Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: cfOxbdE+MX9r0RF4LkwWgykYgmz6iPvK+M5Ly7tviC8=
Subject key identifier: 5E:AA:CB:FF:01:C5:BD:DF:C6:B9:76:56:B9:D8:BB:42:B7:DC:84:90
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 0199FBEC06256900477EBBF1120619B1247E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=)
2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: 8Srs8gJVye7hsb7eEpb/hv8wKr5XQToW/AsPZIhKi/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:06:25:69:00:47:7e:bb:f1:12:06:19:b1:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=5eaacbff01c5bddfc6b97656b9d8bb42b7dc8490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:c8:57:6e:ed:ac:b9:2e:1d:41:f9:c3:02:
ae:5a:38:7d:0f:bc:13:70:19:29:de:17:e4:6f:cb:
24:47:72:fc:6b:fc:bc:af:dd:89:33:18:1f:ed:ff:
6d:43:c4:bd:c3:e2:e3:5f:a7:13:a5:9f:f5:12:ea:
f1:b3:71:e0:fb:c6:b2:34:cc:30:38:05:ac:00:de:
60:3c:91:72:72:96:dd:e2:aa:72:bb:56:cb:29:ac:
f7:17:3c:d1:4e:b3:38:7d:ee:5e:8e:2f:f4:83:d6:
98:1e:9e:af:db:cf:ad:98:4c:4f:13:ab:0e:0e:f6:
35:90:7d:04:e7:43:4f:1a:f3:1e:a0:3c:20:74:c6:
66:eb:25:60:5e:d4:4b:56:dc:41:57:85:43:6b:b0:
1a:c3:f8:aa:94:cd:c6:9e:25:cd:ce:bf:98:bb:1b:
e0:c0:66:3a:5b:9a:64:2c:61:ba:9b:9d:c3:3a:36:
b4:49:a6:fb:0e:b8:66:35:2a:66:e8:c6:8a:a8:6a:
7b:bb:69:7a:5a:c7:9b:04:97:14:d4:79:b0:da:fd:
2c:09:f2:10:5f:8b:1d:c9:3a:c3:bb:7a:bc:cd:8b:
ec:c8:57:d3:c0:30:e3:a0:a9:75:cd:cd:2e:19:9f:
87:de:03:b0:4f:07:a7:ed:db:bb:73:79:a9:ea:d5:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:CB:FF:01:C5:BD:DF:C6:B9:76:56:B9:D8:BB:42:B7:DC:84:90
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5e:20:70:06:00:a7:f3:e2:5e:59:8d:10:ba:21:65:53:42:
9c:6a:d7:49:eb:59:38:b0:c0:be:aa:53:10:63:79:7c:43:14:
0e:28:01:5b:75:1f:ea:6d:b7:9b:7d:1f:f0:6e:57:96:f1:a3:
07:d1:4d:e8:6b:c2:30:7b:ff:23:27:27:b5:54:a1:50:c5:8f:
8c:68:87:5f:4c:4d:4e:c8:eb:26:a0:c8:86:e1:f8:90:70:0b:
d8:19:53:d1:8e:07:24:f8:96:85:6c:d9:42:fb:0e:a6:2d:92:
0d:7f:83:17:0a:42:e8:bf:3c:7e:cd:c1:81:f0:4e:0e:5e:9e:
1a:dd:d7:8a:3a:75:c0:0f:2c:ff:53:4d:cb:62:5b:98:fb:87:
b8:12:d7:69:9d:bd:14:a6:28:d6:b8:f5:a0:d7:f3:55:92:db:
ac:93:c8:36:17:dd:ba:e1:c1:95:7c:b9:df:5c:30:14:cc:75:
46:64:f7:3b:d8:22:7c:d3:d8:1d:19:9a:9f:22:fc:10:ba:50:
10:f1:19:4b:38:cd:a7:a7:f2:17:4e:89:a1:e2:62:82:cb:ad:
91:45:8e:6e:c9:a9:cc:91:6e:c7:ff:20:d0:16:bb:29:d0:74:
0f:a5:69:86:3c:20:b1:75:79:ff:92:d6:dd:0b:7f:99:21:f7:
cd:8f:23:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77AYlaQBHfrvxEgYZsSR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw
OGUyZTIwHhcNMjUxMDE5MTAwMjUzWhcNMjUxMDIwMTAwMjUzWjAzMTEwLwYDVQQD
Eyg1ZWFhY2JmZjAxYzViZGRmYzZiOTc2NTZiOWQ4YmI0MmI3ZGM4NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy//IV27trLkuHUH5wwKuWjh9D7wT
cBkp3hfkb8skR3L8a/y8r92JMxgf7f9tQ8S9w+LjX6cTpZ/1Eurxs3Hg+8ayNMww
OAWsAN5gPJFycpbd4qpyu1bLKaz3FzzRTrM4fe5eji/0g9aYHp6v28+tmExPE6sO
DvY1kH0E50NPGvMeoDwgdMZm6yVgXtRLVtxBV4VDa7Aaw/iqlM3GniXNzr+Yuxvg
wGY6W5pkLGG6m53DOja0Sab7DrhmNSpm6MaKqGp7u2l6WsebBJcU1Hmw2v0sCfIQ
X4sdyTrDu3q8zYvsyFfTwDDjoKl1zc0uGZ+H3gOwTwen7du7c3mp6tWSJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6qy/8Bxb3fxrl2VrnYu0K33ISQMB8GA1UdIwQY
MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt
YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4
LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf14gcAYA
p/PiXlmNELohZVNCnGrXSetZOLDAvqpTEGN5fEMUDigBW3Uf6m23m30f8G5XlvGj
B9FN6GvCMHv/IycntVShUMWPjGiHX0xNTsjrJqDIhuH4kHAL2BlT0Y4HJPiWhWzZ
QvsOpi2SDX+DFwpC6L88fs3BgfBODl6eGt3Xijp1wA8s/1NNy2JbmPuHuBLXaZ29
FKYo1rj1oNfzVZLbrJPINhfduuHBlXy531wwFMx1RmT3O9gifNPYHRmanyL8ELpQ
EPEZSzjNp6fyF06JoeJigsutkUWObsmpzJFux/8g0Ba7KdB0D6VphjwgsXV5/5LW
3Qt/mSH3zY8j6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:59 2025 by rpki-client