Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier: oS6lsdOn+t9w7QEFAUiOzpFeyaonlD71NKv6TIMg6rQ=
Subject key identifier: FD:DB:78:E8:E8:95:DF:29:8F:C3:19:CC:F4:4E:8D:53:E7:4F:0D:37
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial: 019A4F99877C2CA6D8926DB441A85D1B72EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number: 0A90
Signing time: Tue 04 Nov 2025 16:00:52 +0000
Manifest this update: Tue 04 Nov 2025 16:00:52 +0000
Manifest next update: Wed 05 Nov 2025 16:00:52 +0000
Files and hashes: 1: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: 3k2hky9rGmvWcLniOjGNOSq6tRcC4v62/fpzjGXo9HU=)
2: Jt10BH3qKoOGqx6R1oafXbYBRvg.roa (hash: 9VB1KYRqUDPucDZfXSnHKaNbHiQLBOlnBbvyv/YEMkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:87:7c:2c:a6:d8:92:6d:b4:41:a8:5d:1b:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Validity
Not Before: Nov 4 16:00:52 2025 GMT
Not After : Nov 5 16:00:52 2025 GMT
Subject: CN=fddb78e8e895df298fc319ccf44e8d53e74f0d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:43:3e:b4:7f:eb:0d:7c:99:08:60:5f:eb:
9e:0e:f9:5d:db:a7:f8:5d:21:12:09:2b:94:54:dc:
ef:8f:eb:be:8b:f8:8e:ec:0b:0a:74:70:52:bf:ad:
09:17:03:ae:f4:60:f8:17:e9:ff:ab:5f:72:03:de:
3b:42:57:d6:d1:b1:e0:8f:67:50:7b:ee:0b:11:18:
d2:27:04:eb:36:6b:d3:1c:ce:84:2f:0b:5f:d3:11:
de:f5:95:2d:7e:6c:46:40:5c:7b:d9:2f:11:91:4f:
7c:34:e3:06:11:5b:99:c8:4a:41:3d:b9:82:2c:fd:
75:47:f8:b2:fa:7d:16:81:a4:b0:1d:69:d7:e4:e2:
90:72:9d:c5:f6:c2:7d:56:20:bf:41:ad:77:9f:80:
13:f7:2a:cc:ee:df:49:c0:de:ed:21:12:02:92:1b:
ee:2f:fb:cf:6d:7c:42:ed:e8:3c:99:ad:bb:de:8f:
8b:46:93:74:e2:8f:52:93:c8:d1:9d:e0:7c:87:81:
24:c5:39:6a:fd:54:15:e9:63:e9:a5:12:c0:31:eb:
aa:e9:b7:45:15:11:20:d8:df:7f:f7:c3:9d:05:be:
b8:af:9e:e6:1a:76:2d:b6:ae:09:bc:c6:4a:f5:a3:
77:46:74:8d:9a:0a:97:6c:a4:9c:89:bb:1c:e9:2b:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:78:E8:E8:95:DF:29:8F:C3:19:CC:F4:4E:8D:53:E7:4F:0D:37
X509v3 Authority Key Identifier:
keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a5:62:e9:00:e2:f4:11:b4:d7:71:5a:dc:37:b5:5a:91:03:
e8:26:ab:e8:c0:bd:cd:2e:62:32:9e:f0:4d:6f:23:9f:15:30:
04:7b:ad:fb:92:02:f0:61:c8:64:82:07:97:25:fc:3f:98:7f:
8e:25:d8:73:7d:7d:e3:d2:60:43:f5:aa:82:f1:55:ac:75:e1:
67:e4:69:4e:4b:a6:e1:f8:8a:3a:f4:7c:8d:e2:0c:d5:9f:58:
07:66:4d:f3:9f:75:52:e8:1a:3e:66:38:44:d2:71:21:2a:29:
b2:d1:79:ae:92:78:d1:49:bb:9d:47:8d:3f:ec:d1:16:e7:1d:
ae:09:cc:b2:3e:d5:0e:38:de:5b:10:04:3d:48:e1:73:38:a2:
7a:da:83:16:4f:11:32:0f:09:dd:57:7b:64:6b:8c:87:29:4f:
10:d2:12:f7:32:ee:80:34:e8:05:76:f4:0d:6d:98:50:4c:de:
c5:59:cb:5d:43:76:53:09:43:a5:95:58:15:9e:e3:4c:e5:2d:
01:16:a2:d7:62:9f:d6:8d:df:df:4d:41:da:0a:1d:e8:34:38:
6d:34:df:40:97:e6:52:51:e4:ea:0e:69:7b:39:99:e3:03:5b:
3d:73:aa:4b:be:52:0e:e5:e0:2d:a0:f2:5f:72:ac:5a:80:03:
a8:62:59:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmYd8LKbYkm20QahdG3LuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmMxMWU2ZWNkM2EwYWYzZWU0Mzk0ZGNiYjdiM2VmOTAx
ODdkMzAwHhcNMjUxMTA0MTYwMDUyWhcNMjUxMTA1MTYwMDUyWjAzMTEwLwYDVQQD
EyhmZGRiNzhlOGU4OTVkZjI5OGZjMzE5Y2NmNDRlOGQ1M2U3NGYwZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6VDPrR/6w18mQhgX+ueDvld26f4
XSESCSuUVNzvj+u+i/iO7AsKdHBSv60JFwOu9GD4F+n/q19yA947QlfW0bHgj2dQ
e+4LERjSJwTrNmvTHM6ELwtf0xHe9ZUtfmxGQFx72S8RkU98NOMGEVuZyEpBPbmC
LP11R/iy+n0WgaSwHWnX5OKQcp3F9sJ9ViC/Qa13n4AT9yrM7t9JwN7tIRICkhvu
L/vPbXxC7eg8ma273o+LRpN04o9Sk8jRneB8h4EkxTlq/VQV6WPppRLAMeuq6bdF
FREg2N9/98OdBb64r57mGnYttq4JvMZK9aN3RnSNmgqXbKScibsc6SuqwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3beOjold8pj8MZzPROjVPnTw03MB8GA1UdIwQY
MBaAFPK8Eebs06CvPuQ5Tcu3s++QGH0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYt
N2M0MjQ3YWU1YzFiLzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYtN2M0MjQ3YWU1YzFi
LzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaVi6QDi
9BG013Fa3De1WpED6Car6MC9zS5iMp7wTW8jnxUwBHut+5IC8GHIZIIHlyX8P5h/
jiXYc31949JgQ/WqgvFVrHXhZ+RpTkum4fiKOvR8jeIM1Z9YB2ZN8591UugaPmY4
RNJxISopstF5rpJ40Um7nUeNP+zRFucdrgnMsj7VDjjeWxAEPUjhcziietqDFk8R
Mg8J3Vd7ZGuMhylPENIS9zLugDToBXb0DW2YUEzexVnLXUN2UwlDpZVYFZ7jTOUt
ARai12Kf1o3f301B2god6DQ4bTTfQJfmUlHk6g5pezmZ4wNbPXOqS75SDuXgLaDy
X3KsWoADqGJZTA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:57 2025 by rpki-client