Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: EmkWGu2iCziZRqGkm7cn6mVJAFD16QSLt6JFhZq90S8=
Subject key identifier: E2:DF:C7:68:DD:FE:33:B9:CA:A9:BC:0A:9B:A1:DD:EC:AE:2D:1B:22
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 019A7149E18BB27E369C11EBBA1FF11F1388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: e0MGldshVLNiAjVizqEtyVgcQkBUhP2Ia8rS8HpsstE=)
2: yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa (hash: LgnuacZQDPP2J60/EcJiQNzEwvS+wm94uYSyH+Ocir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e1:8b:b2:7e:36:9c:11:eb:ba:1f:f1:1f:13:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=e2dfc768ddfe33b9caa9bc0a9ba1ddecae2d1b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:61:ea:b1:8e:d5:85:a3:35:e6:6d:38:1b:
f6:0e:bb:00:48:77:ea:e9:6a:ea:04:09:f3:2a:c4:
c0:37:5f:2c:d2:93:c3:32:29:0f:2f:6c:78:1e:09:
81:4a:1d:db:07:16:e6:6e:12:57:30:90:a1:0a:2d:
6b:10:ff:92:3b:05:f0:0a:45:23:0c:dc:92:2a:8e:
b0:69:63:a8:66:0f:13:dd:1d:47:02:cd:d7:bf:15:
b3:57:ea:0d:ad:14:8a:e8:d6:8e:e1:1c:0f:42:8a:
e0:1b:42:69:e6:64:24:18:8a:6f:57:08:41:7f:e7:
4f:32:a9:e8:10:04:08:38:d6:aa:6e:51:2e:7f:09:
b0:b5:69:9d:b3:55:c1:56:ab:26:07:3c:01:09:65:
eb:67:8a:90:1f:5a:a4:3a:7d:27:d4:5c:1a:23:11:
c9:8d:fe:1f:7c:e5:c2:87:21:57:65:37:a5:96:be:
6a:62:4a:37:fc:17:d9:34:4b:4d:b7:79:2f:49:84:
4f:d6:9a:a5:9c:c2:0b:a1:93:c3:94:b5:3d:45:1a:
7c:bf:14:92:e0:60:74:4f:3f:ff:fe:99:d5:b1:b6:
68:3a:56:12:dc:2d:b2:4e:a0:77:d8:55:10:91:79:
96:93:5b:e5:ff:df:07:e6:c6:18:a2:e9:15:83:f3:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DF:C7:68:DD:FE:33:B9:CA:A9:BC:0A:9B:A1:DD:EC:AE:2D:1B:22
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:84:4b:18:8f:14:18:e2:a7:7d:24:53:d8:3c:ef:49:5b:c6:
f9:77:f1:70:59:45:3b:30:75:65:8b:58:04:68:f9:53:d6:c2:
4e:37:a1:eb:6f:81:60:b1:62:2b:77:17:bf:59:0b:57:95:70:
73:5f:f6:13:ff:4c:f8:bf:5a:6a:17:da:e7:7a:7c:60:5a:1e:
a4:fd:46:9a:10:a7:cd:06:2c:a0:45:2b:e5:6d:e2:b4:27:35:
9e:68:2e:b9:72:b1:4c:07:50:17:73:43:36:fe:32:05:ca:4f:
52:4b:a5:05:4b:8a:8e:b2:2f:5b:00:67:cd:d2:0f:a7:68:6b:
82:3f:a7:1e:56:79:64:38:6c:ab:c9:54:31:2b:9e:87:5f:ea:
28:d9:62:e0:2c:a6:ee:9b:3d:08:f4:cc:29:79:c5:a9:9a:7c:
07:d7:5f:bc:ed:db:0a:8d:5a:4e:b4:36:db:2f:b2:20:a3:b2:
d6:bb:52:a3:ca:dd:78:40:e6:b2:e0:a2:b2:8e:ce:30:17:16:
73:7c:da:c4:65:f6:b2:5d:59:17:e3:21:19:b6:a5:cb:e2:1f:
75:eb:04:30:1e:35:fd:44:61:0d:70:3d:6e:cb:b7:aa:88:14:
46:84:4e:92:2d:3b:4e:50:6f:38:7d:c9:b2:61:91:91:58:5d:
21:0d:48:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSeGLsn42nBHruh/xHxOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODA1M2VhN2YzYWI3OWE3NWU4Zjg3NTM4Njc3NTU1MWVm
NzU3MzkwHhcNMjUxMTExMDUwMDU4WhcNMjUxMTEyMDUwMDU4WjAzMTEwLwYDVQQD
EyhlMmRmYzc2OGRkZmUzM2I5Y2FhOWJjMGE5YmExZGRlY2FlMmQxYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vlh6rGO1YWjNeZtOBv2DrsASHfq
6WrqBAnzKsTAN18s0pPDMikPL2x4HgmBSh3bBxbmbhJXMJChCi1rEP+SOwXwCkUj
DNySKo6waWOoZg8T3R1HAs3XvxWzV+oNrRSK6NaO4RwPQorgG0Jp5mQkGIpvVwhB
f+dPMqnoEAQIONaqblEufwmwtWmds1XBVqsmBzwBCWXrZ4qQH1qkOn0n1FwaIxHJ
jf4ffOXChyFXZTellr5qYko3/BfZNEtNt3kvSYRP1pqlnMILoZPDlLU9RRp8vxSS
4GB0Tz///pnVsbZoOlYS3C2yTqB32FUQkXmWk1vl/98H5sYYoukVg/N9EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLfx2jd/jO5yqm8Cpuh3eyuLRsiMB8GA1UdIwQY
MBaAFPGAU+p/Oreadej4dThndVUe91c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEt
NzQ3Y2VkMGI3NDg2LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEtNzQ3Y2VkMGI3NDg2
LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4RLGI8U
GOKnfSRT2DzvSVvG+XfxcFlFOzB1ZYtYBGj5U9bCTjeh62+BYLFiK3cXv1kLV5Vw
c1/2E/9M+L9aahfa53p8YFoepP1GmhCnzQYsoEUr5W3itCc1nmguuXKxTAdQF3ND
Nv4yBcpPUkulBUuKjrIvWwBnzdIPp2hrgj+nHlZ5ZDhsq8lUMSueh1/qKNli4Cym
7ps9CPTMKXnFqZp8B9dfvO3bCo1aTrQ22y+yIKOy1rtSo8rdeEDmsuCiso7OMBcW
c3zaxGX2sl1ZF+MhGbaly+IfdesEMB41/URhDXA9bsu3qogURoROki07TlBvOH3J
smGRkVhdIQ1IhQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:58 2025 by rpki-client