p9La7qt1S78eHMkKq7YzOcNpZGNg9eN8jr9yXfqV5Dtai6N6sCLWeOe2PwnaL
wpyWXpfPwHXGCirMcKPc6ZPuTB8kNwYrgiCXVmvq+T5GUzkKlV3zK2xhbBLta0XQ
wbnvvcq/8+gU8fwiUhWlIcfoBU0gLUHhMPtTBYx1IrMEnBVyl+GVEdbYPilqLAS6
LVzLzq8MFtiVBikOS8y7lUp+0m5xz7bp/a3umpTRTlVZby/HPaERBKIRRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaSf3RgM108fgb4aPvS/eo792YwMB8GA1UdIwQY
MBaAFPJWqe2y2a3iBNgjE8zpi2YjqdisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMt
OTEwN2M5MTJkN2Q4LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMtOTEwN2M5MTJkN2Q4
LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCJqYhtG
zQ3SpcUv/tXXk75PUQwS6jUqRlPK5ASCvUi02JZ8YuyBkWp5n0UfwuKL2mUFa2eX
TOEsuhJQiDt1MyQ26/1AmjtacMpfm6e02Cy+25mHhsaWHZJK+HiXCexhVVrx6Hkd
Jy0B5DIpXEEChWaUtvdj7UYmukQar8rhiSc8khLcbLBFED7ChLfoz7XwZAhA3vU+
+DNaBZtbpTps/ohFOrEUfWIGXQmWSDu3G20V0SGhaaCHCWL0FkLmxXYpitMp1KXD
1Ka1H3RFy/zc9HgAANh9Q9CxEZUsAlWGXAOmeuqDRIS13lBhp/HweAn4FHEOcTKc
Uo8TyhmjpuUlSA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:44 2025 by rpki-client