Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: rwrCBJqBKAZI2qZTIZVno1JgLpd97aMbD5GXX2QEGOg=
Subject key identifier: D3:CA:0F:B9:9D:79:0D:98:1C:13:A8:1A:69:F4:25:6D:0D:08:1D:99
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 0198D54EA3C52580CB49A28811A52529ABF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 06A9
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: wAucBlhMF7c6KaRAZ2/kbVtvJWJDkjq5Saa1JGgI8k8=)
2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a3:c5:25:80:cb:49:a2:88:11:a5:25:29:ab:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=d3ca0fb99d790d981c13a81a69f4256d0d081d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:a8:7c:a2:6f:00:3f:0f:5b:bb:08:6c:f9:
02:55:c5:0a:6d:90:0c:b0:3c:48:41:10:ec:d2:36:
5f:d0:04:e6:54:d8:43:8f:1d:61:e8:7b:12:00:6c:
9c:cb:98:c2:2a:88:9f:7c:f0:3b:48:21:d7:dc:a4:
72:28:50:bc:f5:15:10:5f:d5:09:87:99:74:6c:85:
7c:89:f1:3c:2b:93:0a:93:22:97:5b:ae:97:12:49:
f2:e1:62:84:34:96:8e:4d:6e:7f:9e:f8:d4:cd:40:
61:5e:5d:b2:dd:95:db:a0:0f:0a:ef:a3:71:20:d6:
1a:88:0b:dd:4a:8f:74:4a:5e:0d:a3:5a:c5:5d:87:
93:b0:47:6b:ff:c8:cb:65:77:e1:fb:92:b3:56:ef:
0d:83:9c:6c:fa:d8:fc:d8:9a:e5:10:7c:8d:62:3c:
e1:20:1a:d3:a8:31:6b:75:6e:98:a0:0c:fd:79:4d:
72:c7:46:03:01:03:5d:e3:cb:42:0c:94:18:bd:d1:
86:90:00:b0:e2:7f:2f:e7:20:bb:59:28:03:23:93:
f6:3e:4a:28:6a:9d:0e:0b:63:87:d0:d3:e1:8f:f5:
4d:f3:6d:a5:40:f9:00:c4:9f:9b:4f:cf:94:ff:89:
34:60:a6:fb:bb:6a:b0:10:6b:6e:f2:9a:6a:6e:36:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:0F:B9:9D:79:0D:98:1C:13:A8:1A:69:F4:25:6D:0D:08:1D:99
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4e:30:fe:c5:1e:ed:db:1c:3c:cb:c8:f3:96:59:42:8f:46:
b4:92:f5:a5:32:d7:47:b8:80:42:58:b4:70:43:f7:b1:74:b9:
e9:24:a7:42:ef:d6:1b:5d:55:41:c1:97:81:36:fd:19:8c:fb:
40:a8:e9:82:72:e1:b8:96:28:d0:12:ae:94:26:7f:9d:e7:48:
38:8d:7b:2a:4e:b3:71:59:43:55:a0:a0:3c:4c:c8:d5:c2:80:
00:0a:30:c0:84:a7:99:a8:cb:ce:df:79:e9:a9:74:cf:9c:9d:
02:5b:34:67:7b:1b:74:1b:a7:56:1f:ce:ce:bc:aa:66:85:5e:
cd:3d:70:42:78:4f:d8:db:fe:88:da:75:3b:97:f8:e9:15:c9:
cc:ed:05:d2:36:6e:56:3e:b6:02:d0:d8:de:8d:fc:63:92:f9:
7e:1b:e7:8d:db:23:9c:45:35:bc:ef:2e:46:42:9a:7f:7e:02:
5e:22:df:ae:7f:16:9c:58:44:d1:3c:b1:5e:44:8b:93:e8:a0:
e2:24:ed:1f:f4:25:fb:25:17:ee:d7:0b:4a:e2:57:a8:87:15:
25:d3:7d:a1:8b:d8:d2:2d:1c:bd:46:fa:58:29:25:9f:35:7d:
b8:87:3d:f9:6d:dd:9f:87:4a:bd:2e:1c:70:92:88:84:21:e5:
77:6a:7c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqPFJYDLSaKIEaUlKav4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy
OTc4ZDIwHhcNMjUwODIzMDUwMjM3WhcNMjUwODI0MDUwMjM3WjAzMTEwLwYDVQQD
EyhkM2NhMGZiOTlkNzkwZDk4MWMxM2E4MWE2OWY0MjU2ZDBkMDgxZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQSofKJvAD8PW7sIbPkCVcUKbZAM
sDxIQRDs0jZf0ATmVNhDjx1h6HsSAGycy5jCKoiffPA7SCHX3KRyKFC89RUQX9UJ
h5l0bIV8ifE8K5MKkyKXW66XEkny4WKENJaOTW5/nvjUzUBhXl2y3ZXboA8K76Nx
INYaiAvdSo90Sl4No1rFXYeTsEdr/8jLZXfh+5KzVu8Ng5xs+tj82JrlEHyNYjzh
IBrTqDFrdW6YoAz9eU1yx0YDAQNd48tCDJQYvdGGkACw4n8v5yC7WSgDI5P2Pkoo
ap0OC2OH0NPhj/VN822lQPkAxJ+bT8+U/4k0YKb7u2qwEGtu8ppqbjYS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPKD7mdeQ2YHBOoGmn0JW0NCB2ZMB8GA1UdIwQY
MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt
ZmYzNGE4YWU5MDFhLzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh
LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdU4w/sUe
7dscPMvI85ZZQo9GtJL1pTLXR7iAQli0cEP3sXS56SSnQu/WG11VQcGXgTb9GYz7
QKjpgnLhuJYo0BKulCZ/nedIOI17Kk6zcVlDVaCgPEzI1cKAAAowwISnmajLzt95
6al0z5ydAls0Z3sbdBunVh/OzryqZoVezT1wQnhP2Nv+iNp1O5f46RXJzO0F0jZu
Vj62AtDY3o38Y5L5fhvnjdsjnEU1vO8uRkKaf34CXiLfrn8WnFhE0TyxXkSLk+ig
4iTtH/Ql+yUX7tcLSuJXqIcVJdN9oYvY0i0cvUb6WCklnzV9uIc9+W3dn4dKvS4c
cJKIhCHld2p8Tw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:05 2025 by rpki-client