Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: FliVSDNzRrrrlD52wx99GjG9mLYwOG8IbYBgs8Uen1k=
Subject key identifier: 68:0E:63:4C:19:49:11:A6:47:37:7E:51:A8:86:74:42:9C:3F:0F:33
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019A71B81EE809C6FA425AFEEA14E2271172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1459
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: OBRCtGNnYvaoZ3E20d5r7Iyt9zRv+loY90Jmb2kEsow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1e:e8:09:c6:fa:42:5a:fe:ea:14:e2:27:11:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=680e634c194911a647377e51a88674429c3f0f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:a6:a2:42:38:20:83:85:14:7a:f6:49:f4:
8f:98:86:65:ca:e4:1d:58:ff:a0:b7:ef:33:8c:19:
6e:56:4c:68:ac:4f:02:ce:0a:a5:9f:bb:9c:2d:b3:
50:09:0d:1d:8b:8a:39:a5:53:8e:1d:40:95:16:4a:
b9:ff:89:b6:ba:75:14:57:6f:cc:f1:ab:08:74:f9:
b0:f5:c4:cf:3a:e7:b1:c9:82:3f:27:51:ad:df:af:
b5:99:56:ad:da:7c:24:7b:14:0c:f1:b7:73:8d:75:
35:41:5e:13:12:ad:79:3b:0a:15:f0:8d:e4:8a:f3:
a7:10:fe:d9:e6:03:f7:e9:1d:7e:0d:5f:9d:01:f8:
eb:fa:fb:e8:a2:fd:29:f6:dd:17:b5:4d:5d:8c:7b:
70:c2:9b:fc:74:95:21:e4:98:c7:9b:bb:d9:39:67:
1e:fc:d2:4a:6e:84:92:56:21:48:fb:f1:6d:ef:d1:
16:f4:90:04:de:12:75:ff:c7:c7:f3:ec:69:b9:17:
c7:d7:2b:69:66:3b:cb:60:05:cf:56:b3:1a:ef:3b:
03:a1:3c:3c:49:3b:51:d0:53:4a:b2:37:2f:66:ed:
0d:1e:9e:1a:5d:f1:ba:1c:12:e4:95:1b:f0:cc:0f:
3d:c8:0a:f7:7e:1c:9f:4d:43:52:c8:67:fa:f1:eb:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:63:4C:19:49:11:A6:47:37:7E:51:A8:86:74:42:9C:3F:0F:33
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0b:7a:40:94:15:54:c9:7e:d7:ba:79:6c:df:d7:e1:88:d0:
96:95:be:20:cc:41:d9:5f:45:5c:4d:47:87:f7:a8:76:32:c2:
cd:18:39:ad:45:75:2a:46:bb:5a:29:38:5d:83:c9:56:1c:38:
c5:0b:54:d9:df:f3:75:66:c0:6f:9a:d6:51:67:45:b9:d0:94:
bf:00:87:50:d3:58:49:98:27:63:78:16:f3:61:89:0d:94:28:
bc:02:6f:37:39:38:55:5c:ac:f9:8a:c5:f5:a0:12:e9:64:2f:
07:c1:fa:7d:78:2f:86:59:ad:d6:f8:0e:da:34:b4:d5:c5:6a:
99:89:77:7b:bb:1e:85:9d:5b:e8:0e:df:09:10:e7:fc:b2:0c:
8b:60:ab:d2:3a:29:9c:eb:98:9c:27:98:90:a7:5a:b0:6f:ad:
a6:05:98:2d:04:80:a1:f1:a3:23:f6:40:2a:c9:9d:37:b6:7c:
9f:ac:94:e8:e4:b2:fe:ff:85:c9:e2:6a:84:61:bb:10:71:70:
04:7f:eb:74:a8:08:b0:d9:13:1a:cf:48:d8:1a:4c:5a:52:c1:
58:66:16:9d:32:79:5e:cc:13:1b:cb:c5:31:f9:8a:21:94:8b:
a1:27:77:57:27:72:f4:e8:77:2e:21:9f:1f:84:58:a9:b7:ed:
95:d5:88:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuB7oCcb6Qlr+6hTiJxFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYTBjNjdmZjg1OWY1NTVhZjg5MjE5Mzg4ODdjNjA4NTI2
OWE0MDIwHhcNMjUxMTExMDcwMTIzWhcNMjUxMTEyMDcwMTIzWjAzMTEwLwYDVQQD
Eyg2ODBlNjM0YzE5NDkxMWE2NDczNzdlNTFhODg2NzQ0MjljM2YwZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc6mokI4IIOFFHr2SfSPmIZlyuQd
WP+gt+8zjBluVkxorE8Czgqln7ucLbNQCQ0di4o5pVOOHUCVFkq5/4m2unUUV2/M
8asIdPmw9cTPOuexyYI/J1Gt36+1mVat2nwkexQM8bdzjXU1QV4TEq15OwoV8I3k
ivOnEP7Z5gP36R1+DV+dAfjr+vvoov0p9t0XtU1djHtwwpv8dJUh5JjHm7vZOWce
/NJKboSSViFI+/Ft79EW9JAE3hJ1/8fH8+xpuRfH1ytpZjvLYAXPVrMa7zsDoTw8
STtR0FNKsjcvZu0NHp4aXfG6HBLklRvwzA89yAr3fhyfTUNSyGf68evhuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgOY0wZSRGmRzd+UaiGdEKcPw8zMB8GA1UdIwQY
MBaAFPGgxn/4WfVVr4khk4iHxghSaaQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEt
YjQxOTk5ZTVjZjU0LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEtYjQxOTk5ZTVjZjU0
LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAt6QJQV
VMl+17p5bN/X4YjQlpW+IMxB2V9FXE1Hh/eodjLCzRg5rUV1Kka7Wik4XYPJVhw4
xQtU2d/zdWbAb5rWUWdFudCUvwCHUNNYSZgnY3gW82GJDZQovAJvNzk4VVys+YrF
9aAS6WQvB8H6fXgvhlmt1vgO2jS01cVqmYl3e7sehZ1b6A7fCRDn/LIMi2Cr0jop
nOuYnCeYkKdasG+tpgWYLQSAofGjI/ZAKsmdN7Z8n6yU6OSy/v+FyeJqhGG7EHFw
BH/rdKgIsNkTGs9I2BpMWlLBWGYWnTJ5XswTG8vFMfmKIZSLoSd3Vydy9Oh3LiGf
H4RYqbftldWIgg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:37 2025 by rpki-client