Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: jukbQPgGYR5QvsVXzUhsbg73zY9ra3e1N4m2mJaAI+w=
Subject key identifier: 50:5C:08:DE:62:28:81:90:09:2D:61:A2:66:81:41:A2:AB:F5:9A:1C
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 0199FF2282DA17299120260C0C2256B9F5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 14D8
Signing time: Mon 20 Oct 2025 01:01:15 +0000
Manifest this update: Mon 20 Oct 2025 01:01:15 +0000
Manifest next update: Tue 21 Oct 2025 01:01:15 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: r1vCLa4WAir8Xju6emMY0qUhHDC9vGphxrSaJFmbzZQ=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:82:da:17:29:91:20:26:0c:0c:22:56:b9:f5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Oct 20 01:01:15 2025 GMT
Not After : Oct 21 01:01:15 2025 GMT
Subject: CN=505c08de62288190092d61a2668141a2abf59a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:55:f0:e4:73:d0:db:5a:e7:36:62:ef:b9:
f3:6d:67:fb:2b:bb:ea:a6:d1:54:79:71:52:ed:30:
6c:cc:ea:48:46:38:78:3d:85:5a:06:81:9c:33:27:
af:48:73:ee:b9:f8:04:01:e5:46:ec:94:5e:a5:e2:
73:ee:72:c4:bd:14:18:20:0a:fe:c8:d6:90:84:26:
fa:13:6b:6e:30:2d:a6:a3:ec:5c:fd:75:50:22:12:
f1:ce:0b:e6:33:3f:12:a7:39:93:95:0d:10:7f:3b:
3d:0e:21:58:04:39:c7:68:6c:66:aa:bd:5d:74:74:
9f:34:c6:7f:b8:e4:23:37:3f:49:51:91:1b:45:07:
0c:6a:33:35:71:59:c3:f3:f5:de:77:20:e5:7a:cb:
8a:fc:e2:29:a9:03:d8:04:7d:45:f7:85:27:b4:40:
7c:f5:bd:b8:e6:4e:65:af:c0:67:f9:99:11:69:4d:
ab:be:5f:cf:68:37:9f:8b:f2:ba:fd:d8:c9:d2:81:
83:8a:11:b1:65:91:b7:d2:55:92:dc:3c:25:f4:a2:
10:ca:b0:bb:6b:1e:b7:7a:ba:fb:66:18:e7:dc:26:
62:ae:03:a3:83:7a:28:ce:38:97:ad:a9:42:6b:3e:
20:89:56:02:11:b1:a3:7b:bd:86:06:b8:96:30:b7:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:08:DE:62:28:81:90:09:2D:61:A2:66:81:41:A2:AB:F5:9A:1C
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:85:48:6c:b1:a8:b4:e0:14:f2:a5:63:00:43:45:0b:9c:eb:
98:58:3d:10:84:ea:85:ff:5b:50:62:a5:ce:30:47:e4:1e:5d:
05:a7:7c:66:75:2d:ae:db:ae:be:b4:73:c8:fd:44:d4:04:fb:
fa:1f:08:4c:9c:a4:46:18:bf:b6:29:4a:20:26:e1:da:e3:2c:
43:97:ba:2e:33:cb:97:8b:78:b0:08:57:ed:66:8c:1c:20:94:
d6:fe:d1:75:6c:6a:cd:84:d2:3b:23:c6:6f:56:42:b4:12:9d:
05:19:77:6a:d3:f7:cc:4a:7f:1b:1b:76:90:5d:34:7a:dd:6b:
1d:1f:ef:e1:3b:5f:da:0c:59:55:f6:be:47:3b:7e:a0:3e:2b:
a7:47:c5:c9:92:95:2d:9f:35:6b:e1:38:dd:bb:d9:5f:cf:5b:
ce:fe:54:cf:43:1b:5a:2a:08:b6:10:1d:f2:5f:c1:b3:4a:c7:
cd:6b:64:19:22:ec:e5:30:85:1c:b0:66:38:cf:ee:70:04:aa:
bc:46:99:d3:b8:6a:80:ce:02:3a:ef:6e:1c:99:1e:8e:d4:d7:
39:7c:74:04:7b:83:d0:7e:16:af:be:fe:05:95:0f:2a:4e:44:
44:13:0f:36:27:29:df:f3:f0:d3:d2:bd:62:75:d9:3f:8e:fa:
a6:b4:7c:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IoLaFymRICYMDCJWufXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzBhYTJlOWU4MjAwZWVlNjcwMjY5NDJhMmM1MjQ4ODAy
ZjMzYjgwHhcNMjUxMDIwMDEwMTE1WhcNMjUxMDIxMDEwMTE1WjAzMTEwLwYDVQQD
Eyg1MDVjMDhkZTYyMjg4MTkwMDkyZDYxYTI2NjgxNDFhMmFiZjU5YTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll1V8ORz0Nta5zZi77nzbWf7K7vq
ptFUeXFS7TBszOpIRjh4PYVaBoGcMyevSHPuufgEAeVG7JRepeJz7nLEvRQYIAr+
yNaQhCb6E2tuMC2mo+xc/XVQIhLxzgvmMz8SpzmTlQ0Qfzs9DiFYBDnHaGxmqr1d
dHSfNMZ/uOQjNz9JUZEbRQcMajM1cVnD8/XedyDlesuK/OIpqQPYBH1F94UntEB8
9b245k5lr8Bn+ZkRaU2rvl/PaDefi/K6/djJ0oGDihGxZZG30lWS3Dwl9KIQyrC7
ax63err7Zhjn3CZirgOjg3oozjiXralCaz4giVYCEbGje72GBriWMLep8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBcCN5iKIGQCS1homaBQaKr9ZocMB8GA1UdIwQY
MBaAFEfAqi6eggDu5nAmlCosUkiALzO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84NDZhZTItN2RkZi00MzMyLWEzNjMt
YzY5Mjc4MjA2NGIwLzEvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84NDZhZTItN2RkZi00MzMyLWEzNjMtYzY5Mjc4MjA2NGIw
LzEvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYVIbLGo
tOAU8qVjAENFC5zrmFg9EITqhf9bUGKlzjBH5B5dBad8ZnUtrtuuvrRzyP1E1AT7
+h8ITJykRhi/tilKICbh2uMsQ5e6LjPLl4t4sAhX7WaMHCCU1v7RdWxqzYTSOyPG
b1ZCtBKdBRl3atP3zEp/Gxt2kF00et1rHR/v4Ttf2gxZVfa+Rzt+oD4rp0fFyZKV
LZ81a+E43bvZX89bzv5Uz0MbWioIthAd8l/Bs0rHzWtkGSLs5TCFHLBmOM/ucASq
vEaZ07hqgM4COu9uHJkejtTXOXx0BHuD0H4Wr77+BZUPKk5ERBMPNicp3/Pw09K9
YnXZP476prR8Nw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:17 2025 by rpki-client