Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: UmdTIEE3gnDchazGSPapsyd0RvT3IHVTtMok7m2fnJo=
Subject key identifier: B2:45:BB:73:D1:72:DD:38:80:1F:3C:12:70:29:E9:78:92:61:DA:45
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 0199CC47DB8A9E8F5670AC44DE46B6684789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 06CE
Signing time: Fri 10 Oct 2025 04:01:25 +0000
Manifest this update: Fri 10 Oct 2025 04:01:25 +0000
Manifest next update: Sat 11 Oct 2025 04:01:25 +0000
Files and hashes: 1: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: SQ8GqK3+xXlljcNpsiXwOvxWN3SRDc3ORRaSpJVPJVI=)
2: Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa (hash: 0Bf0l0DWLnoKx593QVoGlu2x+BD1lYWYH448tSVbn0U=)
3: Tb-8GP8qcCsPrA2Xrleo-iet2HM.roa (hash: yyhoDt89y5+7nL9lVvf4sdS/dAeJY+OT1BrhoMFwMME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:47:db:8a:9e:8f:56:70:ac:44:de:46:b6:68:47:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Oct 10 04:01:25 2025 GMT
Not After : Oct 11 04:01:25 2025 GMT
Subject: CN=b245bb73d172dd38801f3c127029e9789261da45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:7f:f3:f3:96:8f:6a:17:b7:6d:34:ab:47:
8f:6b:10:ed:a9:57:fb:3f:b9:85:eb:93:ba:c3:a6:
89:f9:4f:d0:95:e6:48:01:9a:e5:3d:ad:21:63:d1:
5e:98:b1:c9:71:b4:1f:46:1d:a0:62:85:e9:2a:8c:
7e:eb:f3:9c:d3:bc:86:89:f2:9a:da:f9:1e:9a:d7:
c9:ed:03:f3:7b:b1:fd:d7:4f:2b:3d:86:7e:e9:60:
93:5f:f3:7e:ba:c1:0d:61:99:51:ec:1d:71:0d:72:
5d:52:86:17:e3:84:a1:96:ff:ce:83:bb:a9:26:65:
4a:37:e6:e5:5f:31:c7:61:b2:11:58:e7:dd:43:25:
56:81:04:a9:90:33:8b:d0:2f:48:f9:98:f2:1f:34:
66:ee:c0:36:2a:89:22:df:b5:92:7a:6f:9e:3e:21:
38:53:06:99:3e:66:be:2e:c3:7a:e3:ea:ad:0a:29:
cc:4d:e7:83:c4:ae:d8:1f:a3:d4:26:fe:d5:eb:1e:
de:e5:9f:f3:44:a9:9f:62:c1:4e:9d:2f:97:60:8d:
34:70:3a:2b:02:95:73:24:d6:75:b3:95:d5:65:14:
d4:1d:67:ca:63:7a:f6:f6:c7:d4:ea:2a:84:73:c0:
69:58:7e:52:e4:cc:7b:4d:cf:51:84:55:9e:ca:4a:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:45:BB:73:D1:72:DD:38:80:1F:3C:12:70:29:E9:78:92:61:DA:45
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:59:63:bf:96:26:69:a4:ee:1b:77:44:c2:ea:35:1b:30:a2:
c8:ed:23:5a:1e:44:0b:bb:78:9a:6c:00:d1:58:04:71:54:b8:
b7:6e:6f:88:3f:de:74:da:4b:90:c7:44:97:b0:27:12:53:70:
6d:ce:8b:da:2c:95:c4:87:6d:d4:4d:91:5a:e0:42:82:18:92:
39:68:35:47:fb:05:53:d3:93:6b:b5:36:0b:2a:3b:3b:34:2f:
8f:f5:92:73:ca:a0:08:3a:87:39:df:d9:2a:93:19:1e:cf:43:
19:b8:11:f3:0d:c7:09:f7:03:64:28:a7:d4:64:2a:42:08:ea:
65:47:51:c9:5b:06:15:3b:cd:e7:c5:d9:31:aa:1d:2d:ec:74:
53:d7:4f:a2:b8:54:f8:1d:d6:fb:70:82:91:21:70:40:5a:2e:
01:d0:24:0a:68:89:d8:68:83:a6:a5:43:05:84:0f:33:28:22:
6d:f3:31:d3:9b:07:4a:4b:80:07:28:07:c5:e9:1d:99:2e:b2:
40:3a:23:48:42:f2:48:fa:4a:04:32:77:95:f5:2a:4d:f9:a2:
f2:d0:f7:41:59:1f:83:bc:f5:d2:56:db:26:ee:81:3e:8a:01:
ac:1d:f0:de:ba:71:63:51:99:71:18:b1:d1:4c:63:6f:63:d1:
1d:6f:5d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnMR9uKno9WcKxE3ka2aEeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZWU1YjY4NDljOGM4MWY1YTc2MzU5NTU4OGE2YmE2ODIx
ZTc2N2IwHhcNMjUxMDEwMDQwMTI1WhcNMjUxMDExMDQwMTI1WjAzMTEwLwYDVQQD
EyhiMjQ1YmI3M2QxNzJkZDM4ODAxZjNjMTI3MDI5ZTk3ODkyNjFkYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKF/8/OWj2oXt200q0ePaxDtqVf7
P7mF65O6w6aJ+U/QleZIAZrlPa0hY9FemLHJcbQfRh2gYoXpKox+6/Oc07yGifKa
2vkemtfJ7QPze7H9108rPYZ+6WCTX/N+usENYZlR7B1xDXJdUoYX44Shlv/Og7up
JmVKN+blXzHHYbIRWOfdQyVWgQSpkDOL0C9I+ZjyHzRm7sA2Koki37WSem+ePiE4
UwaZPma+LsN64+qtCinMTeeDxK7YH6PUJv7V6x7e5Z/zRKmfYsFOnS+XYI00cDor
ApVzJNZ1s5XVZRTUHWfKY3r29sfU6iqEc8BpWH5S5Mx7Tc9RhFWeykqAzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJFu3PRct04gB88EnAp6XiSYdpFMB8GA1UdIwQY
MBaAFPLuW2hJyMgfWnY1lViKa6aCHnZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTIt
NjBhMDM5ZGQxYmNhLzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTItNjBhMDM5ZGQxYmNh
LzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFljv5Ym
aaTuG3dEwuo1GzCiyO0jWh5EC7t4mmwA0VgEcVS4t25viD/edNpLkMdEl7AnElNw
bc6L2iyVxIdt1E2RWuBCghiSOWg1R/sFU9OTa7U2Cyo7OzQvj/WSc8qgCDqHOd/Z
KpMZHs9DGbgR8w3HCfcDZCin1GQqQgjqZUdRyVsGFTvN58XZMaodLex0U9dPorhU
+B3W+3CCkSFwQFouAdAkCmiJ2GiDpqVDBYQPMygibfMx05sHSkuABygHxekdmS6y
QDojSELySPpKBDJ3lfUqTfmi8tD3QVkfg7z10lbbJu6BPooBrB3w3rpxY1GZcRix
0Uxjb2PRHW9dwQ==
-----END CERTIFICATE-----
Generated at Fri Oct 10 10:11:12 2025 by rpki-client