Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: QJftBdgwTHY3lBxtTTBsnKeIvR04PMbHy4Ajcx1wpxQ=
Subject key identifier: 08:3E:B3:1D:3C:AC:F0:80:DF:39:9C:BF:90:A3:FD:57:60:47:43:C2
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 019A7225892F0E13810AB7710CB8BD75D2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: wnTgablvc0M9A+2xmtsSNY5VdLoTH/5Ab2tUoT/cUrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:89:2f:0e:13:81:0a:b7:71:0c:b8:bd:75:d2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=083eb31d3cacf080df399cbf90a3fd57604743c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:2c:3b:6f:2a:b1:36:cb:7f:d5:9f:02:eb:
2c:90:8b:cd:6e:cb:4d:8f:85:c0:87:55:67:57:78:
28:1e:14:8b:ff:66:cb:c2:40:38:a8:d0:d5:fd:db:
dc:d0:10:64:de:94:d3:fb:a2:17:50:bd:61:64:af:
18:e4:14:71:19:ee:6f:d3:63:50:d5:22:9d:d2:fb:
da:75:c2:76:8e:df:94:5b:7f:55:45:5d:25:21:87:
97:fe:77:f7:7a:47:c7:79:27:65:51:15:5a:66:5d:
d6:31:79:a0:40:38:2d:31:03:ef:34:33:e1:f9:e5:
3a:4c:42:b5:1a:0e:6f:db:19:db:a3:a9:55:aa:ef:
a1:62:6c:b1:15:f8:70:cd:71:0f:f4:3a:ca:b8:36:
fc:37:ab:31:b3:27:cd:8d:5e:ff:85:4b:58:56:fc:
5d:27:83:60:57:be:b3:ef:0d:26:81:b5:cb:c1:20:
ca:1f:93:36:8b:05:71:49:c1:41:d4:13:30:c0:0c:
28:bb:b7:c2:a0:a5:02:03:b1:9c:5b:96:ac:41:54:
24:f8:00:42:3c:b3:b5:0b:da:e1:51:bb:e6:ab:8b:
6b:ab:8d:b6:c2:1d:4d:aa:3a:80:b5:01:3e:21:51:
69:e0:02:bd:b2:b0:62:56:ab:9e:70:30:fe:1b:47:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:B3:1D:3C:AC:F0:80:DF:39:9C:BF:90:A3:FD:57:60:47:43:C2
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:eb:e4:9f:94:2b:83:ca:fd:e6:28:ee:ea:0f:45:5b:a5:
3e:b6:57:4f:d8:bd:5b:95:5e:57:0d:40:67:75:8a:48:8b:89:
c2:b6:37:94:4e:3c:5b:96:76:49:e8:cf:7a:35:d0:c7:26:1e:
4f:c2:2f:02:d9:6f:89:48:5d:65:f9:ec:af:c6:17:5e:87:0e:
a6:bc:ce:48:0a:b1:df:db:24:b5:59:88:4c:ea:f1:3e:06:2e:
9a:3e:0f:db:ca:21:d2:dc:82:68:28:f9:68:50:b1:47:7d:b1:
6d:16:58:2e:b5:eb:22:ab:70:4d:ae:d6:7f:3c:e5:31:76:6f:
40:55:9e:0d:7c:33:cc:d4:fb:46:e2:04:e2:c6:ed:52:f8:6e:
a8:20:63:56:b4:f4:4f:e2:1d:91:98:a5:37:ad:7a:89:3d:7f:
a9:80:bb:79:2f:df:2d:64:0e:cd:e5:61:20:99:c6:64:3e:6b:
3f:4f:a0:76:4a:dc:dc:96:67:aa:6b:d8:69:53:30:57:1a:f0:
f1:91:5b:52:0c:02:ae:dd:89:a1:94:f5:9c:04:87:03:40:e7:
d2:8f:73:fa:90:d3:b8:68:b3:ca:1b:5c:b5:f8:06:aa:1e:4b:
f7:4a:19:45:09:9b:ca:21:39:74:a7:ef:d6:c3:de:84:7d:45:
bd:09:82:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJYkvDhOBCrdxDLi9ddKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNDBkMWY5Yzk3YmU0NjZlMGJkZWFjODQ5Mjg5ZTJhM2Nj
YTllY2UwHhcNMjUxMTExMDkwMDUzWhcNMjUxMTEyMDkwMDUzWjAzMTEwLwYDVQQD
EygwODNlYjMxZDNjYWNmMDgwZGYzOTljYmY5MGEzZmQ1NzYwNDc0M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QYsO28qsTbLf9WfAusskIvNbstN
j4XAh1VnV3goHhSL/2bLwkA4qNDV/dvc0BBk3pTT+6IXUL1hZK8Y5BRxGe5v02NQ
1SKd0vvadcJ2jt+UW39VRV0lIYeX/nf3ekfHeSdlURVaZl3WMXmgQDgtMQPvNDPh
+eU6TEK1Gg5v2xnbo6lVqu+hYmyxFfhwzXEP9DrKuDb8N6sxsyfNjV7/hUtYVvxd
J4NgV76z7w0mgbXLwSDKH5M2iwVxScFB1BMwwAwou7fCoKUCA7GcW5asQVQk+ABC
PLO1C9rhUbvmq4trq422wh1NqjqAtQE+IVFp4AK9srBiVquecDD+G0cB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg+sx08rPCA3zmcv5Cj/VdgR0PCMB8GA1UdIwQY
MBaAFPBA0fnJe+Rm4L3qyEkonio8yp7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYt
ODk1M2VjOGRkZDRhLzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYtODk1M2VjOGRkZDRh
LzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSfr5J+U
K4PK/eYo7uoPRVulPrZXT9i9W5VeVw1AZ3WKSIuJwrY3lE48W5Z2SejPejXQxyYe
T8IvAtlviUhdZfnsr8YXXocOprzOSAqx39sktVmITOrxPgYumj4P28oh0tyCaCj5
aFCxR32xbRZYLrXrIqtwTa7WfzzlMXZvQFWeDXwzzNT7RuIE4sbtUvhuqCBjVrT0
T+IdkZilN616iT1/qYC7eS/fLWQOzeVhIJnGZD5rP0+gdkrc3JZnqmvYaVMwVxrw
8ZFbUgwCrt2JoZT1nASHA0Dn0o9z+pDTuGizyhtctfgGqh5L90oZRQmbyiE5dKfv
1sPehH1FvQmC3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:16 2025 by rpki-client