Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: nMkz7mBZCBU+aptil50bso4QuMxDcE5TBP2BtpdHSp4=
Subject key identifier: 3A:90:E8:75:58:47:4F:D0:89:8C:A6:0F:5B:65:7F:B0:A8:E7:04:6A
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 019A7112D6B638AED388A2B31BBECDFFADF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: PoqSvi0YIH7G4r2BrhgmsdgW6WYjZvX1/vNthcgw3fQ=)
2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d6:b6:38:ae:d3:88:a2:b3:1b:be:cd:ff:ad:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=3a90e87558474fd0898ca60f5b657fb0a8e7046a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:47:18:08:34:f9:31:79:bb:80:0f:b1:1c:
ba:2f:21:fd:ee:c0:1d:68:35:1d:b4:fc:0d:83:9c:
4b:ca:06:72:c5:3a:19:41:98:d4:28:38:0e:b3:5e:
4e:8f:aa:b9:23:e2:25:f3:f8:30:66:81:8a:d1:6f:
ed:b7:22:5f:df:53:e1:71:6f:53:cb:54:1b:03:ed:
07:1b:8d:e2:90:ce:20:3b:c3:a9:80:2d:19:ea:d2:
9d:b7:02:21:e2:fa:36:fd:45:c1:07:54:77:fc:72:
a6:00:08:18:c9:1a:68:67:8c:32:30:99:1a:dd:08:
e8:d8:4a:69:72:19:92:86:7c:de:af:39:bb:0b:a3:
86:d5:d6:f4:f3:d3:ee:d6:fc:c6:3b:a3:04:a5:c4:
ca:a5:01:10:11:c5:b3:7f:5b:0e:d2:ea:9c:48:52:
90:a9:45:ba:8f:c2:77:78:6c:49:56:d7:e4:cf:25:
c0:9b:f2:91:ca:19:74:16:40:ce:98:04:ae:87:85:
db:99:c5:6d:06:c0:bd:02:bc:56:52:e7:85:75:8c:
21:9f:ae:2f:4a:69:dc:76:6a:fb:2f:25:f1:67:fe:
be:5a:d8:73:fa:82:de:2c:03:9b:1c:54:58:f1:3f:
72:7e:6f:39:de:39:7a:38:71:07:61:d0:f6:78:8b:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:90:E8:75:58:47:4F:D0:89:8C:A6:0F:5B:65:7F:B0:A8:E7:04:6A
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f1:1d:96:85:32:5c:2e:8e:b2:cd:4d:b4:58:66:e9:e2:82:
15:a9:c1:b5:48:ca:e1:18:4a:a0:8d:bd:32:d4:80:de:42:61:
3e:f2:63:db:3b:15:cc:02:b8:4d:91:5a:81:a9:79:27:fc:67:
52:2a:3c:cb:1e:2c:bd:31:8d:9a:81:4b:86:81:21:e5:d7:3c:
ec:cf:a2:fb:c8:04:9a:78:24:89:8b:d5:64:c7:70:01:d3:a7:
95:0e:47:ea:25:9c:de:7b:b5:5a:62:a5:53:a3:af:fc:e7:a0:
8f:c0:cf:2a:c3:a0:fc:49:93:6a:62:e9:e5:22:64:a8:fb:78:
c0:8c:46:e1:d1:4e:b4:1d:68:10:9b:dc:b0:2d:b3:73:cc:86:
d2:e9:09:cf:d0:6d:a9:84:20:5b:c7:50:a1:0f:74:c7:98:48:
7a:81:54:ad:3b:f6:b7:01:f8:62:e9:da:ac:01:fa:f8:12:23:
6d:0c:2d:cb:39:0f:b3:dd:f6:f0:f5:26:72:0f:a3:4e:f1:51:
75:81:6b:1f:62:2e:c3:69:0c:cd:d5:21:71:5f:04:74:06:cb:
9d:52:86:6c:1b:05:88:06:e4:06:78:e0:0f:d7:31:47:07:95:
54:6d:18:7b:6e:69:0b:5d:fd:a3:11:93:91:8c:3e:fd:db:12:
ec:51:50:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEta2OK7TiKKzG77N/630MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYWY4YmI5OGU0MDU1MzllYTk4MzM4NGZhZmE4MmIyYjRi
NzE3MjQwHhcNMjUxMTExMDQwMDUxWhcNMjUxMTEyMDQwMDUxWjAzMTEwLwYDVQQD
EygzYTkwZTg3NTU4NDc0ZmQwODk4Y2E2MGY1YjY1N2ZiMGE4ZTcwNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2FHGAg0+TF5u4APsRy6LyH97sAd
aDUdtPwNg5xLygZyxToZQZjUKDgOs15Oj6q5I+Il8/gwZoGK0W/ttyJf31PhcW9T
y1QbA+0HG43ikM4gO8OpgC0Z6tKdtwIh4vo2/UXBB1R3/HKmAAgYyRpoZ4wyMJka
3Qjo2EppchmShnzerzm7C6OG1db089Pu1vzGO6MEpcTKpQEQEcWzf1sO0uqcSFKQ
qUW6j8J3eGxJVtfkzyXAm/KRyhl0FkDOmASuh4XbmcVtBsC9ArxWUueFdYwhn64v
Smncdmr7LyXxZ/6+Wthz+oLeLAObHFRY8T9yfm853jl6OHEHYdD2eIs/fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqQ6HVYR0/QiYymD1tlf7Co5wRqMB8GA1UdIwQY
MBaAFPGvi7mOQFU56pgzhPr6grK0txckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQt
YTM5MzAzZDg1MDY2LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQtYTM5MzAzZDg1MDY2
LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvEdloUy
XC6Oss1NtFhm6eKCFanBtUjK4RhKoI29MtSA3kJhPvJj2zsVzAK4TZFagal5J/xn
Uio8yx4svTGNmoFLhoEh5dc87M+i+8gEmngkiYvVZMdwAdOnlQ5H6iWc3nu1WmKl
U6Ov/Oegj8DPKsOg/EmTamLp5SJkqPt4wIxG4dFOtB1oEJvcsC2zc8yG0ukJz9Bt
qYQgW8dQoQ90x5hIeoFUrTv2twH4YunarAH6+BIjbQwtyzkPs9328PUmcg+jTvFR
dYFrH2Iuw2kMzdUhcV8EdAbLnVKGbBsFiAbkBnjgD9cxRweVVG0Ye25pC139oxGT
kYw+/dsS7FFQig==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:56 2025 by rpki-client