Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: c6kEL4c29psX2b+ALlNYqlrq9rs9MhDepkg6+rCK4WI=
Subject key identifier: 88:52:19:F0:FC:3E:D7:77:1B:0D:ED:A5:17:D8:2A:81:03:8F:1B:AB
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 019A4EF5177D8CD07CE357943F5417BEFEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 13C8
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: oG7Es6phpm24qlEtxfd0OQ8QzIFkBMS6d/UGpDgc5Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:17:7d:8c:d0:7c:e3:57:94:3f:54:17:be:fe:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=885219f0fc3ed7771b0deda517d82a81038f1bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:1b:5f:73:ed:00:e0:48:ef:24:12:c0:b8:
99:21:80:80:68:4b:c2:e7:a9:a7:00:67:68:32:4d:
28:0b:f1:09:58:b1:17:b5:9b:c9:96:f8:5e:3a:ad:
1b:97:93:08:66:18:7b:23:61:5b:8d:76:95:12:7f:
d8:dd:0d:87:7c:60:c7:73:45:a2:fc:c0:2b:7e:1b:
50:18:9c:fc:a4:21:69:11:4d:91:75:96:b8:9d:9e:
ed:e9:5c:ad:04:ee:e5:62:83:89:bd:ac:bd:a4:49:
1d:3e:39:bb:9b:75:eb:cc:5f:88:85:36:c2:30:49:
bf:b2:81:22:50:09:c9:1d:b5:c4:9b:a5:93:11:b1:
48:3d:b4:55:b7:87:69:f8:77:2b:5b:f5:b2:42:a1:
82:62:e2:40:99:c8:6a:ef:d2:95:de:68:f2:a6:45:
57:ba:b7:b2:8b:37:1d:34:af:0c:ba:35:bd:e9:fe:
05:3c:51:06:35:4d:8d:50:67:ac:e8:0b:d2:2a:13:
6b:4f:fa:e0:a7:c1:a4:17:30:af:5f:63:f2:c9:6c:
0b:bb:b5:e0:ac:65:cf:23:57:a0:e3:05:f9:89:ab:
4e:44:bc:f2:53:c5:14:fe:bd:45:b9:f3:38:d3:ae:
c0:4c:61:3d:0b:de:dd:48:99:ba:df:b2:29:ca:20:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:19:F0:FC:3E:D7:77:1B:0D:ED:A5:17:D8:2A:81:03:8F:1B:AB
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:39:d3:0d:ad:b3:ba:fa:96:53:d2:14:3e:d8:f7:08:d0:
85:5b:a5:43:72:74:af:d1:b0:2d:ea:18:45:b4:10:de:6c:27:
30:25:52:40:3a:03:7d:e7:9f:d1:2a:0d:f3:93:e3:4d:0a:60:
fc:c3:64:ef:e3:8f:45:f2:7a:ef:86:31:4a:38:eb:72:82:5a:
04:2d:1f:2c:08:41:8a:a9:92:b3:d2:89:ca:96:8f:55:a5:29:
a1:d5:46:ad:86:19:a0:e8:d5:e9:48:ff:e0:05:f1:57:94:5b:
e0:00:68:71:25:41:89:ed:83:1d:34:94:e8:f0:61:ea:c5:a1:
01:6d:0e:66:21:69:7d:a6:2d:61:91:e6:95:db:33:3b:4e:b4:
c3:b1:cc:64:37:b2:ef:8d:4b:87:41:0f:04:63:46:68:28:99:
d0:d3:9a:fd:b7:df:99:9c:6d:a9:df:ea:c3:7b:b0:25:39:d9:
66:a7:17:0f:7b:46:48:0d:3f:f1:3b:da:e0:e1:67:7b:93:18:
ad:ac:7a:ac:60:99:39:9c:a2:23:c1:70:06:b2:13:ca:93:69:
92:55:b3:6f:60:8d:60:51:db:82:88:9c:54:af:6c:54:b9:0f:
7d:60:f5:e6:cc:23:4c:16:dd:c4:b0:90:57:ec:3e:c5:b7:3e:
60:e8:68:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Rd9jNB841eUP1QXvv7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz
NDUyZDkwHhcNMjUxMTA0MTMwMTE2WhcNMjUxMTA1MTMwMTE2WjAzMTEwLwYDVQQD
Eyg4ODUyMTlmMGZjM2VkNzc3MWIwZGVkYTUxN2Q4MmE4MTAzOGYxYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkscbX3PtAOBI7yQSwLiZIYCAaEvC
56mnAGdoMk0oC/EJWLEXtZvJlvheOq0bl5MIZhh7I2FbjXaVEn/Y3Q2HfGDHc0Wi
/MArfhtQGJz8pCFpEU2RdZa4nZ7t6VytBO7lYoOJvay9pEkdPjm7m3XrzF+IhTbC
MEm/soEiUAnJHbXEm6WTEbFIPbRVt4dp+HcrW/WyQqGCYuJAmchq79KV3mjypkVX
ureyizcdNK8MujW96f4FPFEGNU2NUGes6AvSKhNrT/rgp8GkFzCvX2PyyWwLu7Xg
rGXPI1eg4wX5iatORLzyU8UU/r1FufM4067ATGE9C97dSJm637IpyiDTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhSGfD8Ptd3Gw3tpRfYKoEDjxurMB8GA1UdIwQY
MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt
ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj
LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk850w2t
s7r6llPSFD7Y9wjQhVulQ3J0r9GwLeoYRbQQ3mwnMCVSQDoDfeef0SoN85PjTQpg
/MNk7+OPRfJ674YxSjjrcoJaBC0fLAhBiqmSs9KJypaPVaUpodVGrYYZoOjV6Uj/
4AXxV5Rb4ABocSVBie2DHTSU6PBh6sWhAW0OZiFpfaYtYZHmldszO060w7HMZDey
741Lh0EPBGNGaCiZ0NOa/bffmZxtqd/qw3uwJTnZZqcXD3tGSA0/8Tva4OFne5MY
rax6rGCZOZyiI8FwBrITypNpklWzb2CNYFHbgoicVK9sVLkPfWD15swjTBbdxLCQ
V+w+xbc+YOhoww==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:36 2025 by rpki-client