Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
File: 8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json)
Hash identifier: eWlIwgzUfY222ZzAiNHrpxqBwNUm5KOw/QLioAtqS3o=
Subject key identifier: CB:26:2F:00:9D:4F:0F:38:0E:34:49:D1:EA:63:41:34:AC:C8:79:68
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Certificate issuer: /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial: 019A706E0C327F3A25427CAEA4E19A9001E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
Manifest number: 0B09
Signing time: Tue 11 Nov 2025 01:00:51 +0000
Manifest this update: Tue 11 Nov 2025 01:00:51 +0000
Manifest next update: Wed 12 Nov 2025 01:00:51 +0000
Files and hashes: 1: 3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa (hash: DLWTw4UKdSLOETh6kocBhjPqoC9NP+EApW6Oj+8OWfw=)
2: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: 9TbguRjJj2RGHTf0Fd8Gq2aZ803SzOAkhulhY5BG0Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:0c:32:7f:3a:25:42:7c:ae:a4:e1:9a:90:01:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Validity
Not Before: Nov 11 01:00:51 2025 GMT
Not After : Nov 12 01:00:51 2025 GMT
Subject: CN=cb262f009d4f0f380e3449d1ea634134acc87968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:ff:f0:b2:2e:57:ca:fb:44:16:7a:fe:9d:
29:79:6e:06:dc:a4:a3:a6:d9:c4:d4:f4:90:1b:ca:
50:35:b4:f0:1c:55:67:3e:0c:61:1c:46:ac:21:10:
80:77:6c:47:fd:7f:b6:15:5d:9c:8b:da:fb:67:b6:
a9:af:97:3b:87:86:5d:f0:47:24:3c:a4:10:5e:b4:
53:3e:4a:21:4d:db:92:ee:9a:6e:2d:f7:76:ec:48:
e6:29:98:95:61:79:64:a5:b0:54:28:41:aa:e1:6e:
2c:49:fd:14:e6:9e:c5:ab:71:ff:89:ac:0a:44:01:
0a:ac:8f:df:22:d2:cf:22:84:a4:23:9c:95:b0:ee:
58:74:03:47:2d:4d:0a:cc:70:95:8b:69:dc:8d:ce:
90:df:e2:95:4e:73:bf:99:b0:e8:c2:00:26:76:0a:
9e:0f:b0:db:9e:c4:a3:75:2a:8f:2f:02:6e:9d:25:
8e:c5:ae:8d:e5:21:e6:08:4e:55:ac:17:f3:e4:9f:
c7:74:5c:5c:41:c6:09:ff:d9:96:de:fd:f4:65:a9:
8a:58:32:3a:40:5c:a9:86:f6:74:9c:92:7c:f1:89:
6b:99:a3:0d:e1:6d:c7:c4:d7:c6:3f:00:28:fb:d9:
c6:67:b0:ae:3c:7c:06:f1:d7:c1:d9:c4:96:3b:e8:
03:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:26:2F:00:9D:4F:0F:38:0E:34:49:D1:EA:63:41:34:AC:C8:79:68
X509v3 Authority Key Identifier:
keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:e8:f1:0f:c2:12:af:d0:8d:3b:7f:b9:b4:38:5f:59:aa:
95:96:05:40:8c:3a:02:34:4e:f2:2e:a7:89:fa:b1:95:fb:98:
4e:53:ae:24:6b:1b:42:d6:50:3d:75:8e:b3:ec:7e:59:20:0f:
a9:3b:3f:40:33:5a:9b:77:4d:8d:b8:c4:80:a5:96:93:1e:bf:
58:29:b0:f5:ce:dc:ba:9d:15:66:6f:45:57:36:c7:1e:ab:b9:
ff:d5:36:cf:ae:0e:c3:26:d6:7f:a2:56:70:28:80:61:60:0d:
e0:4b:27:44:35:9c:6c:8b:7f:bc:f5:c4:91:71:dc:6d:71:14:
8b:d3:9c:c0:ca:84:49:07:ea:95:6f:01:a6:51:50:aa:2e:a3:
df:12:6b:a6:d5:9f:70:76:af:1c:8c:b0:5d:7f:36:b4:80:77:
18:b4:4b:21:f6:06:3b:69:a6:62:d2:0e:2a:91:cf:bf:6b:ab:
00:53:ac:a7:78:bc:a6:cd:2b:86:cb:93:00:76:6b:d5:0e:8e:
22:66:10:fe:73:21:ae:ea:65:15:aa:40:13:f8:c6:4b:e0:6a:
43:00:53:23:cf:fa:ad:89:7b:ef:32:3e:d4:dd:f2:df:d0:29:
f8:2f:61:a1:0a:7b:59:42:86:89:d4:78:ce:9b:1b:54:3a:31:
25:ba:5c:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbgwyfzolQnyupOGakAHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzQ5ODMzZjQzOWI5ZTA2NzdkOGQzYmYxZjUyZGZiZmIy
YzYyNGYwHhcNMjUxMTExMDEwMDUxWhcNMjUxMTEyMDEwMDUxWjAzMTEwLwYDVQQD
EyhjYjI2MmYwMDlkNGYwZjM4MGUzNDQ5ZDFlYTYzNDEzNGFjYzg3OTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcr/8LIuV8r7RBZ6/p0peW4G3KSj
ptnE1PSQG8pQNbTwHFVnPgxhHEasIRCAd2xH/X+2FV2ci9r7Z7apr5c7h4Zd8Eck
PKQQXrRTPkohTduS7ppuLfd27EjmKZiVYXlkpbBUKEGq4W4sSf0U5p7Fq3H/iawK
RAEKrI/fItLPIoSkI5yVsO5YdANHLU0KzHCVi2ncjc6Q3+KVTnO/mbDowgAmdgqe
D7DbnsSjdSqPLwJunSWOxa6N5SHmCE5VrBfz5J/HdFxcQcYJ/9mW3v30ZamKWDI6
QFyphvZ0nJJ88YlrmaMN4W3HxNfGPwAo+9nGZ7CuPHwG8dfB2cSWO+gDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsmLwCdTw84DjRJ0epjQTSsyHloMB8GA1UdIwQY
MBaAFPHEmDP0ObngZ32NO/H1Lfv7LGJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQt
MGYwZmE2YjZlNGJkLzEvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQtMGYwZmE2YjZlNGJk
LzEvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZro8Q/C
Eq/QjTt/ubQ4X1mqlZYFQIw6AjRO8i6nifqxlfuYTlOuJGsbQtZQPXWOs+x+WSAP
qTs/QDNam3dNjbjEgKWWkx6/WCmw9c7cup0VZm9FVzbHHqu5/9U2z64OwybWf6JW
cCiAYWAN4EsnRDWcbIt/vPXEkXHcbXEUi9OcwMqESQfqlW8BplFQqi6j3xJrptWf
cHavHIywXX82tIB3GLRLIfYGO2mmYtIOKpHPv2urAFOsp3i8ps0rhsuTAHZr1Q6O
ImYQ/nMhruplFapAE/jGS+BqQwBTI8/6rYl77zI+1N3y39Ap+C9hoQp7WUKGidR4
zpsbVDoxJbpcZw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:49 2025 by rpki-client