Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: rhl2A1PL+2c8MwST5TV4lr3sI7lhPzcJ/tYlqRdQR9I=
Subject key identifier: 11:00:ED:B8:DE:DE:09:51:88:88:8E:CE:44:1B:4B:67:B2:2F:FF:35
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 019A71EEE67D245C9CEDA169EF04DDD60435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 08CA
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: GPQXYzQ2KviTxO496+IgYfLrOtgOYJnO1Zy19hQkZj0=)
2: Mqsj_mYBdYcPJ5l_74z5bHNTr1k.roa (hash: +l1/GGdu0QqetRbkoCyavDfKTfdB+pfAVXCWByI+XBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e6:7d:24:5c:9c:ed:a1:69:ef:04:dd:d6:04:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=1100edb8dede095188888ece441b4b67b22fff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:2c:b1:66:61:5c:3b:57:6d:fb:cb:f2:79:
44:63:8c:f6:82:df:59:a1:89:d9:e3:b2:15:8b:92:
be:a3:a7:75:f9:bb:75:56:c7:1d:de:bb:66:6f:76:
b5:1d:17:79:17:f6:3e:d4:87:80:82:22:9e:92:5a:
f7:61:da:5e:4a:4a:c2:ce:91:81:2a:13:00:2c:73:
12:70:76:f1:70:4b:39:0a:60:1a:75:02:e1:7b:66:
bd:ed:26:c6:80:4c:d7:e3:b4:93:2d:8a:c2:0d:79:
32:9f:80:bc:b6:2d:50:d0:3a:29:af:8b:d2:a4:46:
36:d8:44:9b:ed:08:9e:3d:db:b0:9b:77:94:d8:9a:
98:4a:b7:2f:ce:31:a1:a2:4f:d9:e6:f3:02:b7:10:
39:d4:b3:d9:85:71:be:fe:2d:29:af:46:30:a5:b5:
00:44:10:67:ab:7a:d8:de:86:aa:92:4e:a2:3a:0f:
45:02:25:31:48:f5:14:5e:62:8c:21:a3:ef:cf:66:
cf:df:81:43:d1:03:cb:4f:25:28:8d:e0:6d:33:35:
2f:eb:7f:58:02:ed:8e:b2:d6:45:73:7d:97:b7:ba:
02:4e:a0:e5:e1:25:4b:75:c3:92:37:fe:1c:8b:a5:
32:55:da:aa:44:37:d3:fa:f4:37:c1:69:7d:24:74:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:00:ED:B8:DE:DE:09:51:88:88:8E:CE:44:1B:4B:67:B2:2F:FF:35
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:b9:00:10:ae:98:47:da:5c:65:f2:a9:c3:cd:e0:3a:69:
11:2c:24:49:69:90:ba:a8:4e:80:3a:2d:20:ea:a7:ec:91:7b:
d2:56:b2:8f:c3:7e:15:5a:ba:36:22:58:eb:ec:fd:65:3c:42:
cc:9a:2f:ff:cf:37:7f:3c:cd:3b:85:7d:e7:9a:19:d5:56:48:
6d:80:8b:83:bd:2a:e3:92:9a:a0:1a:93:fe:ab:a8:78:2b:4a:
88:5b:16:66:56:be:24:97:40:29:81:2d:2f:ec:41:72:2d:6b:
4d:88:d9:c9:30:31:7e:97:3a:4b:48:a0:cd:5e:2a:f6:62:f7:
16:94:f2:bb:47:85:00:c5:0e:25:56:2f:35:25:56:7f:79:87:
92:04:a2:7a:17:cf:8d:f1:9a:c0:99:de:29:c7:47:6e:21:5f:
03:7f:08:e0:4f:22:e1:95:e3:b5:28:d2:f0:34:cd:99:50:05:
48:67:8e:14:ed:d5:bd:30:26:bd:1f:40:c9:24:aa:c6:3f:23:
c7:54:a4:59:1d:a5:b9:a6:a1:a0:7d:6f:74:14:fd:a5:2a:29:
b2:65:8d:12:ae:d9:d2:bb:e4:c1:1c:78:4f:28:13:8f:01:b0:
49:d3:43:aa:9c:70:f9:70:23:19:d9:82:ef:1e:24:1d:7b:95:
56:4a:e0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uZ9JFyc7aFp7wTd1gQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWM3YzFhMWJhZWQzMjYwZDk1MGQ0Y2ZjZTlhODk3Y2M5
N2ZhMzAwHhcNMjUxMTExMDgwMTEzWhcNMjUxMTEyMDgwMTEzWjAzMTEwLwYDVQQD
EygxMTAwZWRiOGRlZGUwOTUxODg4ODhlY2U0NDFiNGI2N2IyMmZmZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqekssWZhXDtXbfvL8nlEY4z2gt9Z
oYnZ47IVi5K+o6d1+bt1Vscd3rtmb3a1HRd5F/Y+1IeAgiKeklr3YdpeSkrCzpGB
KhMALHMScHbxcEs5CmAadQLhe2a97SbGgEzX47STLYrCDXkyn4C8ti1Q0Dopr4vS
pEY22ESb7QiePduwm3eU2JqYSrcvzjGhok/Z5vMCtxA51LPZhXG+/i0pr0YwpbUA
RBBnq3rY3oaqkk6iOg9FAiUxSPUUXmKMIaPvz2bP34FD0QPLTyUojeBtMzUv639Y
Au2OstZFc32Xt7oCTqDl4SVLdcOSN/4ci6UyVdqqRDfT+vQ3wWl9JHQZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEA7bje3glRiIiOzkQbS2eyL/81MB8GA1UdIwQY
MBaAFPecfBobrtMmDZUNTPzpqJfMl/owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQt
ZDEyYjU4Y2NiODdjLzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQtZDEyYjU4Y2NiODdj
LzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+O5ABCu
mEfaXGXyqcPN4DppESwkSWmQuqhOgDotIOqn7JF70layj8N+FVq6NiJY6+z9ZTxC
zJov/883fzzNO4V955oZ1VZIbYCLg70q45KaoBqT/quoeCtKiFsWZla+JJdAKYEt
L+xBci1rTYjZyTAxfpc6S0igzV4q9mL3FpTyu0eFAMUOJVYvNSVWf3mHkgSiehfP
jfGawJneKcdHbiFfA38I4E8i4ZXjtSjS8DTNmVAFSGeOFO3VvTAmvR9AySSqxj8j
x1SkWR2luaahoH1vdBT9pSopsmWNEq7Z0rvkwRx4TygTjwGwSdNDqpxw+XAjGdmC
7x4kHXuVVkrgcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:44 2025 by rpki-client