Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: k7ESaIThRMvtOr0A28XeILfX0bvxW5oO4SHwbBkNwdk=
Subject key identifier: 6A:E4:D8:3B:EC:0E:48:4B:7A:0A:28:5D:24:40:F5:18:79:1F:72:0C
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 0199FC8F627D4E7B88A6725482ACFA346C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 01DE
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: QlC9ImseGnbfu++z8GP61a48f+vJ/BjTUjuS+N1YCJ0=)
2: g827ucs3EThsAfzbTT2FMhBdWaY.roa (hash: PzIDENEz83QkajYAOtSf7pvZj1/xEbuYaZgcwQILtJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:62:7d:4e:7b:88:a6:72:54:82:ac:fa:34:6c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=6ae4d83bec0e484b7a0a285d2440f518791f720c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:01:de:eb:34:1e:c4:2c:60:54:ad:1c:f6:
e6:76:b6:2b:26:7f:15:8e:09:04:ae:a8:3f:81:c7:
1f:af:ee:a7:6e:cd:a3:b2:72:15:29:ea:f7:3d:93:
09:fb:0a:37:3f:4c:b6:f2:f7:04:ea:00:fe:af:06:
bb:c2:b8:98:91:58:53:8b:89:91:66:7a:4d:37:fc:
b9:9b:4a:1c:db:f4:0c:32:62:be:c5:b8:f5:4c:7c:
92:5e:8c:35:37:83:f7:5c:0e:ec:88:73:e2:06:00:
69:04:b8:9d:ac:e3:68:57:a1:b2:83:a3:3d:7a:b9:
a5:39:2a:32:6f:8f:a8:7c:9b:c0:6c:ec:3b:e6:92:
a6:26:71:83:dd:e3:f0:22:51:27:e7:9c:e3:35:a7:
0a:a9:74:07:2a:e0:1c:ee:ad:f1:e2:79:36:73:53:
c1:c5:19:9b:cf:68:44:ad:dd:b9:a3:1c:30:99:cf:
a5:e7:8e:ad:e4:a0:fc:18:ad:b1:f9:40:80:bc:68:
69:94:b9:aa:f6:1b:d9:aa:2e:b5:7f:2b:bf:98:0b:
91:d6:d4:d0:41:b6:52:be:95:48:f7:d1:30:2b:29:
65:b4:52:0d:b3:44:64:c4:8e:f7:6d:67:ff:9d:b4:
cc:47:64:ce:73:d1:15:d6:99:8c:62:40:75:8f:49:
97:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:D8:3B:EC:0E:48:4B:7A:0A:28:5D:24:40:F5:18:79:1F:72:0C
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:65:54:ba:39:dd:36:da:f5:b5:41:c7:67:22:2c:0b:6c:e2:
36:20:63:99:1d:c2:bb:01:2e:19:c3:00:5c:0e:e3:64:da:87:
64:bd:7a:d3:13:87:cf:a5:16:5b:e4:de:db:26:13:71:bb:8c:
d9:22:64:bb:a5:d8:12:74:b6:53:63:20:1e:09:1c:d8:89:74:
fe:99:ae:b1:c8:0c:f2:0d:b6:c0:5e:9d:8d:b2:1e:65:f6:69:
e3:9c:68:f7:7d:fe:25:10:7f:ca:83:d2:35:b4:3b:64:9e:50:
09:42:28:f4:c1:37:9d:71:f2:90:5d:82:8f:0d:d2:44:f3:16:
f4:a7:5d:a8:a3:9f:8a:e5:a7:0f:78:c8:2b:f2:c8:ef:12:da:
79:39:61:a9:37:bd:d1:f8:be:a1:f1:86:4e:38:c6:75:9a:bf:
f6:48:6a:0b:1d:f8:c7:cc:41:49:73:bb:5a:61:68:65:4f:92:
78:32:61:51:b7:be:d1:9a:39:98:71:93:a4:27:f2:57:e0:35:
ea:95:f2:af:9f:8e:89:5d:2a:cd:b7:1e:86:a8:6c:93:da:d6:
66:b9:5c:5b:fb:a7:94:07:01:11:01:ff:bb:3f:04:d4:99:26:
d1:1d:2c:72:53:4f:ec:67:ae:96:58:c4:f0:04:58:34:b5:0b:
f9:b3:c6:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2J9TnuIpnJUgqz6NGw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGI3MzRkZjRmYTZhZWUxMmVhOTkwNjU3YjAzNWExNjJi
NGE5ZTYwHhcNMjUxMDE5MTMwMTE5WhcNMjUxMDIwMTMwMTE5WjAzMTEwLwYDVQQD
Eyg2YWU0ZDgzYmVjMGU0ODRiN2EwYTI4NWQyNDQwZjUxODc5MWY3MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSAB3us0HsQsYFStHPbmdrYrJn8V
jgkErqg/gccfr+6nbs2jsnIVKer3PZMJ+wo3P0y28vcE6gD+rwa7wriYkVhTi4mR
ZnpNN/y5m0oc2/QMMmK+xbj1THySXow1N4P3XA7siHPiBgBpBLidrONoV6Gyg6M9
ermlOSoyb4+ofJvAbOw75pKmJnGD3ePwIlEn55zjNacKqXQHKuAc7q3x4nk2c1PB
xRmbz2hErd25oxwwmc+l546t5KD8GK2x+UCAvGhplLmq9hvZqi61fyu/mAuR1tTQ
QbZSvpVI99EwKylltFINs0RkxI73bWf/nbTMR2TOc9EV1pmMYkB1j0mXUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrk2DvsDkhLegooXSRA9Rh5H3IMMB8GA1UdIwQY
MBaAFPELc030+mruEuqZBlewNaFitKnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmIt
ZTE1MjUwMzkyODg3LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmItZTE1MjUwMzkyODg3
LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWVUujnd
Ntr1tUHHZyIsC2ziNiBjmR3CuwEuGcMAXA7jZNqHZL160xOHz6UWW+Te2yYTcbuM
2SJku6XYEnS2U2MgHgkc2Il0/pmuscgM8g22wF6djbIeZfZp45xo933+JRB/yoPS
NbQ7ZJ5QCUIo9ME3nXHykF2Cjw3SRPMW9KddqKOfiuWnD3jIK/LI7xLaeTlhqTe9
0fi+ofGGTjjGdZq/9khqCx34x8xBSXO7WmFoZU+SeDJhUbe+0Zo5mHGTpCfyV+A1
6pXyr5+OiV0qzbcehqhsk9rWZrlcW/unlAcBEQH/uz8E1Jkm0R0sclNP7GeulljE
8ARYNLUL+bPG0A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:24 2025 by rpki-client