Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File: E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier: VulFLFA4vgTke9Tt1TdzSCPTqdpOYV3QgYsSgPVq3mY=
Subject key identifier: CF:02:A1:40:34:87:61:03:37:FC:E9:E2:C7:E4:45:B7:52:36:2E:7B
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial: 019A71B78C19B8846634FFBB65439241790C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: 2/CHkwshL/I16FsNJOwZmOFqiPYvt9UoZybzUSR8Uxo=)
2: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (hash: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8c:19:b8:84:66:34:ff:bb:65:43:92:41:79:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=cf02a1403487610337fce9e2c7e445b752362e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:db:c1:71:38:9d:1b:ba:5a:bd:51:8f:23:
fe:0d:fb:30:5d:15:d9:a9:4b:4c:a3:ef:36:9c:ce:
6d:5a:3b:87:0c:0c:b9:ae:2b:e0:1d:a9:ad:a1:85:
43:80:4b:c5:e2:a5:41:03:a2:4b:f2:04:e3:42:cd:
c5:1e:db:37:95:8f:52:83:51:00:c4:33:85:8f:67:
4d:d2:9e:2b:26:61:43:ed:da:81:23:eb:cc:42:81:
ea:bb:45:4c:e4:14:5d:9b:22:fc:27:2a:50:9b:9f:
6d:50:e0:04:98:59:b3:54:e0:f6:e6:08:45:25:26:
7a:1c:d0:82:97:12:5c:69:03:9e:4a:73:76:63:bf:
7b:b7:f3:1c:d0:55:3a:6c:fd:0d:44:ab:3d:54:9c:
97:c1:c8:82:49:e7:33:1c:eb:88:79:d7:aa:c8:73:
18:eb:c7:9a:fd:a2:46:94:b8:67:bf:73:bd:41:da:
11:fe:1d:7c:01:56:44:ad:a7:86:25:8f:14:f3:13:
af:28:6b:f8:f2:29:04:cc:59:ac:51:05:08:a3:c3:
c1:6d:90:e3:2f:8d:30:5f:c3:14:ff:db:91:52:b4:
99:13:d3:f4:b5:c5:3a:43:6a:af:cf:4c:a3:fe:8a:
ea:d0:ca:4c:a6:db:78:88:0e:47:5f:53:68:d8:f4:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:A1:40:34:87:61:03:37:FC:E9:E2:C7:E4:45:B7:52:36:2E:7B
X509v3 Authority Key Identifier:
keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:e2:2e:a2:66:04:7e:cf:d2:ab:a0:0e:e4:35:26:ca:cf:
1a:74:90:2c:ed:6d:37:d2:f0:1d:c8:36:6d:34:a3:27:06:cb:
f8:34:a6:bf:aa:92:3e:32:50:0a:d0:3f:4f:7f:bb:da:c2:e1:
e3:0a:b4:74:6d:39:c3:e0:33:31:af:a4:c8:48:03:e9:66:d2:
b6:53:02:82:c4:6d:01:38:d6:1c:1a:fa:f3:4a:54:39:62:92:
02:06:a2:e7:8f:c9:be:78:9c:2f:85:16:bc:af:08:18:7b:01:
21:50:e0:b6:92:2e:15:80:cd:25:da:29:97:92:7f:bf:2d:ce:
fa:a4:3b:53:64:10:c7:4d:ac:ab:b1:ed:f3:7a:49:33:23:fe:
4c:18:49:b2:a1:3f:a2:9f:6e:96:34:6e:69:b0:00:43:63:0a:
dc:14:6e:7d:55:02:ef:62:c3:b2:02:c3:bb:09:1e:c6:7b:cb:
34:00:c5:ce:45:04:99:ad:c6:07:fb:63:16:42:52:a1:37:b0:
1f:8d:00:41:e0:af:f2:17:c5:c1:a9:a6:66:b3:15:a8:d4:8b:
f4:75:1a:48:e7:f0:74:4d:d8:4e:11:2e:69:20:a0:48:9c:4e:
3b:8b:4d:66:81:07:bc:7e:46:b7:e3:8a:e8:e8:33:0a:de:b4:
9e:52:4c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4wZuIRmNP+7ZUOSQXkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYzlmZDM3Yzc0MzFjZTZhYTNjOTNhNjk1MmM2N2YwZjBj
OTg0NmUwHhcNMjUxMTExMDcwMDQ1WhcNMjUxMTEyMDcwMDQ1WjAzMTEwLwYDVQQD
EyhjZjAyYTE0MDM0ODc2MTAzMzdmY2U5ZTJjN2U0NDViNzUyMzYyZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1XbwXE4nRu6Wr1RjyP+DfswXRXZ
qUtMo+82nM5tWjuHDAy5rivgHamtoYVDgEvF4qVBA6JL8gTjQs3FHts3lY9Sg1EA
xDOFj2dN0p4rJmFD7dqBI+vMQoHqu0VM5BRdmyL8JypQm59tUOAEmFmzVOD25ghF
JSZ6HNCClxJcaQOeSnN2Y797t/Mc0FU6bP0NRKs9VJyXwciCSeczHOuIedeqyHMY
68ea/aJGlLhnv3O9QdoR/h18AVZEraeGJY8U8xOvKGv48ikEzFmsUQUIo8PBbZDj
L40wX8MU/9uRUrSZE9P0tcU6Q2qvz0yj/orq0MpMptt4iA5HX1No2PRIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8CoUA0h2EDN/zp4sfkRbdSNi57MB8GA1UdIwQY
MBaAFBPJ/TfHQxzmqjyTppUsZ/DwyYRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUt
NmEzZGZiNDdmOGM0LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUtNmEzZGZiNDdmOGM0
LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8niLqJm
BH7P0qugDuQ1JsrPGnSQLO1tN9LwHcg2bTSjJwbL+DSmv6qSPjJQCtA/T3+72sLh
4wq0dG05w+AzMa+kyEgD6WbStlMCgsRtATjWHBr680pUOWKSAgai54/JvnicL4UW
vK8IGHsBIVDgtpIuFYDNJdopl5J/vy3O+qQ7U2QQx02sq7Ht83pJMyP+TBhJsqE/
op9uljRuabAAQ2MK3BRufVUC72LDsgLDuwkexnvLNADFzkUEma3GB/tjFkJSoTew
H40AQeCv8hfFwammZrMVqNSL9HUaSOfwdE3YThEuaSCgSJxOO4tNZoEHvH5Gt+OK
6OgzCt60nlJMRQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:16 2025 by rpki-client