Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: T9hdowHnNjwDPijVTyp1kzYuP5VtTCvj550vfJhTaBI=
Subject key identifier: 45:89:75:CA:E8:AE:03:4B:E3:15:A0:FB:A2:AF:D1:45:E7:40:7E:BD
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 019A72264A4296949EE23289AF6C8AD35C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 01DF
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: 4jc/JFmxppkSmvPzQ3XsdysRGbZMDMp1KLPNWezex1Y=)
2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4a:42:96:94:9e:e2:32:89:af:6c:8a:d3:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=458975cae8ae034be315a0fba2afd145e7407ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:4c:cb:14:9a:20:86:b9:35:5a:9b:35:31:
d1:3c:c8:aa:2b:f1:f4:4d:89:00:d1:34:76:86:e9:
a0:4b:4d:e7:7a:66:7c:1e:b7:78:a0:11:23:04:59:
e9:af:3d:2c:6b:c0:38:08:0f:8f:59:e8:38:e1:3b:
d6:7e:fd:da:ac:7b:a9:38:1c:f5:f4:8c:76:29:a7:
62:b5:66:26:f2:c8:c9:e2:d2:4d:18:48:4c:c2:55:
bb:08:5c:48:eb:c3:ba:a8:f6:0d:4a:85:3e:f8:5a:
bf:e6:b7:53:21:8d:43:09:8e:6a:dd:a3:f3:c6:ef:
a9:be:05:01:72:28:94:08:cd:ee:5a:61:db:83:2c:
39:ce:59:30:55:08:4d:7f:a4:44:91:5c:62:52:41:
4f:31:28:d5:c0:d2:47:90:83:b8:15:dd:89:c8:8e:
91:52:0d:af:d6:bd:71:d6:cc:9e:f7:f5:2a:80:cc:
75:59:06:ef:36:5c:89:01:ad:35:3f:c0:18:96:a9:
59:e3:c9:0e:5d:e1:dd:15:f3:11:0d:52:07:2a:64:
8a:5c:37:c0:20:d6:42:3b:b2:00:fe:f1:d4:2a:38:
c7:4e:41:8d:ab:65:cc:90:0d:a6:ef:7a:a3:42:a9:
89:50:79:3f:17:9d:7f:2e:4b:c3:ef:3c:50:cd:31:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:89:75:CA:E8:AE:03:4B:E3:15:A0:FB:A2:AF:D1:45:E7:40:7E:BD
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:50:a9:7e:58:df:94:d0:70:ce:93:9a:83:f0:f8:ea:c9:cc:
45:0b:4f:4e:68:a1:f1:ee:e1:5f:10:5e:c9:81:41:bc:cf:91:
32:1a:67:e2:99:4a:ee:2c:67:47:31:f3:8d:02:1b:ab:b2:e4:
ec:0d:f7:79:f0:60:29:6b:5a:d5:9c:c2:ee:d6:53:20:ac:73:
b3:d4:ca:11:1e:4f:5a:90:cd:9a:6e:f0:bd:20:85:d8:ca:a0:
37:ea:74:fd:2a:7c:60:f2:f6:4f:6f:46:69:4b:14:d2:da:d7:
85:64:26:43:d1:58:9d:f5:a1:9c:3a:36:69:39:60:82:56:2c:
76:cd:f0:2d:66:d2:2a:12:c0:8d:4f:7a:51:76:71:5b:00:e8:
be:a4:30:b7:4e:ff:c8:54:ab:49:83:02:fc:fa:85:91:b0:d9:
d2:d9:00:d7:51:ec:1d:4d:5e:8a:8f:d4:99:d7:41:02:1e:ca:
ac:10:a0:91:9f:d1:09:09:69:b6:16:d9:40:7f:71:bf:b2:c9:
e1:cd:8f:87:79:70:14:af:dc:c8:c8:9f:81:4a:f5:10:5b:e7:
6c:ff:62:42:d7:13:a0:bc:46:17:a4:8d:3b:40:22:2b:ac:58:
31:ce:2a:82:4c:3f:5e:ad:e9:fb:19:73:0d:ab:88:38:6e:2b:
c2:81:68:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkpClpSe4jKJr2yK01yAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWU5ZGFjZTllNzIwNjMwOWNiNmM5ZTViODYxN2U5ODU5
ZGRjODUwHhcNMjUxMTExMDkwMTQzWhcNMjUxMTEyMDkwMTQzWjAzMTEwLwYDVQQD
Eyg0NTg5NzVjYWU4YWUwMzRiZTMxNWEwZmJhMmFmZDE0NWU3NDA3ZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMFMyxSaIIa5NVqbNTHRPMiqK/H0
TYkA0TR2humgS03nemZ8Hrd4oBEjBFnprz0sa8A4CA+PWeg44TvWfv3arHupOBz1
9Ix2KaditWYm8sjJ4tJNGEhMwlW7CFxI68O6qPYNSoU++Fq/5rdTIY1DCY5q3aPz
xu+pvgUBciiUCM3uWmHbgyw5zlkwVQhNf6REkVxiUkFPMSjVwNJHkIO4Fd2JyI6R
Ug2v1r1x1sye9/UqgMx1WQbvNlyJAa01P8AYlqlZ48kOXeHdFfMRDVIHKmSKXDfA
INZCO7IA/vHUKjjHTkGNq2XMkA2m73qjQqmJUHk/F51/LkvD7zxQzTExKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWJdcrorgNL4xWg+6Kv0UXnQH69MB8GA1UdIwQY
MBaAFPMenazp5yBjCctsnluGF+mFndyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZGUyNWEtYzk0ZS00YTQ5LWE2MWYt
NDNhMTk0ZTlkOThhLzEvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yZGUyNWEtYzk0ZS00YTQ5LWE2MWYtNDNhMTk0ZTlkOThh
LzEvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFCpfljf
lNBwzpOag/D46snMRQtPTmih8e7hXxBeyYFBvM+RMhpn4plK7ixnRzHzjQIbq7Lk
7A33efBgKWta1ZzC7tZTIKxzs9TKER5PWpDNmm7wvSCF2MqgN+p0/Sp8YPL2T29G
aUsU0trXhWQmQ9FYnfWhnDo2aTlgglYsds3wLWbSKhLAjU96UXZxWwDovqQwt07/
yFSrSYMC/PqFkbDZ0tkA11HsHU1eio/UmddBAh7KrBCgkZ/RCQlpthbZQH9xv7LJ
4c2Ph3lwFK/cyMifgUr1EFvnbP9iQtcToLxGF6SNO0AiK6xYMc4qgkw/Xq3p+xlz
DauIOG4rwoFolQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:04 2025 by rpki-client