Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: fm+MP294cYDwWl2e99w68Ww7x/bAzVKmTajuDDuX+Pw=
Subject key identifier: AA:62:2F:4B:2F:00:5D:93:98:39:84:42:2D:05:26:3E:CE:92:FB:70
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019A72CA73C2657C2F237BD0D1F1BD2B23E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 116E
Signing time: Tue 11 Nov 2025 12:01:01 +0000
Manifest this update: Tue 11 Nov 2025 12:01:01 +0000
Manifest next update: Wed 12 Nov 2025 12:01:01 +0000
Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: S0eK+hXR2baeKSDQirnodBL/V3VqfXCI+/VA/cgFTss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:73:c2:65:7c:2f:23:7b:d0:d1:f1:bd:2b:23:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Nov 11 12:01:01 2025 GMT
Not After : Nov 12 12:01:01 2025 GMT
Subject: CN=aa622f4b2f005d93983984422d05263ece92fb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:8b:45:54:88:5b:78:75:34:2e:26:77:e8:
c1:28:25:a0:2f:26:4e:87:1c:d0:a2:3a:07:dd:a2:
c5:5d:4b:8e:88:74:9f:32:83:46:9d:60:12:15:00:
21:74:76:66:6c:bb:03:b0:cc:73:04:e6:fb:67:6e:
b1:1c:5a:0e:e5:f9:d7:4c:04:fe:32:a1:a2:b4:f9:
29:1c:42:ca:a2:76:04:43:b8:cc:17:97:0d:f5:f4:
82:f4:dd:34:eb:53:a6:e2:e6:0b:96:2f:8a:00:54:
f8:4b:dd:9f:75:7f:01:5b:c5:e3:4d:a7:1f:0e:b3:
0b:30:27:19:f5:56:29:d1:5e:2f:9a:7e:14:71:0d:
4a:f5:4d:60:0c:41:e5:a0:5a:d5:86:13:dc:88:67:
58:0b:3b:76:d5:e9:9a:35:d4:8e:1a:eb:65:a7:e3:
93:94:8c:3f:38:e3:33:05:98:cd:10:6d:78:ae:1b:
f9:1c:e6:3c:43:43:ad:07:98:89:19:5e:72:1d:58:
7b:08:36:58:d4:b2:9a:dc:95:5c:b0:e2:b2:2f:32:
cb:ca:63:97:e0:ba:cd:70:b5:e6:a2:ed:53:4e:ef:
6a:bd:7e:cb:26:22:38:28:57:5e:d6:77:96:4b:5a:
1c:d3:5a:f3:fa:cd:33:d4:cd:d2:61:95:0b:f6:54:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:2F:4B:2F:00:5D:93:98:39:84:42:2D:05:26:3E:CE:92:FB:70
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c5:5b:1f:0f:35:af:d5:c9:5d:0d:d7:4f:73:9a:b0:f6:e7:
b2:f1:a7:e7:3c:7b:5c:14:7f:be:1b:5c:de:d9:6b:15:3f:02:
4d:3e:da:3e:64:a2:3d:98:f5:21:71:9b:70:52:69:3a:4a:7e:
e5:18:4c:52:eb:f3:7c:58:96:c5:42:05:ec:f6:fb:65:b6:7f:
6d:92:0c:dc:a3:07:04:6f:c3:5e:48:c7:2d:79:9e:91:5e:81:
0a:92:83:a5:c4:06:a1:45:da:03:7e:6c:94:1c:c4:8f:fc:b0:
34:6a:44:82:1e:5a:60:8b:91:9a:16:34:31:1f:a1:79:bf:32:
58:22:d5:a4:ad:62:cd:cf:c0:11:b5:d5:e8:f9:d4:e5:d6:f5:
57:62:0c:2e:72:0c:8b:c4:77:d8:a7:d7:13:fa:2a:fa:7e:25:
94:e6:08:3a:b1:68:d5:da:41:2e:5f:df:4e:c2:a1:56:58:fe:
2d:52:05:53:d6:f9:ea:68:1d:20:0d:4e:ac:b9:e3:97:be:98:
42:9a:4c:5e:5e:a3:de:8a:fa:b0:b0:ec:13:4d:22:49:d3:81:
91:c0:52:15:f5:0d:4d:8d:db:af:1d:23:9f:25:b3:0b:b3:4f:
4b:c3:e3:ca:79:f7:14:a2:97:d5:68:4b:15:d9:fb:f6:da:67:
e9:95:cc:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyynPCZXwvI3vQ0fG9KyPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTkwNzdlMDQzODc3MDU5NjAzY2FhMGUzZTU4NGIxNjI2
ZThmN2IwHhcNMjUxMTExMTIwMTAxWhcNMjUxMTEyMTIwMTAxWjAzMTEwLwYDVQQD
EyhhYTYyMmY0YjJmMDA1ZDkzOTgzOTg0NDIyZDA1MjYzZWNlOTJmYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08WLRVSIW3h1NC4md+jBKCWgLyZO
hxzQojoH3aLFXUuOiHSfMoNGnWASFQAhdHZmbLsDsMxzBOb7Z26xHFoO5fnXTAT+
MqGitPkpHELKonYEQ7jMF5cN9fSC9N0061Om4uYLli+KAFT4S92fdX8BW8XjTacf
DrMLMCcZ9VYp0V4vmn4UcQ1K9U1gDEHloFrVhhPciGdYCzt21emaNdSOGutlp+OT
lIw/OOMzBZjNEG14rhv5HOY8Q0OtB5iJGV5yHVh7CDZY1LKa3JVcsOKyLzLLymOX
4LrNcLXmou1TTu9qvX7LJiI4KFde1neWS1oc01rz+s0z1M3SYZUL9lRZ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpiL0svAF2TmDmEQi0FJj7OkvtwMB8GA1UdIwQY
MBaAFPFZB34EOHcFlgPKoOPlhLFibo97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMt
MDNkOTA0YzgwMmNlLzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMtMDNkOTA0YzgwMmNl
LzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8VbHw81
r9XJXQ3XT3OasPbnsvGn5zx7XBR/vhtc3tlrFT8CTT7aPmSiPZj1IXGbcFJpOkp+
5RhMUuvzfFiWxUIF7Pb7ZbZ/bZIM3KMHBG/DXkjHLXmekV6BCpKDpcQGoUXaA35s
lBzEj/ywNGpEgh5aYIuRmhY0MR+heb8yWCLVpK1izc/AEbXV6PnU5db1V2IMLnIM
i8R32KfXE/oq+n4llOYIOrFo1dpBLl/fTsKhVlj+LVIFU9b56mgdIA1OrLnjl76Y
QppMXl6j3or6sLDsE00iSdOBkcBSFfUNTY3brx0jnyWzC7NPS8Pjynn3FKKX1WhL
Fdn79tpn6ZXM/g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client