Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: yOaBz3l506fuKMwMjhK3yPp/5h6K97/MEB7ZFNpaE54=
Subject key identifier: FF:35:D9:67:E0:B8:7A:D1:FB:73:4C:B7:25:B4:35:76:4A:8E:58:46
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019A28C2CB5871E527EDBA3BD8AF1ECC7496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 12E9
Signing time: Tue 28 Oct 2025 03:00:45 +0000
Manifest this update: Tue 28 Oct 2025 03:00:45 +0000
Manifest next update: Wed 29 Oct 2025 03:00:45 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: HO3IWzGCu2PUpamLlK6M3g61LDR+wAB/WXeyq9506Ww=)
2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=)
3: Ui6ZcVR5VSgOavfnIix1oy38mjY.roa (hash: yRTuvXTUZnIOOWWsEOiOGa2OWkTQmK3kH5dqt1VxT5k=)
4: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:cb:58:71:e5:27:ed:ba:3b:d8:af:1e:cc:74:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Oct 28 03:00:45 2025 GMT
Not After : Oct 29 03:00:45 2025 GMT
Subject: CN=ff35d967e0b87ad1fb734cb725b435764a8e5846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:3b:24:45:4f:93:0c:11:cc:7e:be:9f:6b:
c0:ee:6f:1e:93:96:7d:ec:c4:3c:20:6c:bb:d2:d4:
ab:65:91:07:e0:10:7d:bf:5b:34:f2:61:f5:eb:40:
3d:44:79:55:b9:fd:00:93:df:3c:cd:27:9b:7d:26:
0e:40:f6:a0:fd:7c:3d:8f:17:70:f7:18:69:6c:99:
99:c7:07:6b:e5:28:7e:7c:57:ba:06:3e:b0:86:bd:
77:9d:eb:15:fa:f3:82:50:37:46:8a:39:fb:9c:38:
81:ad:b4:7d:b6:d4:c3:05:be:7e:50:bf:f5:c0:98:
3f:6e:37:2d:b1:9d:60:ae:29:e6:53:44:92:88:77:
e2:87:22:3e:e2:8f:53:16:c1:4c:02:e2:2d:88:53:
6d:c2:14:79:e5:6f:9a:7d:e8:ad:73:71:b5:f7:1f:
3c:35:5d:43:f3:0d:fe:9b:86:7e:56:6c:42:be:bd:
5a:cf:21:6c:55:a1:fd:cd:0c:12:d1:74:51:1a:75:
40:6d:a8:56:2d:7e:d9:3b:fc:7f:5a:8b:32:15:c1:
0e:c4:f5:32:25:96:28:76:19:c1:44:45:64:42:43:
12:75:ac:7b:4e:5f:d5:3a:ed:d4:73:cb:97:41:8e:
58:2f:50:54:0e:83:64:69:43:5e:07:56:d8:47:b0:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:D9:67:E0:B8:7A:D1:FB:73:4C:B7:25:B4:35:76:4A:8E:58:46
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:69:28:2e:5a:50:ef:40:66:91:c3:f7:63:1c:54:88:05:2c:
d2:f4:30:32:72:d2:68:e4:72:2d:11:a0:e0:7a:da:1f:c8:1e:
26:9a:3d:ef:30:62:39:ce:11:a8:97:59:a6:80:5c:ea:dc:e8:
8c:6c:e9:a9:09:8c:aa:cb:28:f0:f9:6b:b3:20:84:59:f2:bc:
aa:18:06:e6:4b:7c:9e:65:68:37:35:52:5b:8f:04:49:c8:67:
66:8a:70:52:2a:30:f8:ed:7a:b2:f5:a7:f1:30:61:fe:2a:65:
ee:dd:8f:41:e0:e1:18:54:0d:c2:1e:45:cc:7c:dc:c3:ae:4c:
13:d9:65:ba:9c:b3:94:d7:8b:2d:e9:91:fa:86:70:11:8e:c8:
90:04:96:3d:c2:42:39:96:6e:12:4a:9c:d9:27:18:95:25:fe:
70:7d:4f:61:54:eb:d4:eb:c2:9d:85:9f:b0:e7:ac:57:c2:d8:
43:91:43:cc:23:f7:29:da:92:f3:f7:eb:5c:f4:a1:3e:5b:89:
94:0f:61:5b:94:ea:2d:9c:f1:1f:5b:4b:82:33:03:f3:29:fa:
d4:26:7f:79:38:92:fe:d7:a1:37:bc:b1:e3:7b:10:88:1b:97:
af:bb:a1:e5:86:df:ff:0f:9a:cd:02:d7:26:ff:8a:fc:da:66:
bb:db:24:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoowstYceUn7bo72K8ezHSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm
NWMzZDcwHhcNMjUxMDI4MDMwMDQ1WhcNMjUxMDI5MDMwMDQ1WjAzMTEwLwYDVQQD
EyhmZjM1ZDk2N2UwYjg3YWQxZmI3MzRjYjcyNWI0MzU3NjRhOGU1ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyM7JEVPkwwRzH6+n2vA7m8ek5Z9
7MQ8IGy70tSrZZEH4BB9v1s08mH160A9RHlVuf0Ak988zSebfSYOQPag/Xw9jxdw
9xhpbJmZxwdr5Sh+fFe6Bj6whr13nesV+vOCUDdGijn7nDiBrbR9ttTDBb5+UL/1
wJg/bjctsZ1grinmU0SSiHfihyI+4o9TFsFMAuItiFNtwhR55W+afeitc3G19x88
NV1D8w3+m4Z+VmxCvr1azyFsVaH9zQwS0XRRGnVAbahWLX7ZO/x/WosyFcEOxPUy
JZYodhnBREVkQkMSdax7Tl/VOu3Uc8uXQY5YL1BUDoNkaUNeB1bYR7BK9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP812WfguHrR+3NMtyW0NXZKjlhGMB8GA1UdIwQY
MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct
YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw
LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2koLlpQ
70BmkcP3YxxUiAUs0vQwMnLSaORyLRGg4HraH8geJpo97zBiOc4RqJdZpoBc6tzo
jGzpqQmMqsso8PlrsyCEWfK8qhgG5kt8nmVoNzVSW48ESchnZopwUiow+O16svWn
8TBh/ipl7t2PQeDhGFQNwh5FzHzcw65ME9llupyzlNeLLemR+oZwEY7IkASWPcJC
OZZuEkqc2ScYlSX+cH1PYVTr1OvCnYWfsOesV8LYQ5FDzCP3KdqS8/frXPShPluJ
lA9hW5TqLZzxH1tLgjMD8yn61CZ/eTiS/tehN7yx43sQiBuXr7uh5Ybf/w+azQLX
Jv+K/Npmu9skYg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:47:50 2025 by rpki-client