Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: Bu2TMt/Q8KfmAGs7hhkt1qUF6yWx0iHbqU6xa38yA8I=
Subject key identifier: 34:DC:B2:7A:32:A6:60:40:AA:99:C0:3C:4A:F9:19:39:E1:38:D4:90
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 019A72935A21168E1F48DD6FB6AAD1D76961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0BB5
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: COMzEpBh1Y67BVovTE4VhRCSF6X38qUAkl2xU7kITeI=)
2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5a:21:16:8e:1f:48:dd:6f:b6:aa:d1:d7:69:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=34dcb27a32a66040aa99c03c4af91939e138d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:04:1d:5a:45:b3:a1:6a:29:ae:50:9a:96:
fc:0b:9c:72:86:11:47:47:32:53:d5:c8:79:dc:5d:
67:67:ea:9c:6c:45:68:b0:55:8d:9a:37:1b:48:f3:
a8:a2:76:00:10:16:78:67:23:98:d7:78:57:38:e2:
6a:62:9a:55:b6:d3:a8:f7:00:6e:9c:a4:35:d5:5e:
10:b4:69:af:4e:e1:4d:76:df:79:20:86:e2:c3:e8:
33:5f:a5:50:35:e6:1e:cb:dd:0c:0b:fe:e6:2f:bc:
98:07:0d:d5:fd:f5:89:45:26:86:66:e1:15:0c:4f:
f1:24:5e:21:9e:cb:10:07:0c:4f:7b:f9:84:a8:6b:
5f:e7:d1:9c:39:e0:f4:cb:ee:d3:98:6a:26:ce:98:
aa:ad:db:f4:89:0d:2d:9f:04:f5:59:15:2f:40:7f:
e3:3f:cd:09:da:52:7b:cc:e3:1e:d0:6d:d2:6b:c1:
c7:17:82:2d:60:21:c3:e9:d3:af:97:20:37:6a:e9:
dd:5a:d4:2e:ea:c4:3f:41:64:88:b6:ef:d3:16:4b:
9d:3b:98:95:c3:9d:68:ce:92:a4:98:6d:31:6d:26:
4e:75:35:f5:b8:15:ab:fc:9a:31:4c:64:22:ff:cd:
11:31:e4:70:2d:5c:17:59:3d:a6:2b:b0:67:8d:ee:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:B2:7A:32:A6:60:40:AA:99:C0:3C:4A:F9:19:39:E1:38:D4:90
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:66:73:1c:a8:d1:8b:40:b0:ec:02:28:f3:0e:d0:4e:19:75:
24:64:0f:c1:57:8b:e0:6f:6b:b3:fe:e0:0b:22:d8:42:a6:15:
b1:9c:46:f8:de:76:49:67:3d:44:e1:cb:2f:04:1c:82:38:b8:
6f:f3:85:25:a5:e8:d0:d2:9e:08:eb:b9:b8:85:73:6a:c3:76:
83:97:03:f5:ca:ee:64:3e:01:af:e5:0e:2b:95:2e:2d:50:a5:
e4:8f:c9:22:22:65:49:b8:c0:7b:3e:a9:ff:fe:0a:6a:9c:33:
59:dd:60:d3:6c:b8:ae:30:37:97:37:55:5b:08:e2:c8:9f:7a:
43:89:66:32:14:04:36:e8:6d:8d:61:8e:1f:d2:1a:be:62:f1:
d5:4e:12:96:75:9c:ac:89:ba:91:e1:ce:f8:e8:7d:29:e0:2f:
4d:77:77:5b:2d:60:a1:5e:02:ca:d5:01:a6:7a:82:14:9a:eb:
f2:68:53:6b:d6:b7:dd:81:e8:19:da:c6:43:77:b5:51:82:a6:
bf:c2:34:49:2d:00:ac:47:1e:b0:0e:d9:55:d0:e5:81:4e:f9:
59:9a:e5:98:89:90:ec:91:cc:8b:53:02:01:49:ca:69:92:8c:
b9:7d:0c:6e:dd:c8:0b:f1:d4:ac:da:af:18:a9:df:8f:81:0d:
45:fd:33:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk1ohFo4fSN1vtqrR12lhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx
ZTBlODQwHhcNMjUxMTExMTEwMDUwWhcNMjUxMTEyMTEwMDUwWjAzMTEwLwYDVQQD
EygzNGRjYjI3YTMyYTY2MDQwYWE5OWMwM2M0YWY5MTkzOWUxMzhkNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmAEHVpFs6FqKa5Qmpb8C5xyhhFH
RzJT1ch53F1nZ+qcbEVosFWNmjcbSPOoonYAEBZ4ZyOY13hXOOJqYppVttOo9wBu
nKQ11V4QtGmvTuFNdt95IIbiw+gzX6VQNeYey90MC/7mL7yYBw3V/fWJRSaGZuEV
DE/xJF4hnssQBwxPe/mEqGtf59GcOeD0y+7TmGomzpiqrdv0iQ0tnwT1WRUvQH/j
P80J2lJ7zOMe0G3Sa8HHF4ItYCHD6dOvlyA3aundWtQu6sQ/QWSItu/TFkudO5iV
w51ozpKkmG0xbSZOdTX1uBWr/JoxTGQi/80RMeRwLVwXWT2mK7Bnje4DPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTcsnoypmBAqpnAPEr5GTnhONSQMB8GA1UdIwQY
MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt
ODNiMDM4NzAwOTRkLzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk
LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2ZzHKjR
i0Cw7AIo8w7QThl1JGQPwVeL4G9rs/7gCyLYQqYVsZxG+N52SWc9ROHLLwQcgji4
b/OFJaXo0NKeCOu5uIVzasN2g5cD9cruZD4Br+UOK5UuLVCl5I/JIiJlSbjAez6p
//4KapwzWd1g02y4rjA3lzdVWwjiyJ96Q4lmMhQENuhtjWGOH9IavmLx1U4SlnWc
rIm6keHO+Oh9KeAvTXd3Wy1goV4CytUBpnqCFJrr8mhTa9a33YHoGdrGQ3e1UYKm
v8I0SS0ArEcesA7ZVdDlgU75WZrlmImQ7JHMi1MCAUnKaZKMuX0Mbt3IC/HUrNqv
GKnfj4ENRf0zOA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:06 2025 by rpki-client