Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File: 8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier: gzVSbqxXTc1FFBAMmHUkfUVOxNxhs313xx7Zsjhb72U=
Subject key identifier: BB:91:A3:C8:60:51:B6:AC:BD:02:0C:09:B4:69:ED:78:E2:90:88:16
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer: /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial: 019A72267C17190013BD47ACA5D5E2517F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number: 0B6B
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: un+HvWKoeqFwoz6ode+bmare2t9qSq+X7lp70kKGQxg=)
2: TqtHjEwEgPXdT8pg7HJGWpoB6aI.roa (hash: JiojTj7/u167MnISfmEDzN29ADgR4Ig1J4bZKyBHw7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7c:17:19:00:13:bd:47:ac:a5:d5:e2:51:7f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=bb91a3c86051b6acbd020c09b469ed78e2908816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:0b:9a:76:e2:2d:cf:5e:2e:b5:01:96:84:
9d:ec:13:88:b6:3e:90:60:47:87:28:53:3e:37:72:
0f:82:8f:49:d5:6f:33:05:61:34:19:8b:56:02:f7:
73:a3:9d:08:c7:5a:f2:f9:b4:f5:ed:b6:59:76:47:
f2:fb:d4:67:d4:b9:ed:2a:da:4f:b0:8c:79:2d:d9:
61:f8:a9:82:a4:91:92:8b:60:fb:41:a7:d8:29:7e:
60:c1:02:ea:c2:ab:91:aa:a6:77:63:ad:21:4b:d4:
f8:5e:2a:11:db:14:45:e0:9b:cc:7e:e2:0d:bc:5a:
b5:a5:37:f3:64:d3:cf:93:0d:02:d8:10:c8:0d:2b:
d9:ec:4e:45:d3:01:40:06:0e:5f:33:c7:92:32:5a:
61:5b:90:b6:ec:fa:a5:2f:fb:2f:39:6d:00:21:68:
e4:1c:cf:c5:b6:c2:3f:41:63:3a:2e:f4:a6:ae:1b:
83:f9:4b:95:fb:47:a8:4e:d0:44:dd:5b:44:fa:e4:
4e:fb:1e:e7:84:dd:19:87:d5:3f:75:4c:34:7e:43:
66:7c:24:90:be:55:ca:18:e9:64:96:d4:c1:7d:41:
b2:20:45:37:3d:b9:3c:9e:45:a2:a9:4a:d7:5a:e8:
8a:1f:18:52:b7:b9:c7:40:83:f3:25:89:ff:b4:8a:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:A3:C8:60:51:B6:AC:BD:02:0C:09:B4:69:ED:78:E2:90:88:16
X509v3 Authority Key Identifier:
keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:69:0d:a3:75:4e:9b:1d:2a:4e:b0:b3:96:3e:ea:73:89:
98:c0:27:df:96:1c:b9:1d:28:8d:ec:8f:fe:3f:5c:90:d5:7b:
b4:25:ac:b4:21:8a:bd:bd:94:25:3f:07:44:36:e2:68:d4:c3:
92:d4:95:ef:77:5f:1b:6c:b4:9c:d1:45:0e:b3:a9:d9:d8:85:
b2:d9:55:e4:8d:5b:7a:8e:a2:a0:9f:24:94:01:c1:9a:1a:ca:
a3:3b:c6:26:e3:69:82:1e:53:e2:e7:3f:44:1a:36:8e:97:96:
03:f8:31:c1:2a:04:0f:47:64:83:97:41:f6:24:28:3f:52:d4:
10:af:b6:d3:c2:82:73:88:cb:8b:5d:01:0c:26:e2:c4:1c:07:
68:f2:3d:7f:19:ed:88:9d:e5:1f:87:c1:cf:b8:60:3d:da:f2:
10:79:ff:e8:ce:34:6c:9b:fc:f7:c1:5e:15:d6:84:f9:c7:48:
35:e2:a6:8f:f3:50:67:73:e5:4e:bf:27:27:90:e0:c4:74:03:
72:8b:b7:32:38:d0:c1:2b:c4:3c:4e:e3:3c:38:e0:0e:9f:42:
91:51:73:67:e8:fc:83:d1:a1:e4:27:53:69:f4:9f:4f:3e:12:
c8:93:1a:86:06:7c:9a:98:76:f5:63:25:2c:93:62:25:e3:6e:
c7:fd:02:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJnwXGQATvUespdXiUX81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMWE5YTQ0NTU3ZDQ2ZmYyZDgwODhhMjI4ODg1YWZmMDAw
ZGMyYTIwHhcNMjUxMTExMDkwMTU1WhcNMjUxMTEyMDkwMTU1WjAzMTEwLwYDVQQD
EyhiYjkxYTNjODYwNTFiNmFjYmQwMjBjMDliNDY5ZWQ3OGUyOTA4ODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8ILmnbiLc9eLrUBloSd7BOItj6Q
YEeHKFM+N3IPgo9J1W8zBWE0GYtWAvdzo50Ix1ry+bT17bZZdkfy+9Rn1LntKtpP
sIx5Ldlh+KmCpJGSi2D7QafYKX5gwQLqwquRqqZ3Y60hS9T4XioR2xRF4JvMfuIN
vFq1pTfzZNPPkw0C2BDIDSvZ7E5F0wFABg5fM8eSMlphW5C27PqlL/svOW0AIWjk
HM/FtsI/QWM6LvSmrhuD+UuV+0eoTtBE3VtE+uRO+x7nhN0Zh9U/dUw0fkNmfCSQ
vlXKGOlkltTBfUGyIEU3Pbk8nkWiqUrXWuiKHxhSt7nHQIPzJYn/tIoYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuRo8hgUbasvQIMCbRp7XjikIgWMB8GA1UdIwQY
MBaAFPEamkRVfUb/LYCIoiiIWv8ADcKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wN2U0YjItNmIzOC00YmMwLWE2ODAt
YTYwYmM3ZDA3ODc4LzEvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8wN2U0YjItNmIzOC00YmMwLWE2ODAtYTYwYmM3ZDA3ODc4
LzEvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICNpDaN1
TpsdKk6ws5Y+6nOJmMAn35YcuR0ojeyP/j9ckNV7tCWstCGKvb2UJT8HRDbiaNTD
ktSV73dfG2y0nNFFDrOp2diFstlV5I1beo6ioJ8klAHBmhrKozvGJuNpgh5T4uc/
RBo2jpeWA/gxwSoED0dkg5dB9iQoP1LUEK+208KCc4jLi10BDCbixBwHaPI9fxnt
iJ3lH4fBz7hgPdryEHn/6M40bJv898FeFdaE+cdINeKmj/NQZ3PlTr8nJ5DgxHQD
cou3MjjQwSvEPE7jPDjgDp9CkVFzZ+j8g9Gh5CdTafSfTz4SyJMahgZ8mph29WMl
LJNiJeNux/0Cww==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:26 2025 by rpki-client