Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier: I44oeK3wzpnRgaezzP0lEmOOInezI2ehM4gXgCj84WM=
Subject key identifier: 43:92:D8:49:7B:96:0F:10:11:E5:08:B2:DA:A7:10:47:F7:B0:07:CE
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer: /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial: 019A722624D945C501690500D750C02E18D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number: 0BFF
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: wlDvENyyw3DZifJC0UZApf2w/14vMaNij4VbUuZUeik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:24:d9:45:c5:01:69:05:00:d7:50:c0:2e:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=4392d8497b960f1011e508b2daa71047f7b007ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:4c:73:08:59:03:71:91:62:4b:1f:80:3f:
dd:94:6a:c0:72:59:1e:10:f5:0b:db:c4:d9:56:69:
5e:6e:a2:16:17:7f:30:df:8c:bc:fa:18:24:0c:12:
54:4f:9f:dc:9a:45:a8:77:16:e4:98:35:88:6b:54:
fd:00:4b:df:c5:45:d6:be:b3:bc:8d:c2:f2:65:0f:
81:b6:2f:4b:e3:97:02:07:4e:72:1e:e8:1d:fd:9a:
c2:17:43:ba:b5:1b:75:2a:86:ca:e1:84:57:0a:0c:
60:cb:df:46:8e:23:22:54:b6:a5:f7:2a:5c:cf:6d:
ca:7c:74:e8:17:bc:08:d0:fd:cd:b2:c4:5c:c9:03:
f3:46:fa:f2:f4:de:c0:04:0a:20:43:8e:e1:2a:1f:
f1:d9:f9:e9:ac:22:77:2a:b0:f0:b7:4b:06:db:8a:
70:50:ca:99:27:7c:a4:44:2c:a1:11:c0:e1:8f:4c:
05:8b:2b:16:1e:31:e4:0f:b3:70:61:36:ce:20:b4:
94:3b:e7:f1:e6:8a:a2:72:a8:32:ea:b7:fa:3c:5e:
69:f9:69:e3:ce:9d:92:6d:a0:c9:30:f6:b2:be:05:
76:c6:6f:9c:63:74:21:b1:07:87:d9:35:bd:42:c5:
a7:6b:41:10:3a:1a:44:e7:99:78:20:a0:d9:e5:d2:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:D8:49:7B:96:0F:10:11:E5:08:B2:DA:A7:10:47:F7:B0:07:CE
X509v3 Authority Key Identifier:
keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:31:54:9e:16:72:9a:23:78:43:64:e0:32:90:a7:79:15:20:
f4:2b:0a:d8:86:d0:f3:69:37:6a:65:d5:e2:00:dd:3e:f8:d3:
17:1a:ff:22:3a:21:57:a6:b1:0f:51:1c:66:3f:6d:55:cf:f2:
b0:23:78:88:1c:ac:4e:0c:cf:1f:b6:ee:7d:34:a9:d3:f9:10:
83:a3:e0:0d:93:09:b1:a9:03:14:71:46:55:eb:f1:ed:31:12:
67:77:81:df:94:a9:4c:b8:6b:f3:7b:c9:da:2e:5f:04:29:90:
d9:6f:bf:e6:49:b9:2a:ff:bf:35:4d:21:e0:1d:8b:a6:2f:72:
3a:4e:30:cd:8b:79:ec:3f:be:42:84:fa:49:be:22:35:a8:4e:
57:dd:fa:25:56:c0:13:e0:9d:5b:d1:0f:a6:2c:4f:57:bb:41:
cd:e1:f4:6a:91:13:92:64:f6:44:55:ca:20:d0:8c:c2:12:34:
94:32:b0:2a:fb:39:68:62:2c:12:f0:dc:e4:7f:85:1c:0e:0b:
66:68:6c:1a:ef:b0:c0:49:4c:b6:03:3c:dd:9e:e5:68:af:14:
39:2a:94:55:eb:d9:16:33:76:3f:f7:b0:0a:07:84:88:4b:3d:
27:8b:fc:35:aa:df:f7:df:1d:ff:b6:89:9e:0b:fd:ff:88:43:
c5:6a:f0:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJiTZRcUBaQUA11DALhjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzc3NGEyNzYyMTRiODZlMGE1YjRmYTc3MjFiZGIwZTMy
MmUwODAwHhcNMjUxMTExMDkwMTMzWhcNMjUxMTEyMDkwMTMzWjAzMTEwLwYDVQQD
Eyg0MzkyZDg0OTdiOTYwZjEwMTFlNTA4YjJkYWE3MTA0N2Y3YjAwN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt1McwhZA3GRYksfgD/dlGrAclke
EPUL28TZVmlebqIWF38w34y8+hgkDBJUT5/cmkWodxbkmDWIa1T9AEvfxUXWvrO8
jcLyZQ+Bti9L45cCB05yHugd/ZrCF0O6tRt1KobK4YRXCgxgy99GjiMiVLal9ypc
z23KfHToF7wI0P3NssRcyQPzRvry9N7ABAogQ47hKh/x2fnprCJ3KrDwt0sG24pw
UMqZJ3ykRCyhEcDhj0wFiysWHjHkD7NwYTbOILSUO+fx5oqicqgy6rf6PF5p+Wnj
zp2SbaDJMPayvgV2xm+cY3QhsQeH2TW9QsWna0EQOhpE55l4IKDZ5dKLiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOS2El7lg8QEeUIstqnEEf3sAfOMB8GA1UdIwQY
MBaAFPA3dKJ2IUuG4KW0+nchvbDjIuCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERkMG9uWWhTNGJncGJUNmR5RzlzT01pNElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZWQ4ODMtMzc2YS00NWY5LTg4ODQt
YjgxNjIyNjAxMjRmLzEvOERkMG9uWWhTNGJncGJUNmR5RzlzT01pNElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xZWQ4ODMtMzc2YS00NWY5LTg4ODQtYjgxNjIyNjAxMjRm
LzEvOERkMG9uWWhTNGJncGJUNmR5RzlzT01pNElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjFUnhZy
miN4Q2TgMpCneRUg9CsK2IbQ82k3amXV4gDdPvjTFxr/IjohV6axD1EcZj9tVc/y
sCN4iBysTgzPH7bufTSp0/kQg6PgDZMJsakDFHFGVevx7TESZ3eB35SpTLhr83vJ
2i5fBCmQ2W+/5km5Kv+/NU0h4B2Lpi9yOk4wzYt57D++QoT6Sb4iNahOV936JVbA
E+CdW9EPpixPV7tBzeH0apETkmT2RFXKINCMwhI0lDKwKvs5aGIsEvDc5H+FHA4L
ZmhsGu+wwElMtgM83Z7laK8UOSqUVevZFjN2P/ewCgeEiEs9J4v8Narf998d/7aJ
ngv9/4hDxWrwGg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:04 2025 by rpki-client