Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier: yhJK1cGOyehl6t6Rk5e1o7HzAu0xRtT9A/gm+Iz2TCk=
Subject key identifier: E5:F7:F4:A8:84:3A:DE:59:ED:AC:E4:63:5F:20:4F:F6:D9:0F:C8:03
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial: 019A71B9444A29F10CC85551F1431495A413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: IL1Cyk4CCxozLjMuFojvtOcbRLCuPTRxtxGo5tY2Et8=)
2: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (hash: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:44:4a:29:f1:0c:c8:55:51:f1:43:14:95:a4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=e5f7f4a8843ade59edace4635f204ff6d90fc803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:06:9e:d9:96:2e:90:9a:ba:19:91:3b:23:
8d:5d:52:35:54:64:d0:0f:c8:dc:ad:8c:bc:af:ae:
39:21:6a:b7:ca:18:b9:ec:14:c2:5d:5d:6c:ce:93:
ce:73:69:82:2c:73:08:95:da:c5:de:33:4b:d3:8b:
00:92:b8:78:75:54:b9:0b:0a:ae:2c:d5:93:c1:de:
93:c1:0f:6c:66:39:4c:e3:82:c5:f8:2a:20:16:ad:
bb:20:76:8d:c5:32:c0:4f:36:82:2e:7b:ad:89:f1:
60:20:2b:eb:f5:af:15:70:f5:e8:a1:92:66:b3:3a:
4b:ca:9b:8e:2d:84:ad:ba:ed:d1:28:cb:e3:31:39:
b9:31:c0:70:da:8c:c6:56:b0:00:5d:f6:72:54:08:
81:36:d6:8f:0b:57:db:59:01:5e:2f:a3:51:84:35:
26:1e:de:11:c3:e6:75:3c:a8:2f:be:a0:a0:2a:fd:
63:7a:55:97:d7:6f:35:6d:4b:97:4d:70:7d:ae:d1:
cb:05:7d:72:8e:6a:ca:25:e8:43:43:b4:bc:78:d0:
d4:5b:90:0d:b1:21:eb:c8:53:4d:a3:46:13:4e:ee:
6c:74:57:b6:b7:4f:ea:01:c5:f0:6d:77:e9:09:d9:
60:cf:9a:1a:0e:75:c1:a6:3f:6c:29:f8:74:bb:30:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F7:F4:A8:84:3A:DE:59:ED:AC:E4:63:5F:20:4F:F6:D9:0F:C8:03
X509v3 Authority Key Identifier:
keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:ec:42:c4:5a:1b:76:2e:5a:dc:dc:aa:dd:25:87:fc:41:
01:1b:03:8f:4a:30:70:22:6a:63:a2:53:11:38:5e:75:e1:3b:
e2:e3:89:36:1f:e2:03:a6:ce:3b:dc:73:96:77:3a:09:e0:b0:
83:5c:01:d9:0a:81:00:ec:8d:7a:3b:26:a8:5c:13:a1:e9:97:
7d:92:68:93:42:43:e2:e3:83:1d:71:d2:dc:d9:7b:24:12:2c:
d2:cb:20:66:4e:18:50:49:d4:33:ea:c9:10:00:52:f0:d4:f7:
53:66:01:0b:47:51:21:e7:21:14:26:72:5f:b5:67:52:26:a8:
18:c5:ae:57:c0:07:72:42:75:ea:5e:42:24:3d:26:f8:9d:2f:
e7:9b:66:b9:58:9d:ac:69:c6:c4:3f:bf:c4:ab:5a:49:de:64:
c1:02:21:26:37:d7:a1:9d:48:66:b1:cc:68:5c:60:b4:8e:44:
5c:26:bc:17:bc:d8:fc:d3:9e:75:e5:7f:8b:6f:1d:3c:99:a8:
ff:a9:43:6d:7f:70:73:fc:58:86:f7:fc:c5:38:a3:28:38:02:
cd:3f:b4:b1:c8:d9:6b:70:29:e4:15:92:a9:c0:68:f1:90:79:
07:ab:55:2e:ac:ab:3c:56:48:e3:8a:89:b4:75:9c:28:58:85:
27:48:34:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuURKKfEMyFVR8UMUlaQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh
MDE4ZTEwHhcNMjUxMTExMDcwMjM4WhcNMjUxMTEyMDcwMjM4WjAzMTEwLwYDVQQD
EyhlNWY3ZjRhODg0M2FkZTU5ZWRhY2U0NjM1ZjIwNGZmNmQ5MGZjODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8c0GntmWLpCauhmROyONXVI1VGTQ
D8jcrYy8r645IWq3yhi57BTCXV1szpPOc2mCLHMIldrF3jNL04sAkrh4dVS5Cwqu
LNWTwd6TwQ9sZjlM44LF+CogFq27IHaNxTLATzaCLnutifFgICvr9a8VcPXooZJm
szpLypuOLYStuu3RKMvjMTm5McBw2ozGVrAAXfZyVAiBNtaPC1fbWQFeL6NRhDUm
Ht4Rw+Z1PKgvvqCgKv1jelWX1281bUuXTXB9rtHLBX1yjmrKJehDQ7S8eNDUW5AN
sSHryFNNo0YTTu5sdFe2t0/qAcXwbXfpCdlgz5oaDnXBpj9sKfh0uzDugQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOX39KiEOt5Z7azkY18gT/bZD8gDMB8GA1UdIwQY
MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt
NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1
LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgrsQsRa
G3YuWtzcqt0lh/xBARsDj0owcCJqY6JTEThedeE74uOJNh/iA6bOO9xzlnc6CeCw
g1wB2QqBAOyNejsmqFwToemXfZJok0JD4uODHXHS3Nl7JBIs0ssgZk4YUEnUM+rJ
EABS8NT3U2YBC0dRIechFCZyX7VnUiaoGMWuV8AHckJ16l5CJD0m+J0v55tmuVid
rGnGxD+/xKtaSd5kwQIhJjfXoZ1IZrHMaFxgtI5EXCa8F7zY/NOedeV/i28dPJmo
/6lDbX9wc/xYhvf8xTijKDgCzT+0scjZa3Ap5BWSqcBo8ZB5B6tVLqyrPFZI44qJ
tHWcKFiFJ0g0kQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:54 2025 by rpki-client