Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier: 7DnUEterLeVP582CsMOQO6+2dVfKAo5mV4NzUhJw5uQ=
Subject key identifier: 7B:76:DA:B0:DC:5C:1D:EC:C0:9F:CA:FF:1D:48:90:F4:82:7D:09:8F
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 019A533F7887F59D59CC5DF3DBE94A0F45F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 09:00:59 +0000
Manifest this update: Wed 05 Nov 2025 09:00:59 +0000
Manifest next update: Thu 06 Nov 2025 09:00:59 +0000
Files and hashes: 1: 8GfQJwSm8WOL4eiiEZHqevjvttA.roa (hash: 3bVJWVWZRhXVWLoMKn0YWpgHV5qRAlMtfEADmaxXPBY=)
2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: 3Ls3s+zi4dqUO9RXa6jaclMQ0xKUcRjwdJlb7rJ3twI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:78:87:f5:9d:59:cc:5d:f3:db:e9:4a:0f:45:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Nov 5 09:00:59 2025 GMT
Not After : Nov 6 09:00:59 2025 GMT
Subject: CN=7b76dab0dc5c1decc09fcaff1d4890f4827d098f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:7f:47:d1:f3:33:69:71:0a:24:46:10:f9:
f0:4f:d4:be:9a:45:3d:82:f8:93:fa:48:09:7f:b3:
63:b8:81:85:aa:87:94:16:30:e3:6a:8d:a8:f6:25:
f5:b8:2e:f0:71:0b:2d:80:c0:14:58:3d:c1:f0:92:
ae:fd:c0:35:5a:53:1d:36:58:67:53:90:a1:82:e8:
4b:aa:7f:98:a5:12:cb:37:89:2b:51:73:9f:b1:20:
de:97:0d:ef:dd:2e:56:24:1f:3f:c6:84:c2:bd:3d:
8f:da:3e:b9:76:49:5f:35:02:c8:7c:77:0c:24:93:
98:30:1c:88:b1:c6:db:57:85:de:b0:8a:dd:41:e4:
e5:16:57:79:d0:a7:0c:01:b4:3f:26:16:a8:39:c0:
48:64:aa:d8:cf:25:2c:b3:70:d1:a0:b2:8a:8b:60:
d1:87:9e:c6:30:00:33:de:76:1d:41:3e:28:d3:09:
72:b5:0f:fa:f7:e3:f0:61:a5:3c:17:13:8a:1a:c3:
7f:51:0f:7b:66:53:17:e3:9d:97:47:da:f6:68:83:
e4:31:38:ea:e0:42:ce:ac:8e:d9:2d:8b:5b:b7:c8:
25:1c:1d:90:54:08:e4:22:3b:8d:6f:f3:5b:bf:74:
28:00:30:df:6f:03:92:fc:3e:c1:e6:b7:16:55:2a:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:76:DA:B0:DC:5C:1D:EC:C0:9F:CA:FF:1D:48:90:F4:82:7D:09:8F
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:5e:87:9d:1a:b5:c2:cb:e2:38:bd:26:ec:5b:12:10:0b:
8a:18:4a:3a:64:60:c7:a2:25:6a:22:77:4b:44:c7:8a:71:00:
8c:8a:8f:23:5b:a6:d4:df:8b:23:98:67:95:58:ee:7b:68:55:
09:41:b4:88:9c:ca:a5:84:3d:45:f5:44:d4:af:2e:38:ea:84:
70:ee:fa:1a:c9:aa:84:17:61:e1:f6:7a:c4:96:16:29:fd:48:
24:a4:a7:14:e8:70:9b:24:59:c0:88:b4:aa:05:2c:a5:73:ac:
3d:09:81:e2:8a:92:9d:c1:d4:76:25:ac:35:63:42:e0:a0:c8:
e4:82:20:77:c9:7b:34:3b:4a:c5:68:11:f6:a1:04:07:11:4f:
57:1c:52:a0:1a:50:cd:4e:f7:05:f6:0b:54:85:93:e3:ef:f5:
43:9f:0f:da:19:98:e3:5f:29:f8:9e:74:ed:08:0e:e1:ae:c8:
48:93:ce:c4:5e:a5:58:5c:82:ac:7a:a3:f1:36:a7:9e:18:3b:
c1:1a:a3:1f:28:ea:0b:01:e7:02:86:7d:ed:44:5d:34:82:1a:
a7:88:df:59:d4:ca:3e:be:00:51:ee:c6:fe:08:b8:86:b8:29:
12:3d:51:64:01:de:91:da:ba:dc:98:ad:fa:e2:56:0d:48:0d:
bc:b1:c9:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP3iH9Z1ZzF3z2+lKD0X5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjdiYzI0NWU3NmJhNWU1YzFmYzVlOWVlNTViNGI0OGRl
N2Y4NWEwHhcNMjUxMTA1MDkwMDU5WhcNMjUxMTA2MDkwMDU5WjAzMTEwLwYDVQQD
Eyg3Yjc2ZGFiMGRjNWMxZGVjYzA5ZmNhZmYxZDQ4OTBmNDgyN2QwOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml1/R9HzM2lxCiRGEPnwT9S+mkU9
gviT+kgJf7NjuIGFqoeUFjDjao2o9iX1uC7wcQstgMAUWD3B8JKu/cA1WlMdNlhn
U5ChguhLqn+YpRLLN4krUXOfsSDelw3v3S5WJB8/xoTCvT2P2j65dklfNQLIfHcM
JJOYMByIscbbV4XesIrdQeTlFld50KcMAbQ/JhaoOcBIZKrYzyUss3DRoLKKi2DR
h57GMAAz3nYdQT4o0wlytQ/69+PwYaU8FxOKGsN/UQ97ZlMX452XR9r2aIPkMTjq
4ELOrI7ZLYtbt8glHB2QVAjkIjuNb/Nbv3QoADDfbwOS/D7B5rcWVSpo7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt22rDcXB3swJ/K/x1IkPSCfQmPMB8GA1UdIwQY
MBaAFKwnvCRedrpeXB/F6e5VtLSN5/haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTkt
YmIwNjcxZDhlYTMyLzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTktYmIwNjcxZDhlYTMy
LzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/xeh50a
tcLL4ji9JuxbEhALihhKOmRgx6IlaiJ3S0THinEAjIqPI1um1N+LI5hnlVjue2hV
CUG0iJzKpYQ9RfVE1K8uOOqEcO76GsmqhBdh4fZ6xJYWKf1IJKSnFOhwmyRZwIi0
qgUspXOsPQmB4oqSncHUdiWsNWNC4KDI5IIgd8l7NDtKxWgR9qEEBxFPVxxSoBpQ
zU73BfYLVIWT4+/1Q58P2hmY418p+J507QgO4a7ISJPOxF6lWFyCrHqj8Tannhg7
wRqjHyjqCwHnAoZ97URdNIIap4jfWdTKPr4AUe7G/gi4hrgpEj1RZAHekdq63Jit
+uJWDUgNvLHJXQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:52 2025 by rpki-client