Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
File: 8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json)
Hash identifier: jqfg1CU0XhzDaRE5ftBkvEt6bLL9hVDymmCtfETXpfI=
Subject key identifier: C5:C9:83:DD:BA:AC:52:A1:AF:D5:37:81:01:A1:99:4F:3A:1D:6D:47
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial: 019A72263A855E495827F7ECC0FFFC3D0CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
Manifest number: 02B5
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: yOtKleCzys1xSiqHhtQLc6yAIe/bqPMrG2c+fen9t3A=)
2: sW8bwiGLsI7Vh96L_GlmvLQDJKY.roa (hash: zwPk0zZ0KWeH/lkVto00u9mSsOX9BDpbaWABcwD0yq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3a:85:5e:49:58:27:f7:ec:c0:ff:fc:3d:0c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=c5c983ddbaac52a1afd5378101a1994f3a1d6d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:7d:c9:5c:d3:87:d5:f0:5d:bb:0e:66:50:
84:e4:08:ac:fe:e7:66:8e:c8:df:25:5f:7b:b6:6a:
c2:35:d4:f7:cd:f4:6d:c3:e5:5d:2f:d6:21:58:4e:
88:c7:63:26:40:13:8d:a7:51:e6:4e:1f:41:92:9c:
2f:0f:22:f7:8d:d2:d0:a6:94:c2:76:7f:d4:61:d0:
d1:e0:52:21:69:29:98:56:e9:8a:38:20:2f:f5:20:
76:b0:a7:64:41:fb:6f:18:e7:17:84:6a:29:ee:d4:
02:8f:a2:fb:19:dc:a7:94:dd:4c:c9:95:e8:25:51:
89:b9:29:da:53:a8:35:1a:f3:c2:e1:36:53:34:21:
b7:b3:7a:d6:db:4d:b1:64:55:bf:e5:49:b7:ec:3c:
05:90:a9:6d:5e:41:5f:f8:a0:c2:47:3a:44:8b:45:
10:dd:fd:e5:4b:0b:01:2e:55:c4:d0:27:9b:e1:5d:
02:68:7d:eb:9c:21:d5:40:8a:42:0c:79:cf:21:55:
f6:53:79:50:e4:ee:73:c5:7f:d7:26:60:07:e7:4a:
e0:1b:39:c4:03:4e:0b:83:58:63:b3:9d:c7:80:7b:
d5:f1:bf:23:e3:ed:39:29:b9:b3:7f:84:b4:4e:81:
c8:55:47:07:93:f4:2a:a6:b4:39:20:22:33:19:55:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:83:DD:BA:AC:52:A1:AF:D5:37:81:01:A1:99:4F:3A:1D:6D:47
X509v3 Authority Key Identifier:
keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:12:62:a6:72:03:f2:74:4a:ad:75:58:86:c9:97:2f:4b:b3:
60:8e:5b:14:57:55:2f:a8:d8:e7:4d:1a:6a:80:16:c1:78:ab:
e8:ea:e5:91:70:38:88:0b:00:62:cd:ec:4d:c4:94:ee:92:0e:
43:b9:b6:2e:41:75:e9:21:04:7c:44:0e:99:b5:52:98:38:52:
85:bb:47:ce:39:13:84:b3:2e:4c:37:cf:f7:99:91:d0:56:0c:
69:7b:13:d4:3a:b9:2f:dd:5b:3c:3c:8e:7c:e7:cc:06:b1:2e:
50:77:48:d2:47:e2:36:bf:be:66:e0:07:c5:5a:8c:4e:89:b8:
74:00:fb:2d:fa:1b:f6:1e:82:ca:8d:bd:49:0d:51:db:be:68:
01:99:79:57:bb:1e:5d:56:82:9d:18:cc:6e:8b:9b:46:43:f3:
1f:d5:3b:5d:ec:e7:a1:54:c2:cc:ad:c9:82:31:47:01:a6:3b:
f7:48:bf:43:5d:2a:bb:81:e1:f9:fa:2f:d1:5a:1e:5f:e7:50:
7c:78:7a:a3:a0:5a:cd:29:33:46:2d:31:42:08:f2:c0:51:8a:
63:cf:98:42:4a:2d:86:b4:7e:6a:05:3c:5f:7f:6e:bd:4c:cf:
70:4a:4f:6f:5c:e5:63:8e:c3:32:c7:bd:3b:08:a3:71:92:19:
44:e2:db:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJjqFXklYJ/fswP/8PQzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZTU3ZTM1MGQzYTZkYjhhNTgwNTU5Mjk5ZjBiOWQzOGJj
YzU5NTIwHhcNMjUxMTExMDkwMTM5WhcNMjUxMTEyMDkwMTM5WjAzMTEwLwYDVQQD
EyhjNWM5ODNkZGJhYWM1MmExYWZkNTM3ODEwMWExOTk0ZjNhMWQ2ZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o99yVzTh9XwXbsOZlCE5Ais/udm
jsjfJV97tmrCNdT3zfRtw+VdL9YhWE6Ix2MmQBONp1HmTh9BkpwvDyL3jdLQppTC
dn/UYdDR4FIhaSmYVumKOCAv9SB2sKdkQftvGOcXhGop7tQCj6L7GdynlN1MyZXo
JVGJuSnaU6g1GvPC4TZTNCG3s3rW202xZFW/5Um37DwFkKltXkFf+KDCRzpEi0UQ
3f3lSwsBLlXE0Ceb4V0CaH3rnCHVQIpCDHnPIVX2U3lQ5O5zxX/XJmAH50rgGznE
A04Lg1hjs53HgHvV8b8j4+05Kbmzf4S0ToHIVUcHk/QqprQ5ICIzGVUkOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXJg926rFKhr9U3gQGhmU86HW1HMB8GA1UdIwQY
MBaAFPHlfjUNOm24pYBVkpnwudOLzFlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAt
MGNkOWZhYTU2NTNlLzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAtMGNkOWZhYTU2NTNl
LzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhJipnID
8nRKrXVYhsmXL0uzYI5bFFdVL6jY500aaoAWwXir6OrlkXA4iAsAYs3sTcSU7pIO
Q7m2LkF16SEEfEQOmbVSmDhShbtHzjkThLMuTDfP95mR0FYMaXsT1Dq5L91bPDyO
fOfMBrEuUHdI0kfiNr++ZuAHxVqMTom4dAD7Lfob9h6Cyo29SQ1R275oAZl5V7se
XVaCnRjMboubRkPzH9U7XeznoVTCzK3JgjFHAaY790i/Q10qu4Hh+fov0VoeX+dQ
fHh6o6BazSkzRi0xQgjywFGKY8+YQkothrR+agU8X39uvUzPcEpPb1zlY47DMse9
OwijcZIZROLbsw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:01 2025 by rpki-client