Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: basMACCGsgrt94yNjESKZRmxyznfa1nb1JACUOtoLsk=
Subject key identifier: B5:A9:E0:9D:9F:F0:A4:EE:19:8E:06:34:66:B0:A3:B0:63:16:A8:08
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 0199FBEBA815D1C26F7792E13601CBD547AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: XYXGJ7hyY7M+ufgmralgN0TQMB7tkd7N1Vq/Cdx0FXs=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a8:15:d1:c2:6f:77:92:e1:36:01:cb:d5:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=b5a9e09d9ff0a4ee198e063466b0a3b06316a808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:c6:84:8b:f8:d4:c9:74:f4:9d:79:d8:76:
6f:b1:d8:8c:0e:cf:74:74:58:8d:30:0e:a2:7d:d9:
9b:6d:e7:d2:ec:cd:4d:aa:f0:4b:d9:33:43:e8:5f:
6b:86:32:0a:2e:27:28:01:bf:bd:de:3d:ee:9f:14:
49:b5:85:58:d5:48:b2:ec:81:e5:84:4a:4a:61:34:
7a:0a:95:1d:b2:60:f1:2b:68:d9:5e:9a:9d:4d:17:
0e:74:21:72:d3:b4:61:14:30:26:4a:34:fb:90:2b:
b3:25:78:97:30:b4:27:ea:d8:f4:ea:69:e8:3b:60:
4a:24:a4:b3:17:19:42:b4:96:3f:cb:e8:4f:0e:b9:
25:ae:93:9a:59:b3:dd:b9:c4:94:9b:96:d2:a0:25:
13:44:86:62:d6:eb:9b:c5:b9:e4:7d:2f:08:6d:cb:
a9:97:b2:68:21:1f:c2:6a:f6:07:a1:ec:92:b8:08:
ac:3c:32:c7:c0:4a:5b:d8:78:bd:2d:2f:2d:74:6d:
76:62:7b:26:ee:e3:d2:f4:f8:f4:5b:92:fb:5a:ea:
5b:f1:2e:c5:19:7e:5d:cd:37:a7:3e:6a:7e:c0:23:
8b:b7:71:ab:54:b2:27:a8:85:52:38:b4:19:bd:79:
86:e2:a0:2a:a1:d4:22:a4:37:e3:35:37:74:b4:50:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:E0:9D:9F:F0:A4:EE:19:8E:06:34:66:B0:A3:B0:63:16:A8:08
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2e:e8:62:ba:c0:4d:e8:fb:a7:ba:9a:4f:0d:95:d8:ac:0b:
10:db:4f:ed:70:dd:50:3c:91:da:61:67:01:a4:97:3b:41:f2:
3d:80:42:5a:56:00:c0:fb:f4:d7:e8:f4:5c:9d:f0:fe:ae:21:
0b:ed:8c:a7:65:dd:f5:db:be:c9:71:e9:57:a0:61:db:e0:09:
3d:f5:79:5b:f3:a1:f6:79:6b:32:3f:3c:3a:a6:c4:f8:56:a3:
96:57:fe:ab:6c:bc:12:ee:ac:8e:5d:a8:9f:cc:b2:71:99:85:
73:65:94:fe:66:c3:02:0c:89:8e:b5:d0:f7:cf:3d:67:a0:5f:
c9:5b:7b:43:65:db:07:f2:07:9f:a5:12:49:97:32:08:18:7f:
02:c9:c7:13:42:3f:8f:b1:3e:75:06:a5:c8:3f:26:ec:7c:55:
0f:0c:5c:4f:3d:3a:ae:d0:9b:17:e5:03:c5:10:2c:e9:7e:31:
e5:cf:b5:af:3a:2b:71:2c:38:ac:fc:40:7a:67:da:c6:c7:95:
4e:5d:0f:b1:93:fe:c7:dd:f9:56:6b:12:d3:12:5a:f9:50:64:
4b:00:04:94:bf:06:14:98:77:07:ff:22:47:de:c6:78:3c:9b:
79:1b:18:ae:99:b6:61:51:8d:e0:76:45:51:12:ba:17:c1:44:
60:63:5f:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766gV0cJvd5LhNgHL1UerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNTZhOWVkYjJkOWFkZTIwNGQ4MjMxM2NjZTk4YjY2MjNh
OWQ4YWMwHhcNMjUxMDE5MTAwMjI4WhcNMjUxMDIwMTAwMjI4WjAzMTEwLwYDVQQD
EyhiNWE5ZTA5ZDlmZjBhNGVlMTk4ZTA2MzQ2NmIwYTNiMDYzMTZhODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9rGhIv41Ml09J152HZvsdiMDs90
dFiNMA6ifdmbbefS7M1NqvBL2TND6F9rhjIKLicoAb+93j3unxRJtYVY1Uiy7IHl
hEpKYTR6CpUdsmDxK2jZXpqdTRcOdCFy07RhFDAmSjT7kCuzJXiXMLQn6tj06mno
O2BKJKSzFxlCtJY/y+hPDrklrpOaWbPducSUm5bSoCUTRIZi1uubxbnkfS8Ibcup
l7JoIR/CavYHoeySuAisPDLHwEpb2Hi9LS8tdG12Ynsm7uPS9Pj0W5L7Wupb8S7F
GX5dzTenPmp+wCOLt3GrVLInqIVSOLQZvXmG4qAqodQipDfjNTd0tFASTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWp4J2f8KTuGY4GNGawo7BjFqgIMB8GA1UdIwQY
MBaAFPJWqe2y2a3iBNgjE8zpi2YjqdisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMt
OTEwN2M5MTJkN2Q4LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMtOTEwN2M5MTJkN2Q4
LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi7oYrrA
Tej7p7qaTw2V2KwLENtP7XDdUDyR2mFnAaSXO0HyPYBCWlYAwPv01+j0XJ3w/q4h
C+2Mp2Xd9du+yXHpV6Bh2+AJPfV5W/Oh9nlrMj88OqbE+Fajllf+q2y8Eu6sjl2o
n8yycZmFc2WU/mbDAgyJjrXQ9889Z6BfyVt7Q2XbB/IHn6USSZcyCBh/AsnHE0I/
j7E+dQalyD8m7HxVDwxcTz06rtCbF+UDxRAs6X4x5c+1rzorcSw4rPxAemfaxseV
Tl0PsZP+x935VmsS0xJa+VBkSwAElL8GFJh3B/8iR97GeDybeRsYrpm2YVGN4HZF
URK6F8FEYGNfXA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:04 2025 by rpki-client