Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: 6WE+/zrip/rHSmmFcjB7OhcT+PLDq1d0XXDfhz9zsjc=
Subject key identifier: 87:9D:60:24:45:73:19:46:5C:F1:28:02:F4:96:EE:FD:A0:E3:1E:64
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 019A4E18F125F6704D7B6B836D7BE732DABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 0EAE
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: Wqa4SsP2h_ssNFKOjNzf7n1D1Oc.roa (hash: r8Od7aNV9w5qxKZEsiTyK8JnMXxLB2GhaVrqj9OwkeA=)
2: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: C6lckqKO3LY1QLfoZWleivdsjj1wxYMhHHtwvgxBouw=)
3: kwVeacE9Id0juKigol5W8QUGZmY.roa (hash: 7cxULpmrleNFyzISvZ8CMCvy9RGxzfGSr5MdwYQQpa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f1:25:f6:70:4d:7b:6b:83:6d:7b:e7:32:da:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=879d6024457319465cf12802f496eefda0e31e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:5a:cf:a0:a3:c0:70:87:b2:c0:2c:7c:c7:
75:91:1c:bb:fb:ff:a9:67:b8:0a:db:fc:b3:16:5a:
29:7a:87:c2:80:eb:fb:27:d2:16:6c:a5:20:b4:a3:
49:26:c6:20:a1:63:4c:bf:14:c4:ff:15:af:82:b0:
f2:5e:f3:4e:73:de:62:a6:ba:31:6c:11:4e:35:7e:
d7:03:0f:58:25:ca:b0:bf:bc:38:34:a4:8a:c2:7a:
1e:bd:f1:3f:6c:cf:32:79:ac:27:62:b0:1c:38:63:
0d:e0:11:74:70:83:55:a1:c9:f1:9b:af:3b:23:f7:
20:94:b7:44:bc:9b:e0:8d:d8:3c:c4:4e:23:65:1f:
66:6f:90:76:45:fe:f9:bf:de:84:79:4f:fb:78:bd:
54:52:dd:a2:f9:fc:6f:c6:2c:70:ad:44:8d:4e:8b:
34:47:58:a2:90:91:ff:df:a8:2b:56:b3:00:eb:60:
52:e6:31:48:c0:86:eb:bf:7d:dc:0a:05:29:cc:b1:
08:83:a0:06:75:56:55:13:33:ae:72:69:2e:12:34:
b4:aa:f2:56:b8:cc:da:e3:16:f5:c8:28:94:6b:cd:
e4:93:91:28:ce:fe:31:e9:09:d8:86:70:30:13:48:
8a:98:15:bc:5e:59:46:ca:db:c6:6d:ef:11:f1:af:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:60:24:45:73:19:46:5C:F1:28:02:F4:96:EE:FD:A0:E3:1E:64
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:22:02:61:f4:79:3f:01:ad:c2:d7:34:8e:b7:78:60:54:29:
14:91:e7:2b:84:ed:b0:10:4d:cb:e2:ea:33:2c:75:19:e7:7b:
3b:23:12:b8:98:ca:8b:ea:d5:c7:e5:9c:aa:95:cd:e4:4f:09:
7c:d7:21:a4:87:95:cd:df:f5:98:c3:c5:f9:ed:a2:86:a6:c2:
5a:f9:33:9c:8c:f7:65:e0:9d:f0:d5:35:47:2c:78:16:6e:8c:
9e:69:d8:c0:55:4d:77:09:e0:7b:93:69:f2:3e:7e:ab:16:0b:
c5:e0:77:e1:dd:2f:3b:a4:a7:70:f1:a4:82:bc:ae:73:61:39:
65:ca:6e:5e:e5:90:2c:21:ee:4a:ed:51:66:5a:10:f2:e0:7a:
74:5c:a9:67:43:f9:98:bb:06:4d:48:c6:20:40:e8:2b:44:e6:
1c:ba:2f:51:74:ce:b4:c9:e5:10:8c:65:d3:93:9a:50:12:dc:
6f:9f:40:e9:a7:13:0c:4b:3f:e8:70:5c:19:4e:12:cb:d2:0d:
e4:f4:36:1c:07:0e:37:ce:ff:5f:8e:01:cf:17:a9:6d:26:61:
95:33:6a:52:ae:0a:41:43:b0:ff:bd:ad:26:7d:99:59:41:c8:
6e:cc:1f:0f:f0:37:e0:d5:25:9d:71:5a:95:21:6c:29:d5:f8:
4b:aa:07:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGPEl9nBNe2uDbXvnMtq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzdkZDI1Y2E1ZmIxZGM5MTNjMmZmYjkxNmZhMjJmYjg2
MTBiNzgwHhcNMjUxMTA0MDkwMDQ4WhcNMjUxMTA1MDkwMDQ4WjAzMTEwLwYDVQQD
Eyg4NzlkNjAyNDQ1NzMxOTQ2NWNmMTI4MDJmNDk2ZWVmZGEwZTMxZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd1az6CjwHCHssAsfMd1kRy7+/+p
Z7gK2/yzFlopeofCgOv7J9IWbKUgtKNJJsYgoWNMvxTE/xWvgrDyXvNOc95iprox
bBFONX7XAw9YJcqwv7w4NKSKwnoevfE/bM8yeawnYrAcOGMN4BF0cINVocnxm687
I/cglLdEvJvgjdg8xE4jZR9mb5B2Rf75v96EeU/7eL1UUt2i+fxvxixwrUSNTos0
R1iikJH/36grVrMA62BS5jFIwIbrv33cCgUpzLEIg6AGdVZVEzOucmkuEjS0qvJW
uMza4xb1yCiUa83kk5Eozv4x6QnYhnAwE0iKmBW8XllGytvGbe8R8a940wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIedYCRFcxlGXPEoAvSW7v2g4x5kMB8GA1UdIwQY
MBaAFHfH3SXKX7HckTwv+5Fvoi+4YQt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYt
ZGRiMzViMWFiYWQ1LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYtZGRiMzViMWFiYWQ1
LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCICYfR5
PwGtwtc0jrd4YFQpFJHnK4TtsBBNy+LqMyx1Ged7OyMSuJjKi+rVx+WcqpXN5E8J
fNchpIeVzd/1mMPF+e2ihqbCWvkznIz3ZeCd8NU1Ryx4Fm6MnmnYwFVNdwnge5Np
8j5+qxYLxeB34d0vO6SncPGkgryuc2E5ZcpuXuWQLCHuSu1RZloQ8uB6dFypZ0P5
mLsGTUjGIEDoK0TmHLovUXTOtMnlEIxl05OaUBLcb59A6acTDEs/6HBcGU4Sy9IN
5PQ2HAcON87/X44BzxepbSZhlTNqUq4KQUOw/72tJn2ZWUHIbswfD/A34NUlnXFa
lSFsKdX4S6oHIg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:19 2025 by rpki-client