Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: 0IMyBOR61sNsH4uY9Ov2ZUaxnvVXL7Ret69NObFU6EY=
Subject key identifier: 04:98:EA:A6:55:72:83:B2:3B:9F:E2:D0:53:4B:AC:F2:B4:94:61:3D
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 019A07EE280199A8FE9C6454B285EE09354D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 0876
Signing time: Tue 21 Oct 2025 18:00:39 +0000
Manifest this update: Tue 21 Oct 2025 18:00:39 +0000
Manifest next update: Wed 22 Oct 2025 18:00:39 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: cDxWBqPoK7Q+Om2pj98fwVtd6o54eKHJT2qqXycqyzA=)
2: ldnhn_HcdxbmKydPEkl1v4zgEq4.roa (hash: SSQVI5X02ZNHeqKS7hQmKhf33IKgywQaf0lBe0I6EpY=)
3: o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa (hash: B+fFcwV95+as9F86sHUOjXkwuPQBko5Sfhe+H4+0kBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ee:28:01:99:a8:fe:9c:64:54:b2:85:ee:09:35:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Oct 21 18:00:39 2025 GMT
Not After : Oct 22 18:00:39 2025 GMT
Subject: CN=0498eaa6557283b23b9fe2d0534bacf2b494613d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:b2:ee:66:e9:d1:5f:c2:e2:4e:92:d9:c3:
21:86:b4:9e:56:63:d4:95:1c:3f:09:f1:02:34:01:
75:90:02:c7:0b:03:5e:0c:5d:10:3b:ff:43:8e:86:
24:76:59:76:5d:11:89:f6:6f:cf:5d:d4:2e:0f:e3:
8d:7d:78:29:c1:d8:94:54:9c:97:e6:45:2d:aa:8d:
77:e1:72:14:75:a9:90:ca:e7:8a:20:96:ff:4c:e1:
fa:40:15:3c:da:c1:77:3a:2d:7e:80:c1:d9:7a:9f:
fb:94:bb:cf:2b:28:e9:05:53:50:2c:33:5d:18:5b:
9a:4e:bd:e5:58:84:d5:dc:4e:d0:81:53:b1:7e:05:
64:f0:d3:88:dd:f1:78:f9:d8:c1:d7:41:67:4a:a7:
6d:a0:02:87:a0:8a:0d:97:af:98:7b:b6:49:93:96:
e8:97:26:fd:cc:b3:77:db:0a:6b:8b:53:64:69:aa:
42:53:1b:d9:f4:eb:8f:53:74:75:72:0b:65:28:e1:
d0:b9:54:62:d9:e4:c5:1e:4c:a1:28:0c:14:e3:74:
fc:c7:f8:c9:a6:2c:b5:85:34:6d:04:02:af:71:1e:
0f:79:52:20:d2:15:b2:42:3c:73:77:ae:89:bf:cc:
69:8e:7a:5e:d6:a6:50:1c:ff:fb:dd:02:b7:2d:b1:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:98:EA:A6:55:72:83:B2:3B:9F:E2:D0:53:4B:AC:F2:B4:94:61:3D
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1e:01:8f:8b:ac:27:76:40:eb:a6:1b:b1:b4:43:85:15:fa:
9f:c5:2f:1a:a3:59:7c:77:d6:b0:3f:d7:a1:f0:f3:39:03:95:
f4:0b:42:d4:9e:95:c2:00:09:d4:53:4f:cb:e2:77:9e:60:97:
d7:11:64:db:c9:a8:b4:8a:44:18:0e:db:bf:13:4b:b6:01:0f:
38:24:0c:0f:d5:ed:cb:6f:03:c1:b3:29:b8:13:42:b2:aa:2a:
6e:6a:b3:2f:ea:a1:c1:05:48:64:21:82:a1:ab:60:2d:42:ea:
2b:6d:fd:e3:d2:b7:0c:00:d7:dc:49:b7:44:8f:03:da:68:8e:
dc:50:84:ba:f1:fb:46:2e:99:bc:e2:23:53:cb:51:d4:69:63:
b4:6e:63:0f:35:d4:28:69:61:db:7b:f6:91:f1:73:2c:72:76:
de:85:75:f9:d0:da:a1:76:6f:d3:a3:a4:8e:1e:cb:6e:a3:5b:
fd:3e:f6:6b:79:91:e2:b7:45:03:28:47:22:a9:79:56:f7:27:
7a:26:76:37:66:b1:d9:77:50:b5:ff:e8:97:78:2c:20:34:c0:
be:55:44:b0:a8:28:e4:b2:2e:3e:3a:fe:bd:28:9a:9b:00:a6:
e6:fb:4c:0e:cc:0d:f6:70:7c:b9:bc:5a:30:27:fe:26:95:60:
91:d2:3c:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoH7igBmaj+nGRUsoXuCTVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzExMzQxM2QwZGY1YjhmYTA2OTAxMWVlYjEwOWYwNjdi
NTU3OWEwHhcNMjUxMDIxMTgwMDM5WhcNMjUxMDIyMTgwMDM5WjAzMTEwLwYDVQQD
EygwNDk4ZWFhNjU1NzI4M2IyM2I5ZmUyZDA1MzRiYWNmMmI0OTQ2MTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31Ky7mbp0V/C4k6S2cMhhrSeVmPU
lRw/CfECNAF1kALHCwNeDF0QO/9DjoYkdll2XRGJ9m/PXdQuD+ONfXgpwdiUVJyX
5kUtqo134XIUdamQyueKIJb/TOH6QBU82sF3Oi1+gMHZep/7lLvPKyjpBVNQLDNd
GFuaTr3lWITV3E7QgVOxfgVk8NOI3fF4+djB10FnSqdtoAKHoIoNl6+Ye7ZJk5bo
lyb9zLN32wpri1NkaapCUxvZ9OuPU3R1cgtlKOHQuVRi2eTFHkyhKAwU43T8x/jJ
piy1hTRtBAKvcR4PeVIg0hWyQjxzd66Jv8xpjnpe1qZQHP/73QK3LbFnGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASY6qZVcoOyO5/i0FNLrPK0lGE9MB8GA1UdIwQY
MBaAFPDBE0E9DfW4+gaQEe6xCfBntVeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9jMTA0YzYtOWI2NS00ZDQ2LTllNDUt
NTAyNjFiMTE5MTZiLzEvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9jMTA0YzYtOWI2NS00ZDQ2LTllNDUtNTAyNjFiMTE5MTZi
LzEvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx4Bj4us
J3ZA66YbsbRDhRX6n8UvGqNZfHfWsD/XofDzOQOV9AtC1J6VwgAJ1FNPy+J3nmCX
1xFk28motIpEGA7bvxNLtgEPOCQMD9Xty28DwbMpuBNCsqoqbmqzL+qhwQVIZCGC
oatgLULqK23949K3DADX3Em3RI8D2miO3FCEuvH7Ri6ZvOIjU8tR1GljtG5jDzXU
KGlh23v2kfFzLHJ23oV1+dDaoXZv06Okjh7LbqNb/T72a3mR4rdFAyhHIql5Vvcn
eiZ2N2ax2XdQtf/ol3gsIDTAvlVEsKgo5LIuPjr+vSiamwCm5vtMDswN9nB8ubxa
MCf+JpVgkdI8ZA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 02:25:38 2025 by rpki-client