Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: 6TRaxsp9mvAJ1rV00jYM2E431Ry9xoc5Npx8yCW9RKo=
Subject key identifier: 01:F6:4D:33:D5:20:33:19:9B:99:B6:62:DB:3C:AB:A6:2A:C4:1B:C3
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 0199FD34540F58A7BFB3D1F52E8CE7BD8704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: ZmeV5lalW/Kuc+2P3VbdxW1jk5/ShehQY7KsCARu9ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:54:0f:58:a7:bf:b3:d1:f5:2e:8c:e7:bd:87:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=01f64d33d52033199b99b662db3caba62ac41bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fd:82:8c:e6:f8:18:6b:90:34:82:0d:13:08:
34:b8:e8:cb:46:02:99:c0:c7:60:f4:ce:fc:4b:31:
1e:cd:82:69:bf:9f:ce:a6:2c:c1:bf:7e:b6:4e:bb:
c1:07:6b:b6:59:ed:95:bd:66:ca:e0:fb:dd:47:08:
50:3c:73:81:5d:f4:9b:60:2d:50:2c:ea:56:78:e6:
50:2f:b0:0a:48:66:37:3b:9e:b5:2f:5b:b5:12:eb:
f7:19:8a:62:a3:2f:2f:1d:48:58:5e:a0:e2:c4:42:
26:7f:2e:c8:f0:fb:96:fb:0b:a5:2a:45:39:ec:b0:
a8:05:89:14:dd:82:ca:1b:88:10:93:2f:94:e7:5f:
4c:89:33:82:5b:8e:d4:5a:d1:a0:7b:4f:46:07:d2:
33:9b:b5:07:85:60:16:31:ca:81:b6:f8:46:26:bb:
84:a6:1b:b5:72:71:a7:45:a8:01:9b:c1:7d:cd:ef:
d4:7d:0c:ce:80:5e:ef:06:ed:40:7d:4d:49:3a:55:
f1:d4:f6:f6:04:d3:c9:11:2d:02:40:a4:87:84:56:
b5:e9:cc:34:b8:a2:ff:bc:61:10:30:d0:11:0e:2a:
c4:13:40:8d:f5:1c:34:1e:c7:a9:1f:a5:13:74:e8:
8b:df:a7:07:90:7c:3f:49:86:d7:5a:e0:00:10:e7:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:4D:33:D5:20:33:19:9B:99:B6:62:DB:3C:AB:A6:2A:C4:1B:C3
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c1:14:45:51:a2:b5:7c:fc:70:b5:cc:32:59:f5:60:fd:2c:
0d:2a:35:81:be:05:3c:b6:ac:99:12:d3:68:52:7c:88:66:24:
ff:17:6a:a0:5d:c0:71:83:36:6c:76:b8:60:da:98:1e:31:94:
b5:ca:0b:b0:1f:e7:0d:c0:8e:ff:ba:f2:b3:2c:88:95:7e:7e:
b3:54:2c:98:02:44:7a:11:12:90:45:95:b8:ad:ea:b5:0a:8e:
97:4b:6b:93:f4:09:50:4f:e3:c4:1e:10:f7:a4:87:f7:b8:40:
47:82:0e:6f:aa:16:49:2f:b3:39:04:78:52:c8:e7:f8:75:8f:
64:34:44:72:89:5a:f2:e2:27:d0:f4:60:cf:a9:f3:a8:f5:e0:
b1:68:27:7b:9a:72:fa:98:19:e2:b8:3a:f3:c7:c9:b9:7b:56:
ea:df:08:c1:40:28:ae:26:5f:34:02:5c:6a:c3:36:59:e5:42:
ab:24:47:35:34:18:a7:3e:f8:79:c8:5f:86:91:c7:2c:10:8f:
34:a3:5f:5a:62:7d:3c:61:70:c8:74:33:89:e7:d1:ff:9d:d5:
be:0f:4c:c9:a8:c7:a0:50:f9:23:7b:04:43:46:30:72:98:6d:
ff:54:36:42:bf:2b:23:bf:db:34:8e:c4:20:25:d5:9e:1b:ef:
fb:64:8d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFQPWKe/s9H1LoznvYcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzJmNDk0NDU5ODAxOTk0NzU1MTJmNTI5NzYwOGY0NWQw
OGJiNWEwHhcNMjUxMDE5MTYwMTI5WhcNMjUxMDIwMTYwMTI5WjAzMTEwLwYDVQQD
EygwMWY2NGQzM2Q1MjAzMzE5OWI5OWI2NjJkYjNjYWJhNjJhYzQxYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/2CjOb4GGuQNIINEwg0uOjLRgKZ
wMdg9M78SzEezYJpv5/OpizBv362TrvBB2u2We2VvWbK4PvdRwhQPHOBXfSbYC1Q
LOpWeOZQL7AKSGY3O561L1u1Euv3GYpioy8vHUhYXqDixEImfy7I8PuW+wulKkU5
7LCoBYkU3YLKG4gQky+U519MiTOCW47UWtGge09GB9Izm7UHhWAWMcqBtvhGJruE
phu1cnGnRagBm8F9ze/UfQzOgF7vBu1AfU1JOlXx1Pb2BNPJES0CQKSHhFa16cw0
uKL/vGEQMNARDirEE0CN9Rw0HsepH6UTdOiL36cHkHw/SYbXWuAAEOc/JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH2TTPVIDMZm5m2Yts8q6YqxBvDMB8GA1UdIwQY
MBaAFHPC9JRFmAGZR1US9Sl2CPRdCLtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjIt
Nzg3YjliNTg0YzJkLzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjItNzg3YjliNTg0YzJk
LzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsEURVGi
tXz8cLXMMln1YP0sDSo1gb4FPLasmRLTaFJ8iGYk/xdqoF3AcYM2bHa4YNqYHjGU
tcoLsB/nDcCO/7rysyyIlX5+s1QsmAJEehESkEWVuK3qtQqOl0trk/QJUE/jxB4Q
96SH97hAR4IOb6oWSS+zOQR4Usjn+HWPZDREcola8uIn0PRgz6nzqPXgsWgne5py
+pgZ4rg688fJuXtW6t8IwUAoriZfNAJcasM2WeVCqyRHNTQYpz74echfhpHHLBCP
NKNfWmJ9PGFwyHQziefR/53Vvg9MyajHoFD5I3sEQ0Ywcpht/1Q2Qr8rI7/bNI7E
ICXVnhvv+2SN+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:20 2025 by rpki-client