Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
File: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft (raw, json)
Hash identifier: zXcwGHdIuWX53UUjUqoSJ/fv9Ms+3gYYS9FKIq8fbao=
Subject key identifier: EE:5B:29:D9:2A:40:FB:E2:BD:3A:0C:32:64:C7:04:ED:8D:EE:06:20
Authority key identifier: F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
Certificate issuer: /CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Certificate serial: 019A70A506FD663DF9DA797E7827212A52F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
Manifest number: 015C
Signing time: Tue 11 Nov 2025 02:00:54 +0000
Manifest this update: Tue 11 Nov 2025 02:00:54 +0000
Manifest next update: Wed 12 Nov 2025 02:00:54 +0000
Files and hashes: 1: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl (hash: Kys+Vm4zZpQY8pXAB9clZvKhbAiJ+bFlACoBgrHd4s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:06:fd:66:3d:f9:da:79:7e:78:27:21:2a:52:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Validity
Not Before: Nov 11 02:00:54 2025 GMT
Not After : Nov 12 02:00:54 2025 GMT
Subject: CN=ee5b29d92a40fbe2bd3a0c3264c704ed8dee0620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:9e:0a:4a:f4:1f:15:eb:1e:ae:e4:1d:5f:
ed:34:1d:b6:d3:de:af:44:2c:3c:a8:f1:70:cc:f4:
f5:25:ae:d9:5a:c6:7f:26:06:00:3c:46:0f:06:2b:
e3:13:c0:8f:49:63:85:7b:b8:fa:e3:1c:c3:75:8e:
b9:fe:63:01:5c:5e:d7:98:17:a4:7e:60:3a:b8:1a:
36:b8:2b:f2:ba:7b:c2:72:8a:4a:28:f2:8d:5b:a6:
fa:70:a6:df:7a:68:03:88:aa:50:a1:1b:d0:eb:cc:
f7:e1:fc:60:0c:69:cb:e0:ed:23:d3:01:b3:dc:f4:
f5:77:e7:f1:ad:43:87:8a:b7:d6:8e:b1:82:cc:47:
84:c4:cf:51:dc:a7:0f:45:f1:3f:73:43:8e:cd:ad:
22:81:12:fd:47:b0:0f:0d:db:32:a3:e1:15:be:eb:
ca:21:5e:2f:86:e8:4f:8d:d6:3c:d0:d9:d5:f9:d0:
c7:37:33:99:d3:35:38:d2:e5:fc:3f:1a:0b:27:6b:
82:97:d8:f0:96:a7:c8:3e:b2:2e:75:12:f8:66:1d:
40:23:5b:ef:0c:8c:4d:de:7c:cb:a7:14:4f:a9:39:
c3:9d:48:c8:1f:74:76:f4:42:c7:ad:e5:ed:04:3d:
9c:e4:f3:95:c5:d9:d7:b2:6d:90:2d:7e:34:2e:63:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5B:29:D9:2A:40:FB:E2:BD:3A:0C:32:64:C7:04:ED:8D:EE:06:20
X509v3 Authority Key Identifier:
keyid:F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:53:5f:36:c4:57:fc:03:de:ea:68:02:ab:36:f5:4b:e0:20:
ee:fb:af:82:fd:d3:09:04:f4:0b:b9:ed:70:d7:84:95:3b:06:
f7:b1:f2:24:fe:2a:ce:de:96:89:e8:cf:e6:a2:4a:23:a0:41:
f7:8d:ce:4d:15:2e:5c:6a:c4:1f:f0:83:5b:41:55:27:06:44:
ef:1b:a3:1c:4f:e4:9f:74:bc:ec:d3:10:69:aa:a6:d1:3e:5b:
4f:48:eb:96:eb:0f:c1:27:38:ec:73:83:9c:37:d7:bc:0e:35:
91:13:40:b3:3c:0a:ba:bd:f6:1e:16:9b:6f:83:f9:a5:8c:3f:
40:3d:c4:cb:06:fd:bd:dd:9f:19:a5:2d:16:6e:25:ca:8d:8b:
c7:fe:00:94:d3:89:8e:ec:5d:4e:a1:6a:05:e2:3a:5f:9e:df:
e7:bf:51:c8:dd:b4:e2:bf:4f:24:b4:0d:ae:fa:38:a0:f4:6b:
09:ef:82:4a:c2:60:1b:30:34:ad:e0:7d:f5:ae:c4:a8:01:ce:
11:76:36:e3:34:78:84:a9:ce:1b:aa:f9:99:96:66:0c:50:69:
1b:16:61:4b:11:34:2e:06:5e:ec:e5:53:12:94:82:92:29:54:
05:f8:6b:1c:79:a3:8f:58:0a:a4:02:7a:fb:28:7e:11:c5:57:
71:1e:56:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpQb9Zj352nl+eCchKlL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmRkMGRmYzIxZmNiMmY0MWM4NDFkMzU4OTY5MWIyMmI5
ZWVhMDUwHhcNMjUxMTExMDIwMDU0WhcNMjUxMTEyMDIwMDU0WjAzMTEwLwYDVQQD
EyhlZTViMjlkOTJhNDBmYmUyYmQzYTBjMzI2NGM3MDRlZDhkZWUwNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo32eCkr0HxXrHq7kHV/tNB22096v
RCw8qPFwzPT1Ja7ZWsZ/JgYAPEYPBivjE8CPSWOFe7j64xzDdY65/mMBXF7XmBek
fmA6uBo2uCvyunvCcopKKPKNW6b6cKbfemgDiKpQoRvQ68z34fxgDGnL4O0j0wGz
3PT1d+fxrUOHirfWjrGCzEeExM9R3KcPRfE/c0OOza0igRL9R7APDdsyo+EVvuvK
IV4vhuhPjdY80NnV+dDHNzOZ0zU40uX8PxoLJ2uCl9jwlqfIPrIudRL4Zh1AI1vv
DIxN3nzLpxRPqTnDnUjIH3R29ELHreXtBD2c5POVxdnXsm2QLX40LmN0aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5bKdkqQPvivToMMmTHBO2N7gYgMB8GA1UdIwQY
MBaAFPK90N/CH8svQchB01iWkbIrnuoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHIzUTM4SWZ5eTlCeUVIVFdKYVJzaXVlNmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jYWE5YTItMGJlMi00ODI1LTg1NTgt
NDBmOTBkOGM3NGUyLzEvOHIzUTM4SWZ5eTlCeUVIVFdKYVJzaXVlNmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jYWE5YTItMGJlMi00ODI1LTg1NTgtNDBmOTBkOGM3NGUy
LzEvOHIzUTM4SWZ5eTlCeUVIVFdKYVJzaXVlNmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflNfNsRX
/APe6mgCqzb1S+Ag7vuvgv3TCQT0C7ntcNeElTsG97HyJP4qzt6WiejP5qJKI6BB
943OTRUuXGrEH/CDW0FVJwZE7xujHE/kn3S87NMQaaqm0T5bT0jrlusPwSc47HOD
nDfXvA41kRNAszwKur32Hhabb4P5pYw/QD3Eywb9vd2fGaUtFm4lyo2Lx/4AlNOJ
juxdTqFqBeI6X57f579RyN204r9PJLQNrvo4oPRrCe+CSsJgGzA0reB99a7EqAHO
EXY24zR4hKnOG6r5mZZmDFBpGxZhSxE0LgZe7OVTEpSCkilUBfhrHHmjj1gKpAJ6
+yh+EcVXcR5Wmw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:13 2025 by rpki-client