Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: q4q12JyoLW39fzIszrPllIAJE5EcA4MpQWEqFYRWo8o=
Subject key identifier: 0E:58:CB:C7:B9:B1:8E:B4:B8:3E:B9:FE:DD:E8:A9:9D:B0:E2:FE:E6
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 019A71B89EA631ED3BD3E2E0BFFA0F54C2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: yRID2KRkISrQHldD5oUjh1Nml3De1ZtGMT+WpuZO2KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9e:a6:31:ed:3b:d3:e2:e0:bf:fa:0f:54:c2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=0e58cbc7b9b18eb4b83eb9fedde8a99db0e2fee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:07:13:58:ee:61:ff:2c:06:db:a0:88:d7:
f6:49:79:4f:37:45:18:93:fb:a4:f0:3c:18:18:fa:
56:49:3e:d4:9f:e1:4b:bf:10:47:e5:02:32:34:e9:
75:01:ae:a9:b6:eb:1e:ae:59:c3:37:09:c4:f4:07:
5c:ec:bb:07:e3:10:f2:1c:7c:d4:08:4d:be:98:68:
f6:4c:1b:0c:0d:ae:47:1a:a6:48:8f:86:55:e9:ee:
41:ef:83:4c:02:03:27:59:9a:3d:97:77:9b:f9:30:
b0:01:4a:90:8c:fb:c1:2c:80:bc:9f:d9:26:4c:59:
01:bb:b1:12:41:c2:b5:43:71:c3:89:bf:f0:6b:47:
52:e3:44:45:71:e7:14:77:b3:c8:4e:8a:15:7d:9d:
6f:2a:7d:17:6f:89:57:00:2c:6f:7c:ce:12:e3:68:
df:63:3f:ed:e2:35:6c:e8:97:84:c9:27:47:f8:9e:
e5:e9:ba:a7:cd:96:6e:26:e4:bf:b1:84:4c:7c:95:
1a:f3:55:e6:1a:29:8a:d5:13:e0:c2:6d:0e:43:e3:
13:59:a3:4b:ac:90:51:25:30:dd:c8:ee:e0:a3:77:
ec:0d:2a:13:3f:80:8f:41:d6:1b:28:78:7b:c3:c0:
a4:03:e4:06:5b:da:bb:66:9e:39:54:fa:68:71:e1:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:58:CB:C7:B9:B1:8E:B4:B8:3E:B9:FE:DD:E8:A9:9D:B0:E2:FE:E6
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1d:f8:15:df:31:67:53:d8:aa:cb:bb:f4:11:fa:53:8b:85:
54:1c:7e:93:cd:75:98:e3:48:36:6e:73:52:d9:13:10:2d:5c:
aa:39:92:ed:76:31:ca:45:1e:f8:d1:b6:98:d3:ed:94:42:f4:
52:80:11:91:67:ca:b5:68:62:9d:e7:00:51:25:b0:20:60:a3:
4a:c2:30:8f:84:66:c2:e4:0d:27:e9:36:df:d6:cd:27:ff:19:
b3:85:d6:dd:af:cf:6b:3a:4d:81:6c:58:f0:a0:30:50:8f:18:
a1:dd:68:1e:ea:48:6a:35:de:6a:e6:c7:b4:94:0d:6c:08:ef:
be:ed:21:84:00:79:7c:f8:22:bd:33:60:30:b5:b1:4e:57:1a:
f5:47:6c:4d:95:fb:3a:14:c9:81:f2:73:39:95:bd:51:e6:f7:
21:c1:31:2a:6b:79:fe:df:1a:2c:06:04:43:94:2d:0d:26:8c:
2d:55:a6:8e:d0:21:93:12:e4:69:7c:95:b5:da:a5:ea:9d:8f:
8f:d0:34:9b:86:26:e8:2e:57:3d:1c:b9:2e:8e:7b:06:0d:8e:
23:c0:b5:87:07:9e:ca:03:ea:74:20:24:e1:88:ec:aa:31:a3:
80:b7:ba:87:30:b3:e2:6c:be:0b:95:66:0b:e0:26:84:16:d4:
ab:ec:dc:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuJ6mMe070+Lgv/oPVMK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzgwODUxOWYyYjA4MDQ1YzdmYjQxYTYxZmRhNGUwOWU1
MTg5MWIwHhcNMjUxMTExMDcwMTU1WhcNMjUxMTEyMDcwMTU1WjAzMTEwLwYDVQQD
EygwZTU4Y2JjN2I5YjE4ZWI0YjgzZWI5ZmVkZGU4YTk5ZGIwZTJmZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMIHE1juYf8sBtugiNf2SXlPN0UY
k/uk8DwYGPpWST7Un+FLvxBH5QIyNOl1Aa6ptuserlnDNwnE9Adc7LsH4xDyHHzU
CE2+mGj2TBsMDa5HGqZIj4ZV6e5B74NMAgMnWZo9l3eb+TCwAUqQjPvBLIC8n9km
TFkBu7ESQcK1Q3HDib/wa0dS40RFcecUd7PITooVfZ1vKn0Xb4lXACxvfM4S42jf
Yz/t4jVs6JeEySdH+J7l6bqnzZZuJuS/sYRMfJUa81XmGimK1RPgwm0OQ+MTWaNL
rJBRJTDdyO7go3fsDSoTP4CPQdYbKHh7w8CkA+QGW9q7Zp45VPpoceE+0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5Yy8e5sY60uD65/t3oqZ2w4v7mMB8GA1UdIwQY
MBaAFPJ4CFGfKwgEXH+0GmH9pOCeUYkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjct
NTg1NWMxZDE0YzliLzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjctNTg1NWMxZDE0Yzli
LzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEx34Fd8x
Z1PYqsu79BH6U4uFVBx+k811mONINm5zUtkTEC1cqjmS7XYxykUe+NG2mNPtlEL0
UoARkWfKtWhinecAUSWwIGCjSsIwj4RmwuQNJ+k239bNJ/8Zs4XW3a/PazpNgWxY
8KAwUI8Yod1oHupIajXeaubHtJQNbAjvvu0hhAB5fPgivTNgMLWxTlca9UdsTZX7
OhTJgfJzOZW9Ueb3IcExKmt5/t8aLAYEQ5QtDSaMLVWmjtAhkxLkaXyVtdql6p2P
j9A0m4Ym6C5XPRy5Lo57Bg2OI8C1hweeygPqdCAk4YjsqjGjgLe6hzCz4my+C5Vm
C+AmhBbUq+zcJg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:02 2025 by rpki-client