Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: Z80gx2oqoJAt4qVhLxUfURu6cIaru1t6El/PsZJdCQ8=
Subject key identifier: A0:C5:8A:03:C7:E4:99:7A:41:63:C0:9F:00:A5:06:19:A4:23:B2:59
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 019A71EEC5AC57D13DDAC55E88F5399FD894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 0AD2
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: WQ347xFhdeYwbT5dvimDTXc9dxGL6epE2fQ0UYifcEY=)
2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c5:ac:57:d1:3d:da:c5:5e:88:f5:39:9f:d8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=a0c58a03c7e4997a4163c09f00a50619a423b259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:00:7e:b3:86:ae:87:09:51:2c:8b:bb:11:
62:61:4b:c2:cc:cf:a8:d0:91:5f:6b:c8:74:8c:c8:
c5:81:a4:dc:12:2f:37:92:51:e2:86:2d:74:35:6d:
a0:f9:52:2a:68:3d:6c:88:4b:a1:a4:1d:77:21:b5:
62:89:b8:9f:e7:02:e6:45:c1:e0:33:c8:03:8c:0d:
89:b2:37:ca:30:45:54:8b:b1:46:f0:c9:53:59:5f:
81:f4:8e:f1:d9:69:0e:7e:cc:2f:38:9c:b6:47:85:
12:32:f6:fa:c9:2a:a3:cf:40:43:d6:16:30:98:eb:
81:6a:b6:07:5d:25:41:61:7a:b9:2a:b3:b6:24:29:
c1:68:31:68:e8:5a:e3:62:79:95:94:9b:21:71:bc:
50:22:bf:e9:e4:5f:f7:0c:9b:00:95:c7:6b:97:fa:
ac:06:4a:d7:9c:aa:3d:cb:f0:d7:f0:1e:3e:87:2b:
1f:79:41:ab:5f:5b:03:02:d3:b1:6f:d4:bc:33:9c:
9e:72:b7:71:cc:1b:58:dd:0e:fc:8d:97:52:ae:37:
07:09:f4:a5:a7:4e:fd:74:17:b2:0c:aa:18:9b:a6:
fb:ff:8f:79:46:b2:60:b3:96:ce:f4:93:83:18:83:
34:e0:7c:84:51:6d:d1:2f:ac:88:30:d5:c7:21:0e:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C5:8A:03:C7:E4:99:7A:41:63:C0:9F:00:A5:06:19:A4:23:B2:59
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ad:2b:ba:3f:d2:62:13:a1:a5:af:56:c1:1d:e7:b1:2c:7e:
1b:6a:99:51:06:fa:8c:3a:6c:d1:a6:dc:2a:df:bc:25:58:bb:
0a:6d:bb:f9:40:39:f3:d0:fd:a1:d5:e4:27:74:58:b8:e3:0d:
af:15:de:e5:f5:9a:2b:e6:39:27:76:7a:4a:e1:3f:2a:b4:16:
2d:96:bd:7d:fe:90:5e:9d:ac:fd:06:5e:5e:0c:a6:cb:6f:54:
7b:b4:27:d6:47:d2:0f:e9:13:cd:b5:94:37:c1:15:06:b9:a4:
48:ae:3e:e9:68:09:e2:7e:6d:b7:7d:fb:60:e2:ff:37:85:32:
51:60:09:f7:92:f3:da:6c:37:d5:41:b5:c3:f8:0a:02:d4:23:
e2:f5:13:b4:89:e9:14:88:89:93:fd:8d:85:78:e5:4d:4a:5b:
46:5b:81:01:27:fc:b5:08:db:75:29:1e:72:30:05:ab:c6:a8:
9c:ac:00:d7:90:fe:4d:ee:08:7b:da:7d:2d:a0:44:4d:74:d5:
71:e7:71:63:36:03:26:65:d9:0a:32:7c:a7:bf:d7:6a:db:05:
07:7b:0d:e5:9a:71:1d:9b:56:62:57:c8:bb:f7:c7:ca:f1:ce:
a6:9c:09:8f:6b:b3:b8:79:6f:13:4f:7e:85:1f:fa:97:9c:92:
97:0d:29:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sWsV9E92sVeiPU5n9iUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm
NWRlOWQwHhcNMjUxMTExMDgwMTA0WhcNMjUxMTEyMDgwMTA0WjAzMTEwLwYDVQQD
EyhhMGM1OGEwM2M3ZTQ5OTdhNDE2M2MwOWYwMGE1MDYxOWE0MjNiMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL8AfrOGrocJUSyLuxFiYUvCzM+o
0JFfa8h0jMjFgaTcEi83klHihi10NW2g+VIqaD1siEuhpB13IbViibif5wLmRcHg
M8gDjA2JsjfKMEVUi7FG8MlTWV+B9I7x2WkOfswvOJy2R4USMvb6ySqjz0BD1hYw
mOuBarYHXSVBYXq5KrO2JCnBaDFo6FrjYnmVlJshcbxQIr/p5F/3DJsAlcdrl/qs
BkrXnKo9y/DX8B4+hysfeUGrX1sDAtOxb9S8M5yecrdxzBtY3Q78jZdSrjcHCfSl
p079dBeyDKoYm6b7/495RrJgs5bO9JODGIM04HyEUW3RL6yIMNXHIQ73/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDFigPH5Jl6QWPAnwClBhmkI7JZMB8GA1UdIwQY
MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt
YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz
LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASK0ruj/S
YhOhpa9WwR3nsSx+G2qZUQb6jDps0abcKt+8JVi7Cm27+UA589D9odXkJ3RYuOMN
rxXe5fWaK+Y5J3Z6SuE/KrQWLZa9ff6QXp2s/QZeXgymy29Ue7Qn1kfSD+kTzbWU
N8EVBrmkSK4+6WgJ4n5tt337YOL/N4UyUWAJ95Lz2mw31UG1w/gKAtQj4vUTtInp
FIiJk/2NhXjlTUpbRluBASf8tQjbdSkecjAFq8aonKwA15D+Te4Ie9p9LaBETXTV
cedxYzYDJmXZCjJ8p7/XatsFB3sN5ZpxHZtWYlfIu/fHyvHOppwJj2uzuHlvE09+
hR/6l5ySlw0prw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:56 2025 by rpki-client