Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: /cRhX3AGoO+ILjea496nHRJLbdNqonpRgfblgHRUssg=
Subject key identifier: F6:F1:FA:49:0C:54:99:FE:AA:E6:13:7B:99:45:60:05:F0:67:78:CB
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019A4E4F7F5F9EF579479442C7A168315B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0B47
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: tJT3RufgNueM17AimnS1SyEqNz8vDhpefCdQjLWhSt8=)
2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7f:5f:9e:f5:79:47:94:42:c7:a1:68:31:5b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=f6f1fa490c5499feaae6137b99456005f06778cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:93:bd:8f:4e:07:e6:cb:27:cc:d8:48:74:
33:08:e7:30:10:55:7c:08:fb:f4:93:c2:aa:69:73:
2e:4d:8c:13:83:c4:3f:67:b8:26:76:3e:5f:10:d9:
5c:c2:84:e6:74:a9:2a:0f:3b:4c:5d:d0:46:b5:33:
62:06:95:b1:1d:af:a6:90:cb:c7:2f:92:02:b2:b5:
49:b6:99:2f:fc:c4:2a:d0:ec:f5:16:9b:d4:4b:33:
35:c6:9b:b1:e0:f3:a4:59:94:4a:c2:65:63:13:89:
fa:2b:3e:9f:dd:03:7b:fc:cf:ca:ba:8a:4b:eb:e3:
85:bb:71:07:8c:4b:d6:ac:06:29:e4:20:38:d9:9c:
39:c4:b0:a1:d7:1b:93:46:f6:22:7f:57:e0:00:c5:
75:95:d3:3e:dd:4d:14:e0:ce:9b:1e:4e:87:34:81:
7d:3b:7d:71:e7:cb:36:50:12:d7:6d:a3:7c:f0:de:
b3:30:51:7a:ea:0a:34:56:d8:a0:86:fb:71:14:8d:
7d:26:51:8e:db:f0:e7:cb:08:92:d0:3f:5f:b0:d5:
b5:24:b3:3e:64:19:74:24:3c:00:3a:16:bf:69:79:
c9:46:98:51:9c:f8:24:43:d4:f4:46:0f:6f:78:67:
b5:79:1d:b4:5a:f5:9a:bc:a1:c4:63:6d:48:d8:bd:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F1:FA:49:0C:54:99:FE:AA:E6:13:7B:99:45:60:05:F0:67:78:CB
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:28:89:af:65:eb:fc:b4:d1:5c:15:5a:d8:4d:1e:95:69:d1:
b8:22:61:98:0d:02:75:68:1e:00:ad:c8:c9:68:3b:b8:ec:76:
30:71:f1:c1:e6:3a:d2:3e:a8:d8:a0:c8:25:fc:74:91:ba:bc:
92:2f:2c:93:d4:d0:1b:2d:b8:57:d2:cb:3a:cf:6b:88:72:d1:
e5:19:96:60:3a:ac:3e:77:5a:19:45:4b:c5:9b:a8:95:8d:4a:
c4:8e:95:e9:1a:4d:b6:40:fa:43:ce:02:f5:0b:e2:3c:27:15:
13:27:6c:69:89:db:a2:f7:29:36:0b:78:c5:79:9a:d9:fe:45:
41:0f:df:68:02:a8:3a:3f:f6:93:44:d7:c2:c8:2b:65:37:1c:
93:76:a4:f7:75:db:f4:15:cb:91:75:b4:92:f1:e6:88:f9:68:
80:07:ad:6d:c2:9f:e9:1b:e4:f0:d8:5e:07:2f:88:15:4e:33:
47:5f:c0:61:a3:7f:be:ea:06:b8:0b:5a:c7:f2:18:24:9f:01:
01:f3:75:95:3b:e7:74:5f:37:d2:02:a1:e5:0f:66:cc:f1:b8:
90:81:43:8a:0a:29:51:83:dd:a0:ff:3e:ab:0f:34:d9:b3:d3:
e7:19:44:ce:d7:c7:f8:98:b6:97:80:e2:60:7d:eb:1e:ab:c7:
0c:bc:22:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT39fnvV5R5RCx6FoMVsZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl
YTdhODkwHhcNMjUxMTA0MTAwMDIzWhcNMjUxMTA1MTAwMDIzWjAzMTEwLwYDVQQD
EyhmNmYxZmE0OTBjNTQ5OWZlYWFlNjEzN2I5OTQ1NjAwNWYwNjc3OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOqTvY9OB+bLJ8zYSHQzCOcwEFV8
CPv0k8KqaXMuTYwTg8Q/Z7gmdj5fENlcwoTmdKkqDztMXdBGtTNiBpWxHa+mkMvH
L5ICsrVJtpkv/MQq0Oz1FpvUSzM1xpux4POkWZRKwmVjE4n6Kz6f3QN7/M/KuopL
6+OFu3EHjEvWrAYp5CA42Zw5xLCh1xuTRvYif1fgAMV1ldM+3U0U4M6bHk6HNIF9
O31x58s2UBLXbaN88N6zMFF66go0VtighvtxFI19JlGO2/DnywiS0D9fsNW1JLM+
ZBl0JDwAOha/aXnJRphRnPgkQ9T0Rg9veGe1eR20WvWavKHEY21I2L3NsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbx+kkMVJn+quYTe5lFYAXwZ3jLMB8GA1UdIwQY
MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt
OGRmNzFiYTAzOTE1LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1
LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiiJr2Xr
/LTRXBVa2E0elWnRuCJhmA0CdWgeAK3IyWg7uOx2MHHxweY60j6o2KDIJfx0kbq8
ki8sk9TQGy24V9LLOs9riHLR5RmWYDqsPndaGUVLxZuolY1KxI6V6RpNtkD6Q84C
9QviPCcVEydsaYnbovcpNgt4xXma2f5FQQ/faAKoOj/2k0TXwsgrZTcck3ak93Xb
9BXLkXW0kvHmiPlogAetbcKf6Rvk8NheBy+IFU4zR1/AYaN/vuoGuAtax/IYJJ8B
AfN1lTvndF830gKh5Q9mzPG4kIFDigopUYPdoP8+qw802bPT5xlEztfH+Ji2l4Di
YH3rHqvHDLwiUg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:19 2025 by rpki-client