Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: dWVT7Zm0dbPPPwgUY3JHUPRqBfx6DuoQnY2BJ2gBfnM=
Subject key identifier: A1:D8:F9:D3:C2:10:EC:C6:46:AC:2B:3B:A5:A2:65:F9:FF:A5:DD:F3
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 0199FAA130D44E8DB763D0387C9D9301CE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 37
Signing time: Sun 19 Oct 2025 04:01:31 +0000
Manifest this update: Sun 19 Oct 2025 04:01:31 +0000
Manifest next update: Mon 20 Oct 2025 04:01:31 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: a1uPBS0I/g0QX8l08hcunnHh8SCvmI+c/f2w0z0v5SU=)
2: zVCCoN-U0ius3abDeot_YngoJfc.roa (hash: fP+nwjzWvUa3O/fKfTzCwxd5RWiCPK08gubU5L+iEvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:30:d4:4e:8d:b7:63:d0:38:7c:9d:93:01:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Oct 19 04:01:31 2025 GMT
Not After : Oct 20 04:01:31 2025 GMT
Subject: CN=a1d8f9d3c210ecc646ac2b3ba5a265f9ffa5ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:2c:b9:d2:8f:58:55:08:73:5e:c4:42:56:
2f:4b:2b:c1:3d:97:c4:b7:31:e2:8e:b6:72:ef:4b:
f1:77:ae:40:6d:ef:ea:65:ed:b0:9a:73:fc:5a:ab:
55:e7:ae:4c:02:93:cf:24:c8:13:7f:35:bb:a6:b6:
5b:5b:3c:90:cc:7d:0f:35:ed:da:b6:9c:ae:7d:ff:
68:33:73:ff:42:b8:f8:c0:b0:5b:c9:51:d6:60:80:
14:30:33:a4:2a:c5:12:91:7f:86:7f:d9:e6:07:ab:
ee:b1:0f:6a:2a:e8:f8:fd:57:a1:af:30:45:fd:6c:
9a:37:de:bb:ef:42:cc:17:f1:3d:ff:93:3d:b6:54:
f3:f4:65:00:3d:d0:96:02:76:6a:8f:bf:41:15:45:
33:56:b6:77:8b:f0:f8:36:f3:7a:6d:f2:47:d9:59:
e7:d9:8f:66:c3:68:5c:51:e1:d3:5d:3f:7b:58:a9:
cf:50:4d:89:a7:23:d1:7d:f6:03:75:30:17:50:c3:
ec:d4:ae:45:cc:14:ea:d3:99:71:1c:25:7f:4d:d3:
39:2c:26:4e:34:37:48:48:67:7b:86:d6:5b:c6:f8:
2b:25:b7:c9:e4:dc:95:d7:e1:56:4e:f8:61:28:c9:
b8:bc:bf:dc:56:f4:8d:9d:12:78:f7:11:5d:4f:04:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D8:F9:D3:C2:10:EC:C6:46:AC:2B:3B:A5:A2:65:F9:FF:A5:DD:F3
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c8:d1:53:29:ca:7e:54:c5:27:eb:30:42:0a:48:29:ab:d6:
2b:db:32:3c:79:ec:5d:2c:e6:13:3d:cc:c9:ec:fa:1c:21:66:
38:cd:c8:89:5f:78:f9:eb:6b:ec:12:26:8c:76:6e:b9:6c:9d:
99:18:d9:bc:96:62:c3:63:6d:be:d1:59:01:26:20:33:6e:37:
cf:16:65:3d:27:81:49:9e:25:46:59:48:12:95:28:19:22:40:
d8:b2:9b:39:45:0d:66:92:0a:ea:29:98:09:99:d1:be:47:ed:
d9:44:2f:37:f7:dc:5a:72:9e:9e:fd:93:71:20:61:d5:bc:6b:
5c:f5:d2:34:a0:05:82:dd:36:a5:df:c9:16:5f:cc:b9:c2:91:
51:e4:3f:c8:f2:d3:72:0f:30:70:ac:e7:d1:bb:2d:c6:b7:3b:
6c:57:4d:d0:35:91:13:fa:f0:06:c5:26:32:a6:d5:d3:7a:94:
7d:db:d5:2d:45:12:2d:25:9e:d1:a7:e5:48:0e:6e:cd:70:b4:
ab:42:64:c3:87:f1:a2:86:cd:6d:28:94:80:07:28:c9:a7:50:
2e:34:9d:dd:df:61:17:12:73:50:22:a0:e8:11:0c:57:44:4b:
d9:cc:59:70:09:42:df:63:9f:3d:f0:d2:cc:95:d6:da:0b:15:
a0:0e:6f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oTDUTo23Y9A4fJ2TAc4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2
ZWM2MzMwHhcNMjUxMDE5MDQwMTMxWhcNMjUxMDIwMDQwMTMxWjAzMTEwLwYDVQQD
EyhhMWQ4ZjlkM2MyMTBlY2M2NDZhYzJiM2JhNWEyNjVmOWZmYTVkZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXAsudKPWFUIc17EQlYvSyvBPZfE
tzHijrZy70vxd65Abe/qZe2wmnP8WqtV565MApPPJMgTfzW7prZbWzyQzH0PNe3a
tpyuff9oM3P/Qrj4wLBbyVHWYIAUMDOkKsUSkX+Gf9nmB6vusQ9qKuj4/VehrzBF
/WyaN96770LMF/E9/5M9tlTz9GUAPdCWAnZqj79BFUUzVrZ3i/D4NvN6bfJH2Vnn
2Y9mw2hcUeHTXT97WKnPUE2JpyPRffYDdTAXUMPs1K5FzBTq05lxHCV/TdM5LCZO
NDdISGd7htZbxvgrJbfJ5NyV1+FWTvhhKMm4vL/cVvSNnRJ49xFdTwTMfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHY+dPCEOzGRqwrO6WiZfn/pd3zMB8GA1UdIwQY
MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt
OWM4ZWFiNzZkYTk4LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4
LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMjRUynK
flTFJ+swQgpIKavWK9syPHnsXSzmEz3Myez6HCFmOM3IiV94+etr7BImjHZuuWyd
mRjZvJZiw2NtvtFZASYgM243zxZlPSeBSZ4lRllIEpUoGSJA2LKbOUUNZpIK6imY
CZnRvkft2UQvN/fcWnKenv2TcSBh1bxrXPXSNKAFgt02pd/JFl/MucKRUeQ/yPLT
cg8wcKzn0bstxrc7bFdN0DWRE/rwBsUmMqbV03qUfdvVLUUSLSWe0aflSA5uzXC0
q0Jkw4fxoobNbSiUgAcoyadQLjSd3d9hFxJzUCKg6BEMV0RL2cxZcAlC32OfPfDS
zJXW2gsVoA5v1g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:41 2025 by rpki-client