Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: a10bWFi3Bt86QGdNPnxPVVArcYMtU804OkUOAbmxJOs=
Subject key identifier: 7B:25:5E:5B:FD:A9:6C:16:4C:2B:86:6C:FF:7B:88:06:3F:D0:9C:60
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019A500738E1DEEF6A0736CBD08A8539C880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0E9B
Signing time: Tue 04 Nov 2025 18:00:41 +0000
Manifest this update: Tue 04 Nov 2025 18:00:41 +0000
Manifest next update: Wed 05 Nov 2025 18:00:41 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: Y4q9/nKZLS0Gk2T2pFtpI0V1XlZZCos32TigXSlstPk=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:38:e1:de:ef:6a:07:36:cb:d0:8a:85:39:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Nov 4 18:00:41 2025 GMT
Not After : Nov 5 18:00:41 2025 GMT
Subject: CN=7b255e5bfda96c164c2b866cff7b88063fd09c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:9f:39:3d:d2:10:1f:b8:bb:ad:e1:37:74:
26:46:78:02:3f:d2:fb:23:07:c9:94:6b:39:cf:9a:
01:19:b7:b1:00:f5:47:90:bb:49:47:e2:a2:6a:a0:
db:08:60:5f:2e:33:3d:d0:25:f8:ff:48:4a:15:fb:
b3:4a:30:62:76:4d:0a:c9:98:ee:e9:65:e2:a9:5f:
32:29:c5:f0:5f:3d:6f:fd:78:00:36:bd:66:7f:2f:
a6:44:0b:b3:2c:07:a9:74:d6:41:03:67:59:1b:b2:
60:76:22:c5:82:40:47:7b:f0:40:95:5b:76:af:75:
db:75:45:d0:e6:aa:82:d1:44:66:4b:9a:24:e5:8b:
d7:3a:21:52:a1:7b:f8:49:19:9f:7b:b3:70:70:14:
ba:8c:62:8c:f6:52:d9:63:f9:a9:d8:51:86:87:c8:
bd:2e:80:88:4a:ef:86:ca:26:ec:8d:e1:eb:20:a9:
93:fa:77:a0:95:c3:1b:06:4c:bc:6c:68:6f:f2:f4:
48:8b:53:b6:2f:9d:ba:08:88:e4:c1:90:c9:9d:25:
ef:26:db:c3:de:5d:1a:06:40:cd:d5:9e:ea:bd:8c:
53:46:b5:96:34:c5:07:6b:b0:45:a6:db:03:ea:ec:
cf:b9:b4:f4:43:59:da:74:f2:4e:67:8c:fe:65:dc:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:5E:5B:FD:A9:6C:16:4C:2B:86:6C:FF:7B:88:06:3F:D0:9C:60
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2c:84:86:2b:5f:c3:e7:a0:a0:a5:ba:fa:bc:94:d3:e9:5c:
e0:93:05:21:4f:37:d8:16:64:a6:71:f0:20:81:60:02:ce:6a:
20:cd:dd:6a:b2:96:9a:c5:7e:c6:a1:eb:03:3c:3e:27:cb:6e:
90:1d:2a:e0:d6:1b:84:7a:64:c6:93:22:05:83:60:69:4e:32:
c1:95:4b:c9:8c:b6:83:da:52:32:9d:ad:c1:1d:8e:4a:78:33:
20:89:4e:de:7d:c6:fd:e7:0f:51:f5:18:c9:73:f6:f8:08:da:
5d:6f:50:bf:58:16:b0:9f:6c:23:ab:1c:1c:76:80:cf:d1:b9:
fb:97:c0:59:ee:dc:ac:6a:04:bb:78:f1:9f:e7:b0:9e:13:3d:
ac:c8:8b:17:08:ec:d5:95:d0:d1:ab:a5:36:50:5f:07:5b:d3:
73:4e:65:ca:f7:a7:f8:99:71:20:ce:79:bc:04:f5:d3:bc:bc:
68:a6:71:3b:ca:46:ef:52:8f:91:f4:66:41:f0:73:19:d0:fb:
2f:c5:55:54:f5:d9:5c:e4:5d:d7:2a:81:88:df:70:70:97:34:
fe:28:d8:eb:e8:e6:76:26:af:ee:d3:24:76:6b:00:65:6c:ca:
fe:cd:6d:5b:de:f1:e1:0e:dc:88:5c:fd:19:b5:ba:27:9a:19:
4e:0e:29:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBzjh3u9qBzbL0IqFOciAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1
Y2MxMDMwHhcNMjUxMTA0MTgwMDQxWhcNMjUxMTA1MTgwMDQxWjAzMTEwLwYDVQQD
Eyg3YjI1NWU1YmZkYTk2YzE2NGMyYjg2NmNmZjdiODgwNjNmZDA5YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFGfOT3SEB+4u63hN3QmRngCP9L7
IwfJlGs5z5oBGbexAPVHkLtJR+KiaqDbCGBfLjM90CX4/0hKFfuzSjBidk0KyZju
6WXiqV8yKcXwXz1v/XgANr1mfy+mRAuzLAepdNZBA2dZG7JgdiLFgkBHe/BAlVt2
r3XbdUXQ5qqC0URmS5ok5YvXOiFSoXv4SRmfe7NwcBS6jGKM9lLZY/mp2FGGh8i9
LoCISu+GyibsjeHrIKmT+neglcMbBky8bGhv8vRIi1O2L526CIjkwZDJnSXvJtvD
3l0aBkDN1Z7qvYxTRrWWNMUHa7BFptsD6uzPubT0Q1nadPJOZ4z+ZdzTgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHslXlv9qWwWTCuGbP97iAY/0JxgMB8GA1UdIwQY
MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct
ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj
LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSyEhitf
w+egoKW6+ryU0+lc4JMFIU832BZkpnHwIIFgAs5qIM3darKWmsV+xqHrAzw+J8tu
kB0q4NYbhHpkxpMiBYNgaU4ywZVLyYy2g9pSMp2twR2OSngzIIlO3n3G/ecPUfUY
yXP2+AjaXW9Qv1gWsJ9sI6scHHaAz9G5+5fAWe7crGoEu3jxn+ewnhM9rMiLFwjs
1ZXQ0aulNlBfB1vTc05lyven+JlxIM55vAT107y8aKZxO8pG71KPkfRmQfBzGdD7
L8VVVPXZXORd1yqBiN9wcJc0/ijY6+jmdiav7tMkdmsAZWzK/s1tW97x4Q7ciFz9
GbW6J5oZTg4pMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:28 2025 by rpki-client