Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: 42K/Bz+6RQgN7c4R8Y2b6sT7u3IfKChZKvtfloSiRPY=
Subject key identifier: E8:42:5A:AF:C8:58:AB:73:7F:95:0E:5A:CC:90:CC:C3:E9:80:7A:B8
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 019A71EEDAF165742FA641B7B8A2C879A5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 06EB
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: zUXsT42EXd5R8D6pqgEQ9ijWsxnId5QCsp9Ez66wBfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:da:f1:65:74:2f:a6:41:b7:b8:a2:c8:79:a5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=e8425aafc858ab737f950e5acc90ccc3e9807ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:29:de:50:12:68:2b:dc:c6:58:a6:7f:27:
7b:de:3b:38:b4:68:c0:18:23:34:b2:20:27:b4:f9:
e7:82:ef:c3:30:e9:0b:25:df:0b:30:78:82:8f:e0:
d4:ae:62:74:a9:9a:b8:84:9d:01:74:a2:44:4f:f1:
36:09:ba:ba:24:b7:b9:55:29:20:9f:0f:3a:ea:3f:
95:fb:3c:38:53:c0:93:98:84:41:29:bb:5a:ce:7c:
87:32:31:42:bd:8e:65:a3:a0:d3:22:ba:01:bb:34:
8e:1c:2d:bb:eb:60:e0:df:94:dd:7d:62:1a:9a:dd:
e9:57:6c:1a:71:01:e0:32:b9:ed:20:8f:a3:02:0c:
5a:31:98:fc:7a:c0:2e:c7:4f:f3:37:56:68:5c:ba:
05:47:b2:1b:1d:18:c6:11:77:9b:f5:44:79:64:96:
35:cb:b0:b4:47:18:ec:2c:c6:ad:c3:b8:c3:89:34:
b8:7d:a3:bb:04:f3:45:a9:6e:96:06:1a:97:00:0a:
4b:cf:9d:31:cc:a3:c6:af:bd:f0:ef:02:e6:d3:61:
bf:7d:5d:66:2b:5b:7f:c5:e5:d1:ee:bf:e4:d9:46:
cf:01:ac:64:36:a2:f5:5c:ec:fa:5b:3d:06:a0:50:
29:66:58:fa:f4:a5:48:29:70:d0:a0:02:50:9d:6d:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:5A:AF:C8:58:AB:73:7F:95:0E:5A:CC:90:CC:C3:E9:80:7A:B8
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:72:d0:24:21:f7:ad:5b:3a:13:40:49:d0:9e:83:9b:1a:
68:00:f8:f4:43:5d:00:74:d3:2a:8a:4d:fb:1e:3e:54:ef:fc:
7c:5c:9f:e3:2b:87:9d:fa:f8:5b:21:6b:d4:6a:14:3b:1a:00:
cb:3c:c0:cc:31:d1:42:e5:0a:c2:a3:a4:50:de:37:25:0b:89:
19:f7:26:96:16:91:a9:fc:8d:a1:27:93:c9:de:5e:d7:38:e0:
0a:b9:ec:93:0f:24:39:c6:0b:bf:1c:76:00:58:e4:b1:66:51:
27:f7:ee:14:5b:ad:30:b1:57:42:ab:44:a0:ee:69:7b:7c:1e:
bc:d6:a1:d2:7e:b2:cb:88:97:17:9d:31:44:67:35:41:bd:86:
a6:2f:db:ad:6e:57:c7:5a:09:9c:af:f8:58:00:d3:fc:5c:02:
15:16:e0:13:18:2c:5f:dd:ca:89:a2:01:35:29:87:6d:a8:8e:
04:f9:90:6f:00:a5:cd:6e:0f:ab:58:e4:21:78:78:81:69:40:
0d:c2:2d:d7:37:ea:65:d2:b7:29:53:c6:4e:97:e6:b0:2b:13:
ac:cb:2a:6d:2a:75:fc:2d:cd:ba:21:7d:41:ce:32:63:6c:9f:
cd:96:a1:46:ec:b0:ae:5c:9b:51:4b:ff:d0:05:f1:be:47:76:
7d:0e:eb:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7trxZXQvpkG3uKLIeaXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGYzMzA5YjNmMThmYmJlYzk5OWM0MTJmZGVmMWRjNDQy
MGU0MmMwHhcNMjUxMTExMDgwMTEwWhcNMjUxMTEyMDgwMTEwWjAzMTEwLwYDVQQD
EyhlODQyNWFhZmM4NThhYjczN2Y5NTBlNWFjYzkwY2NjM2U5ODA3YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlgp3lASaCvcxlimfyd73js4tGjA
GCM0siAntPnngu/DMOkLJd8LMHiCj+DUrmJ0qZq4hJ0BdKJET/E2Cbq6JLe5VSkg
nw866j+V+zw4U8CTmIRBKbtaznyHMjFCvY5lo6DTIroBuzSOHC2762Dg35TdfWIa
mt3pV2wacQHgMrntII+jAgxaMZj8esAux0/zN1ZoXLoFR7IbHRjGEXeb9UR5ZJY1
y7C0RxjsLMatw7jDiTS4faO7BPNFqW6WBhqXAApLz50xzKPGr73w7wLm02G/fV1m
K1t/xeXR7r/k2UbPAaxkNqL1XOz6Wz0GoFApZlj69KVIKXDQoAJQnW3L/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhCWq/IWKtzf5UOWsyQzMPpgHq4MB8GA1UdIwQY
MBaAFNDfMwmz8Y+77JmcQS/e8dxEIOQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yZjcxNWItY2RhZi00MDJjLTkyMDkt
MWZmOTE1YmZlZDk5LzEvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yZjcxNWItY2RhZi00MDJjLTkyMDktMWZmOTE1YmZlZDk5
LzEvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsBy0CQh
961bOhNASdCeg5saaAD49ENdAHTTKopN+x4+VO/8fFyf4yuHnfr4WyFr1GoUOxoA
yzzAzDHRQuUKwqOkUN43JQuJGfcmlhaRqfyNoSeTyd5e1zjgCrnskw8kOcYLvxx2
AFjksWZRJ/fuFFutMLFXQqtEoO5pe3wevNah0n6yy4iXF50xRGc1Qb2Gpi/brW5X
x1oJnK/4WADT/FwCFRbgExgsX93KiaIBNSmHbaiOBPmQbwClzW4Pq1jkIXh4gWlA
DcIt1zfqZdK3KVPGTpfmsCsTrMsqbSp1/C3NuiF9Qc4yY2yfzZahRuywrlybUUv/
0AXxvkd2fQ7rBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:55 2025 by rpki-client