Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: iS1VP5pYabbJ96ZNxnxUn0MTynRupuPy7wWnRKCwd28=
Subject key identifier: 87:CD:9B:98:B7:72:EF:40:2E:40:3F:2F:94:AD:F8:19:F5:79:53:F9
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 0199FEB49A5B8573FE914DF7879EFE9BF28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 1225
Signing time: Sun 19 Oct 2025 23:01:12 +0000
Manifest this update: Sun 19 Oct 2025 23:01:12 +0000
Manifest next update: Mon 20 Oct 2025 23:01:12 +0000
Files and hashes: 1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: s/0V2Z+2T7vqROp+bhz49pltDkMKxccOwga7bixzbGY=)
2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=)
3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9a:5b:85:73:fe:91:4d:f7:87:9e:fe:9b:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Oct 19 23:01:12 2025 GMT
Not After : Oct 20 23:01:12 2025 GMT
Subject: CN=87cd9b98b772ef402e403f2f94adf819f57953f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:24:f6:31:8f:b7:c6:23:00:1e:78:44:03:53:
66:18:18:d3:d7:cd:62:f8:2a:e2:95:3c:d4:4b:7b:
c6:4a:cb:1d:8d:ff:e1:cd:e0:97:ed:32:aa:8a:0d:
f9:1f:4c:aa:c8:71:d6:2f:ba:5a:25:34:95:fb:fd:
5e:47:5c:ff:97:b5:7c:ac:75:9f:69:26:50:66:73:
65:65:32:f1:12:88:bc:b4:01:68:98:86:6a:e8:fb:
ec:67:70:4d:04:6e:2f:60:43:56:f4:2a:5e:65:01:
a1:a3:ec:d0:83:c6:1f:07:8c:79:e7:3f:17:b3:f5:
e4:3b:98:6f:ae:e1:5c:19:49:95:60:9a:7d:82:03:
e3:1d:e2:99:78:5c:90:ce:eb:87:fb:2f:9a:61:7d:
a3:69:16:3e:14:89:c4:0d:3a:e1:03:20:a5:f5:5c:
d3:9f:55:13:a3:20:21:ae:e6:9a:a7:37:cb:89:0b:
f7:d6:2f:74:c8:b7:20:ed:f1:fe:0c:2d:49:2b:73:
0d:f8:dc:77:64:5d:f6:5b:f8:36:c2:8d:3f:0f:d2:
98:93:e6:4b:3c:01:47:8f:06:d8:54:73:37:7f:02:
19:95:cc:5d:2e:29:bd:3b:2c:06:99:84:74:8e:b0:
6c:38:0f:ce:85:25:2d:51:d0:9f:f7:8c:c8:fa:c7:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CD:9B:98:B7:72:EF:40:2E:40:3F:2F:94:AD:F8:19:F5:79:53:F9
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:21:28:b5:98:b7:67:66:5c:5e:b3:71:66:cc:36:50:df:03:
05:87:b4:6a:0c:5c:5f:71:f1:af:66:da:c8:ac:62:dd:f9:5f:
3a:8e:8f:75:d2:63:60:9d:00:25:77:91:e4:19:0e:1d:d4:f5:
88:f6:09:87:4f:ff:60:10:39:27:10:47:c9:03:5c:35:bd:5a:
d0:17:3b:07:dd:b2:52:e7:79:64:94:f5:0e:79:41:b3:14:5e:
e0:a1:08:b0:82:5e:a8:88:0a:af:94:2b:95:29:af:55:15:00:
ca:6c:eb:09:7a:c7:73:b7:a4:cf:df:f5:01:82:2d:63:00:79:
01:dc:cd:97:e8:c1:ba:97:b9:65:b5:af:63:1d:eb:1e:0b:d2:
49:5b:d9:83:61:43:ea:80:90:74:29:72:4d:0a:8a:49:06:ac:
01:c8:d3:ae:5a:00:4d:c9:b6:50:4d:9a:b4:d8:73:c2:25:4b:
03:10:88:54:84:2a:a4:11:b9:6f:14:7f:71:81:ce:8a:17:e4:
cf:26:4b:da:45:99:21:52:49:60:83:46:f1:eb:70:ba:fa:73:
87:66:9a:a6:35:6e:2c:0c:c0:bb:6e:7e:b8:23:c7:21:21:18:
2d:d6:f0:3f:6d:7d:1d:71:43:6c:58:ae:a2:63:2e:90:24:ed:
9d:6f:23:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tJpbhXP+kU33h57+m/KOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODA3ZjI4MGRhOTk1NjllY2EyNDM0NmJhYmU5ZGM4NWFj
MTMyNDAwHhcNMjUxMDE5MjMwMTEyWhcNMjUxMDIwMjMwMTEyWjAzMTEwLwYDVQQD
Eyg4N2NkOWI5OGI3NzJlZjQwMmU0MDNmMmY5NGFkZjgxOWY1Nzk1M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyT2MY+3xiMAHnhEA1NmGBjT181i
+CrilTzUS3vGSssdjf/hzeCX7TKqig35H0yqyHHWL7paJTSV+/1eR1z/l7V8rHWf
aSZQZnNlZTLxEoi8tAFomIZq6PvsZ3BNBG4vYENW9CpeZQGho+zQg8YfB4x55z8X
s/XkO5hvruFcGUmVYJp9ggPjHeKZeFyQzuuH+y+aYX2jaRY+FInEDTrhAyCl9VzT
n1UToyAhruaapzfLiQv31i90yLcg7fH+DC1JK3MN+Nx3ZF32W/g2wo0/D9KYk+ZL
PAFHjwbYVHM3fwIZlcxdLim9OywGmYR0jrBsOA/OhSUtUdCf94zI+sccxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfNm5i3cu9ALkA/L5St+Bn1eVP5MB8GA1UdIwQY
MBaAFPKAfygNqZVp7KJDRrq+nchawTJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYt
YTlmYWY2YTI2NDI2LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYtYTlmYWY2YTI2NDI2
LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyEotZi3
Z2ZcXrNxZsw2UN8DBYe0agxcX3Hxr2bayKxi3flfOo6PddJjYJ0AJXeR5BkOHdT1
iPYJh0//YBA5JxBHyQNcNb1a0Bc7B92yUud5ZJT1DnlBsxRe4KEIsIJeqIgKr5Qr
lSmvVRUAymzrCXrHc7ekz9/1AYItYwB5AdzNl+jBupe5ZbWvYx3rHgvSSVvZg2FD
6oCQdClyTQqKSQasAcjTrloATcm2UE2atNhzwiVLAxCIVIQqpBG5bxR/cYHOihfk
zyZL2kWZIVJJYING8etwuvpzh2aapjVuLAzAu25+uCPHISEYLdbwP219HXFDbFiu
omMukCTtnW8joQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:03 2025 by rpki-client