Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier: RMjOpO383mmDeP6zS3A6rr2TCoYQyw/7mcMng6eqwMM=
Subject key identifier: CB:2E:93:EA:AF:12:9E:10:1A:25:8A:D6:EC:02:4E:47:FE:D0:2D:C5
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer: /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial: 0199FFC895E62EA8356EB426D77D12656517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number: 06A0
Signing time: Mon 20 Oct 2025 04:02:39 +0000
Manifest this update: Mon 20 Oct 2025 04:02:39 +0000
Manifest next update: Tue 21 Oct 2025 04:02:39 +0000
Files and hashes: 1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: qXtblJ0Ca6t3nECSN25z4Gn/v9gPpMPuTlv9h4X+6Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:95:e6:2e:a8:35:6e:b4:26:d7:7d:12:65:65:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Validity
Not Before: Oct 20 04:02:39 2025 GMT
Not After : Oct 21 04:02:39 2025 GMT
Subject: CN=cb2e93eaaf129e101a258ad6ec024e47fed02dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:51:48:e2:9b:29:02:4d:7e:87:2c:09:4f:
b4:c5:57:39:f3:82:ba:a1:bc:ba:af:1a:b4:bc:5f:
ad:49:28:ee:25:c6:f1:d9:f8:ac:5d:71:02:2e:db:
c8:9d:50:d7:4d:0a:1e:46:fa:f5:b4:62:4f:85:1a:
85:fc:54:fd:e4:50:08:de:28:1e:5c:cc:ab:e8:30:
89:72:0d:64:97:a9:2f:50:ef:a6:d8:c2:ac:d7:65:
6b:3b:6c:00:26:69:81:53:1b:b9:93:e3:8b:24:e5:
24:9a:c7:d2:11:ba:6a:bb:b7:47:f2:f5:3a:c1:8f:
cb:85:d1:10:ab:e0:93:dc:3c:00:ea:f6:ff:ac:3c:
42:ad:1c:41:43:84:50:78:26:ab:da:4d:85:97:d4:
dd:d6:37:39:60:bd:a4:43:6e:e8:9e:46:6d:3d:66:
4e:47:e5:8e:bf:db:dd:34:e5:26:78:b2:d6:f4:88:
99:fd:97:42:53:e4:31:9b:bd:ff:17:b2:b3:b4:90:
09:96:9a:81:9b:09:71:fe:7c:0f:d7:59:d7:73:89:
b4:ad:c1:37:4c:b4:95:e5:22:a3:05:cf:24:07:a0:
85:e1:f1:fb:64:c0:b6:0a:9e:24:bc:8f:84:4a:47:
82:72:63:e3:cd:74:88:09:20:b3:68:c1:0e:b0:9e:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:93:EA:AF:12:9E:10:1A:25:8A:D6:EC:02:4E:47:FE:D0:2D:C5
X509v3 Authority Key Identifier:
keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0f:f0:cc:cc:4a:dd:06:0e:6f:e2:2f:04:c8:4b:33:c2:c1:
ef:78:2e:59:44:96:99:83:31:c9:77:53:9d:8a:f6:70:98:d1:
f9:00:05:1f:14:84:53:c6:19:d1:26:cc:34:d1:f1:34:ae:11:
5c:c0:f9:5a:15:22:f9:00:e0:72:71:7f:06:6a:9c:4c:b7:09:
6a:59:75:33:ef:6f:68:66:34:eb:cb:64:2b:7c:5d:2b:ad:e1:
fe:0b:b9:16:12:47:9b:18:20:5a:52:f4:11:ff:3c:7d:83:16:
5a:a1:7f:cf:6c:44:c0:10:68:a9:9b:02:bd:e6:2b:b0:b0:0a:
51:3e:c7:8a:02:e1:bb:f7:63:61:b6:ab:a3:7f:78:e7:8d:f0:
e1:f6:05:c6:c6:8f:c3:b3:f6:4e:49:01:87:bf:25:66:4e:fb:
60:b1:b6:f0:24:82:e5:aa:09:c2:65:96:03:ed:99:e4:71:35:
d5:a2:48:e2:38:8b:88:ac:90:be:9e:3d:27:f8:8a:e8:b7:49:
9b:b6:7c:15:b6:eb:54:e1:dd:58:2a:48:fd:54:3e:f7:cb:1d:
c5:e0:9a:6d:35:3e:6e:5e:87:7c:62:65:33:06:cf:1d:c6:d6:
b0:9d:9b:8f:d2:76:fb:5c:fc:5f:94:7d:57:25:51:ad:ba:be:
16:60:a1:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yJXmLqg1brQm130SZWUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzdiZTUyMWQxN2E2YTU5MmNjNjFmNzkxNGMyNWYxNjk1
N2NjOWMwHhcNMjUxMDIwMDQwMjM5WhcNMjUxMDIxMDQwMjM5WjAzMTEwLwYDVQQD
EyhjYjJlOTNlYWFmMTI5ZTEwMWEyNThhZDZlYzAyNGU0N2ZlZDAyZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNNRSOKbKQJNfocsCU+0xVc584K6
oby6rxq0vF+tSSjuJcbx2fisXXECLtvInVDXTQoeRvr1tGJPhRqF/FT95FAI3ige
XMyr6DCJcg1kl6kvUO+m2MKs12VrO2wAJmmBUxu5k+OLJOUkmsfSEbpqu7dH8vU6
wY/LhdEQq+CT3DwA6vb/rDxCrRxBQ4RQeCar2k2Fl9Td1jc5YL2kQ27onkZtPWZO
R+WOv9vdNOUmeLLW9IiZ/ZdCU+Qxm73/F7KztJAJlpqBmwlx/nwP11nXc4m0rcE3
TLSV5SKjBc8kB6CF4fH7ZMC2Cp4kvI+ESkeCcmPjzXSICSCzaMEOsJ4NBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsuk+qvEp4QGiWK1uwCTkf+0C3FMB8GA1UdIwQY
MBaAFHvHvlIdF6alksxh95FMJfFpV8ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzIt
MTA1ZDgwMDIxNDlkLzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzItMTA1ZDgwMDIxNDlk
LzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQ/wzMxK
3QYOb+IvBMhLM8LB73guWUSWmYMxyXdTnYr2cJjR+QAFHxSEU8YZ0SbMNNHxNK4R
XMD5WhUi+QDgcnF/BmqcTLcJall1M+9vaGY068tkK3xdK63h/gu5FhJHmxggWlL0
Ef88fYMWWqF/z2xEwBBoqZsCveYrsLAKUT7HigLhu/djYbaro394543w4fYFxsaP
w7P2TkkBh78lZk77YLG28CSC5aoJwmWWA+2Z5HE11aJI4jiLiKyQvp49J/iK6LdJ
m7Z8FbbrVOHdWCpI/VQ+98sdxeCabTU+bl6HfGJlMwbPHcbWsJ2bj9J2+1z8X5R9
VyVRrbq+FmChbA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:35 2025 by rpki-client