Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: gVwkgxsW45FBJIHAWMF0RVdZDCStKQ4Y/3cam1MbRyo=
Subject key identifier: 5C:ED:07:1E:A1:A1:B7:8D:64:30:03:0F:88:47:02:8C:31:EB:E4:77
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 019A72CA1E436D9AAA16AB1614670D6264D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: mK2Vr2MMNWsV/vkwYmdqyQKKrUs+R/Lq4u/X6MCpNSg=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1e:43:6d:9a:aa:16:ab:16:14:67:0d:62:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=5ced071ea1a1b78d6430030f8847028c31ebe477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:a7:84:92:57:27:d6:18:f1:ac:a5:0b:8c:
99:71:c8:95:7f:a1:22:e7:6e:12:eb:5b:aa:b1:ff:
49:63:fa:e2:23:54:d3:9f:25:26:13:d6:2c:df:da:
34:41:57:71:e3:cb:3f:f9:f5:8b:6a:ae:c4:eb:61:
e4:36:68:6a:72:3b:42:c8:dc:19:3f:d9:d8:48:5f:
11:df:12:8d:2a:12:20:05:d7:d9:75:c5:65:e8:84:
d7:47:a3:60:67:da:62:7e:2e:bd:50:99:2e:5a:60:
4f:be:01:c1:8c:1b:31:fa:a9:ce:79:8a:c7:4f:02:
72:3e:a6:99:c1:43:11:49:6f:ba:a4:83:5f:97:2d:
ff:2d:53:6a:db:09:1e:da:9a:e7:e3:92:48:83:73:
77:0b:bb:11:ac:73:9c:e0:82:2d:8a:0c:cb:c5:34:
fa:6f:67:94:33:99:c7:69:56:f7:e8:2c:20:39:5c:
7d:17:fd:4e:6e:6f:92:2f:15:c6:d9:f3:5b:dd:78:
18:c9:97:3d:a3:41:29:f3:6a:d9:99:bb:e2:c1:7b:
46:20:fa:57:2f:60:9b:1c:c8:32:a4:34:5d:45:24:
08:9d:50:8a:31:07:17:ea:b4:67:9b:b8:fe:37:77:
7e:1f:a7:5d:3b:21:2f:68:87:35:d2:1c:ac:41:da:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:07:1E:A1:A1:B7:8D:64:30:03:0F:88:47:02:8C:31:EB:E4:77
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a1:91:c8:98:92:65:7b:a8:82:4d:ab:9c:e6:8e:d0:5f:e9:
cf:b0:ed:7e:79:5b:dd:6b:b6:b6:96:3c:b3:bb:d9:e7:ff:33:
ba:0b:7e:e4:2d:89:c4:52:12:e5:8d:96:e7:51:7b:61:2a:1a:
77:82:d0:28:f4:f5:0c:cb:a1:45:33:8f:f7:29:3e:3c:31:48:
0f:72:e1:e0:97:0e:7d:23:3b:25:e6:31:63:1c:b4:62:6e:0e:
b1:d5:75:cd:e3:4f:f7:9b:03:7d:84:a2:f8:17:3b:ef:9d:18:
70:47:b0:8a:83:0a:a3:9c:bc:32:8b:69:bc:4b:cd:27:d5:1a:
90:0b:93:1e:32:06:64:df:8e:af:5c:44:8e:0a:c9:e1:10:6e:
4b:43:3d:dd:fd:b9:69:bc:5f:88:59:b7:08:e3:d7:df:37:45:
72:bf:70:4a:91:3b:e8:04:07:3a:a9:a9:f1:29:cd:d7:2e:92:
a4:6d:e5:8e:82:b0:2a:a9:2a:3b:87:9f:ee:ce:ca:cf:7e:63:
41:63:91:18:f4:5f:42:9f:df:5a:81:01:da:01:bc:55:16:15:
71:2a:c3:2c:e1:e2:80:e2:3e:7b:b6:c4:50:b0:0b:a6:cd:a4:
bb:71:67:35:87:01:94:56:05:60:3b:27:1b:61:bb:46:2e:71:
1e:ef:81:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyh5DbZqqFqsWFGcNYmTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWE1ZDVjYjc5NDljZTFiZDIwOWRjMjEzOTkzNTIwZTAy
ZDEwODUwHhcNMjUxMTExMTIwMDM5WhcNMjUxMTEyMTIwMDM5WjAzMTEwLwYDVQQD
Eyg1Y2VkMDcxZWExYTFiNzhkNjQzMDAzMGY4ODQ3MDI4YzMxZWJlNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaynhJJXJ9YY8aylC4yZcciVf6Ei
524S61uqsf9JY/riI1TTnyUmE9Ys39o0QVdx48s/+fWLaq7E62HkNmhqcjtCyNwZ
P9nYSF8R3xKNKhIgBdfZdcVl6ITXR6NgZ9pifi69UJkuWmBPvgHBjBsx+qnOeYrH
TwJyPqaZwUMRSW+6pINfly3/LVNq2wke2prn45JIg3N3C7sRrHOc4IItigzLxTT6
b2eUM5nHaVb36CwgOVx9F/1Obm+SLxXG2fNb3XgYyZc9o0Ep82rZmbviwXtGIPpX
L2CbHMgypDRdRSQInVCKMQcX6rRnm7j+N3d+H6ddOyEvaIc10hysQdqLAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFztBx6hobeNZDADD4hHAowx6+R3MB8GA1UdIwQY
MBaAFPGaXVy3lJzhvSCdwhOZNSDgLRCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAt
MmY4MGEwYTAyMDZhLzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAtMmY4MGEwYTAyMDZh
LzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKGRyJiS
ZXuogk2rnOaO0F/pz7Dtfnlb3Wu2tpY8s7vZ5/8zugt+5C2JxFIS5Y2W51F7YSoa
d4LQKPT1DMuhRTOP9yk+PDFID3Lh4JcOfSM7JeYxYxy0Ym4OsdV1zeNP95sDfYSi
+Bc7750YcEewioMKo5y8MotpvEvNJ9UakAuTHjIGZN+Or1xEjgrJ4RBuS0M93f25
abxfiFm3COPX3zdFcr9wSpE76AQHOqmp8SnN1y6SpG3ljoKwKqkqO4ef7s7Kz35j
QWORGPRfQp/fWoEB2gG8VRYVcSrDLOHigOI+e7bEULALps2ku3FnNYcBlFYFYDsn
G2G7Ri5xHu+B8g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:12 2025 by rpki-client