Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: GE0XyWkFS3X0NvaXdfO4bIMBUitWHjpx2fiA86JdlRU=
Subject key identifier: 41:1E:86:E2:4A:69:18:27:26:FC:DA:51:80:3D:57:34:1C:A1:9B:37
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 0199FC21A2DFB627EEBF840428E57C7DD8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 03A1
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: ZUljKU/5RrdS/dO3Snl1XWAuX6204vu8pO/XHGkF7eQ=)
2: gtqtvDZxxq5MJdwetq5IVth42z0.roa (hash: DsoC8S+ekUdxd5VaMM9eODyiV+OQ6KDTcMckhDvQ+dw=)
3: vlbjkguhua3sXNAb4WL9C-kH7NI.roa (hash: W2Tg0b912XPXpVMo5wmJMbF6s29yN1E6dtpyPDGr82E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a2:df:b6:27:ee:bf:84:04:28:e5:7c:7d:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=411e86e24a69182726fcda51803d57341ca19b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:0b:9f:d9:56:e2:54:dd:17:c7:f6:b2:76:
e2:53:1b:09:52:64:6a:04:67:ae:73:82:53:81:71:
a4:02:0c:9d:c1:b6:d5:b7:04:c8:1f:ed:5e:32:3c:
1b:a7:49:8f:8f:e2:e4:34:bf:c6:d5:a9:3b:c0:bf:
f6:46:2c:ae:8b:90:cf:c8:1b:a3:d0:66:92:9e:77:
8c:26:d3:5b:43:4d:7c:91:11:27:f2:c9:93:f7:bf:
4a:9b:59:e9:d4:22:b7:7f:2d:d6:94:95:91:f9:53:
20:42:15:9e:27:d7:99:9a:41:31:02:73:ca:1d:b4:
1f:40:f6:2e:a9:9e:ff:a9:18:df:fd:e2:44:61:37:
81:08:1c:2b:b2:75:e2:97:ba:85:fa:0c:87:42:55:
a8:03:b8:ef:2d:49:5c:d1:41:41:75:db:3d:99:a4:
b7:a4:af:56:18:02:e1:c5:d3:2d:38:eb:26:b3:6b:
0c:ac:15:ce:7e:d7:46:04:78:be:2d:07:b6:89:8f:
73:e0:c8:1c:2c:f4:5c:1c:85:41:b8:6e:cd:82:fc:
95:65:6d:7e:95:bd:d3:5a:65:7c:ca:42:92:9c:ca:
3a:1f:17:ae:aa:51:93:b8:8a:3f:fe:0c:92:17:fd:
6e:7e:f5:fb:84:10:3e:68:be:a3:b0:49:d5:7c:a1:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1E:86:E2:4A:69:18:27:26:FC:DA:51:80:3D:57:34:1C:A1:9B:37
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6c:99:0f:21:3f:2f:1d:d4:e0:e7:8c:3b:16:49:75:9f:88:
e7:a3:20:4c:cf:b6:16:46:a3:a2:ac:01:a2:ad:da:22:a6:82:
c2:ab:1b:5d:39:67:19:94:76:f9:e8:60:97:9d:42:92:d7:bb:
24:45:9f:db:81:12:09:c3:a4:9a:72:08:30:df:44:95:60:00:
64:4a:2c:e3:41:be:6e:ea:b7:65:fe:8e:6f:d6:b2:05:65:85:
50:1a:c4:f3:8b:97:59:ce:34:5c:04:9c:c4:40:ca:ad:66:84:
78:9b:26:ea:de:2d:fa:3a:ce:82:61:cf:8a:77:f5:9d:ee:0a:
c2:18:af:27:75:05:b3:71:15:01:c6:3d:02:b1:55:28:c9:de:
3b:8a:97:b7:5e:9b:b4:02:3d:b6:2e:94:25:d0:fa:81:5c:cb:
33:c6:03:a0:1d:93:1a:32:00:76:3a:d9:78:ff:84:cd:30:2b:
50:a6:d1:f2:91:04:62:30:82:81:ec:06:8b:a8:a3:a3:75:cc:
83:81:6f:d4:fd:77:95:37:22:4b:79:4c:2d:8f:36:cc:0a:ec:
39:90:49:fb:3b:8b:25:2b:12:e7:68:6a:6b:4f:b0:74:4d:3f:
07:3c:2e:fe:3a:4b:ad:d5:00:16:07:74:33:63:48:38:f3:36:
c1:c7:35:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IaLftifuv4QEKOV8fdjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj
ZTJmZTUwHhcNMjUxMDE5MTEwMTI2WhcNMjUxMDIwMTEwMTI2WjAzMTEwLwYDVQQD
Eyg0MTFlODZlMjRhNjkxODI3MjZmY2RhNTE4MDNkNTczNDFjYTE5YjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPsLn9lW4lTdF8f2snbiUxsJUmRq
BGeuc4JTgXGkAgydwbbVtwTIH+1eMjwbp0mPj+LkNL/G1ak7wL/2Riyui5DPyBuj
0GaSnneMJtNbQ018kREn8smT979Km1np1CK3fy3WlJWR+VMgQhWeJ9eZmkExAnPK
HbQfQPYuqZ7/qRjf/eJEYTeBCBwrsnXil7qF+gyHQlWoA7jvLUlc0UFBdds9maS3
pK9WGALhxdMtOOsms2sMrBXOftdGBHi+LQe2iY9z4MgcLPRcHIVBuG7NgvyVZW1+
lb3TWmV8ykKSnMo6HxeuqlGTuIo//gySF/1ufvX7hBA+aL6jsEnVfKGQSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEehuJKaRgnJvzaUYA9VzQcoZs3MB8GA1UdIwQY
MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt
ZjgyZDYwMGRkNGUyLzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy
LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGyZDyE/
Lx3U4OeMOxZJdZ+I56MgTM+2FkajoqwBoq3aIqaCwqsbXTlnGZR2+ehgl51Ckte7
JEWf24ESCcOkmnIIMN9ElWAAZEos40G+buq3Zf6Ob9ayBWWFUBrE84uXWc40XASc
xEDKrWaEeJsm6t4t+jrOgmHPinf1ne4KwhivJ3UFs3EVAcY9ArFVKMneO4qXt16b
tAI9ti6UJdD6gVzLM8YDoB2TGjIAdjrZeP+EzTArUKbR8pEEYjCCgewGi6ijo3XM
g4Fv1P13lTciS3lMLY82zArsOZBJ+zuLJSsS52hqa0+wdE0/Bzwu/jpLrdUAFgd0
M2NIOPM2wcc1/g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:14 2025 by rpki-client