Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: xOrzDUHPsxXsIt1AYk4Jn6nvtOpaIPI1/6wDE9owgls=
Subject key identifier: F3:80:58:9D:89:EB:6F:9E:DF:39:E4:49:F0:38:6D:51:4F:CE:9F:E5
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019A5007676D438844721F6ECB544F7B594A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0AFC
Signing time: Tue 04 Nov 2025 18:00:53 +0000
Manifest this update: Tue 04 Nov 2025 18:00:53 +0000
Manifest next update: Wed 05 Nov 2025 18:00:53 +0000
Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: JO/8th6z6TBn/InGH0rOmDa/b7jtUiDr+e6c3iqOZhc=)
2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:67:6d:43:88:44:72:1f:6e:cb:54:4f:7b:59:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Nov 4 18:00:53 2025 GMT
Not After : Nov 5 18:00:53 2025 GMT
Subject: CN=f380589d89eb6f9edf39e449f0386d514fce9fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:48:72:be:11:84:e9:76:46:ab:4d:26:70:
78:d3:9c:90:3c:74:90:3c:39:ed:02:47:43:9b:3f:
87:70:a4:cc:55:50:b0:fb:3d:7f:68:7f:9b:2d:70:
fb:c9:32:c1:af:8c:0f:26:4e:e4:e6:04:5f:87:43:
d6:bc:9d:ae:7a:0c:41:64:90:00:a0:32:74:90:4e:
1e:d1:60:2b:1d:04:48:47:ec:cf:5e:0f:6b:70:c5:
85:dc:d2:30:4f:86:0f:82:0b:0c:04:48:fb:55:d9:
9d:90:30:4b:98:96:4a:ad:22:91:17:20:e5:f8:b9:
5c:10:c7:b2:79:f5:a4:e7:8f:51:1f:ae:bd:f0:db:
fc:8b:18:10:c9:c0:da:e4:49:e7:54:07:f6:5f:61:
d9:bd:6e:d8:73:fe:33:08:23:b0:69:f0:0d:83:2f:
65:48:b5:3e:b0:5f:3c:2c:a4:e0:04:d0:19:a6:0c:
ee:b2:39:62:e6:76:8e:62:71:12:67:0c:3a:13:a6:
59:e0:18:c8:f2:d8:0e:1f:ff:f0:6b:3d:99:5e:b1:
0d:1b:6c:b3:40:a9:ac:54:b7:2b:3a:15:00:38:7f:
08:98:de:55:1d:dc:b9:e5:57:61:94:1b:15:3f:e6:
1c:2d:de:a2:69:03:bb:b5:56:b4:56:9a:75:ef:43:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:58:9D:89:EB:6F:9E:DF:39:E4:49:F0:38:6D:51:4F:CE:9F:E5
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3e:be:be:94:6b:de:5d:b2:f6:ec:2c:f8:a3:06:a4:f6:31:
be:ee:19:67:8d:6b:7a:35:68:a5:92:42:06:a6:fc:28:b9:6b:
45:a5:bd:e9:20:d6:07:6e:6c:7f:57:de:17:a8:48:79:15:22:
2a:66:98:43:40:3e:47:86:13:a3:b1:30:bc:e8:5f:6c:d4:b8:
b3:7a:79:f0:39:65:78:63:f9:30:d8:43:0e:55:d6:ce:14:27:
9c:98:22:44:87:9e:70:b1:53:07:60:8d:c7:2a:12:89:5d:b2:
c1:f5:13:b4:86:d0:06:40:0e:d1:de:37:f5:9b:f7:93:8a:3b:
08:c3:65:41:8d:48:e2:51:5a:80:43:b5:97:f2:ce:45:92:37:
82:54:54:6c:18:81:82:5d:1d:0d:f6:0c:8e:f7:1b:1a:b5:fb:
f1:5f:ae:b1:26:13:86:01:fe:db:de:8c:cf:10:d5:9e:e3:d1:
ca:7d:6b:38:c8:1c:7e:53:95:f0:e3:83:57:f5:75:ce:e0:b0:
08:3e:d7:aa:52:96:43:55:9e:77:4e:cd:12:f7:fa:c9:c2:32:
4c:fa:0c:30:f8:dc:f7:52:fe:8c:ab:8d:f1:0f:b9:65:3f:ca:
a8:68:24:4f:2f:96:b7:bd:64:f3:4b:54:2b:dd:f5:aa:ed:28:
dd:58:28:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB2dtQ4hEch9uy1RPe1lKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy
Njc4MWIwHhcNMjUxMTA0MTgwMDUzWhcNMjUxMTA1MTgwMDUzWjAzMTEwLwYDVQQD
EyhmMzgwNTg5ZDg5ZWI2ZjllZGYzOWU0NDlmMDM4NmQ1MTRmY2U5ZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKJIcr4RhOl2RqtNJnB405yQPHSQ
PDntAkdDmz+HcKTMVVCw+z1/aH+bLXD7yTLBr4wPJk7k5gRfh0PWvJ2uegxBZJAA
oDJ0kE4e0WArHQRIR+zPXg9rcMWF3NIwT4YPggsMBEj7VdmdkDBLmJZKrSKRFyDl
+LlcEMeyefWk549RH6698Nv8ixgQycDa5EnnVAf2X2HZvW7Yc/4zCCOwafANgy9l
SLU+sF88LKTgBNAZpgzusjli5naOYnESZww6E6ZZ4BjI8tgOH//waz2ZXrENG2yz
QKmsVLcrOhUAOH8ImN5VHdy55VdhlBsVP+YcLd6iaQO7tVa0Vpp170NbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOAWJ2J62+e3znkSfA4bVFPzp/lMB8GA1UdIwQY
MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt
ZmEyNTY2ZTU4Mjg2LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2
LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj6+vpRr
3l2y9uws+KMGpPYxvu4ZZ41rejVopZJCBqb8KLlrRaW96SDWB25sf1feF6hIeRUi
KmaYQ0A+R4YTo7EwvOhfbNS4s3p58DlleGP5MNhDDlXWzhQnnJgiRIeecLFTB2CN
xyoSiV2ywfUTtIbQBkAO0d439Zv3k4o7CMNlQY1I4lFagEO1l/LORZI3glRUbBiB
gl0dDfYMjvcbGrX78V+usSYThgH+296MzxDVnuPRyn1rOMgcflOV8OODV/V1zuCw
CD7XqlKWQ1Wed07NEvf6ycIyTPoMMPjc91L+jKuN8Q+5ZT/KqGgkTy+Wt71k80tU
K931qu0o3VgoXQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:20 2025 by rpki-client