Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File: 8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier: id1o900CGu6pz2x4egJmahGuPCvTT5v52ExBXnceUAA=
Subject key identifier: E4:F7:17:B5:1E:11:78:12:E3:40:CE:4F:DF:50:F8:43:1A:69:E1:09
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer: /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial: 0199FDD8F5A0834DE7FFAA962AE229DA3898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number: 0D6F
Signing time: Sun 19 Oct 2025 19:01:18 +0000
Manifest this update: Sun 19 Oct 2025 19:01:18 +0000
Manifest next update: Mon 20 Oct 2025 19:01:18 +0000
Files and hashes: 1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: NqGUJeYpafiXeUS1GWNipfjc33FrNl/rv2h+0qUxll0=)
2: Nh4smUq7Nayhm_h4hcJhFSXbd98.roa (hash: 0tOyxit0JfWpS02swEQXMIpCvZrxbPbACrr2wxwWLsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f5:a0:83:4d:e7:ff:aa:96:2a:e2:29:da:38:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Validity
Not Before: Oct 19 19:01:18 2025 GMT
Not After : Oct 20 19:01:18 2025 GMT
Subject: CN=e4f717b51e117812e340ce4fdf50f8431a69e109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:85:cf:89:1d:4c:b6:98:94:30:f4:88:a3:
63:6d:4c:b8:07:f4:8d:9f:64:44:3d:a2:f5:e9:c3:
42:35:c3:78:27:58:4a:1b:6f:59:8b:20:2f:51:fa:
98:e0:98:ba:07:d3:74:2c:92:06:2f:be:24:9e:f5:
84:51:c1:71:d6:3c:bc:17:0e:20:b2:08:8a:65:ca:
fb:5f:62:a7:67:9c:1d:d7:06:99:7e:58:b5:b6:9f:
e4:0f:76:d9:70:e5:03:b5:91:6b:ae:58:4c:b5:15:
f5:e8:d5:a6:6d:c9:cb:a5:f2:82:b3:51:39:b5:9c:
68:00:82:6d:df:39:fe:8e:7d:be:ea:98:ac:28:7a:
e6:55:f5:ea:37:42:5d:ab:d2:a6:75:2a:15:ff:3f:
59:6d:8b:c8:6e:9c:68:54:d4:1a:20:7f:01:12:cd:
d1:f8:37:55:57:8c:35:d3:e3:79:d9:3f:f3:84:ec:
6a:ad:0d:88:ac:17:dd:b4:fd:a3:c2:6b:4b:b3:f5:
9d:4d:8b:c0:03:0e:29:db:23:a2:83:1a:b7:5d:d4:
ab:38:6f:de:6c:21:7b:99:20:00:49:c9:0e:6a:60:
cc:ba:19:cf:ce:ba:5b:07:da:9f:e1:21:6e:b0:25:
f8:eb:2f:68:d2:23:9c:71:42:fb:8f:86:c0:70:64:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:17:B5:1E:11:78:12:E3:40:CE:4F:DF:50:F8:43:1A:69:E1:09
X509v3 Authority Key Identifier:
keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:66:c7:ab:ab:9f:7c:9a:b0:8b:16:9c:ce:34:cb:06:1b:9c:
53:6e:18:ec:74:bb:22:3d:8a:8d:eb:ec:e9:4d:24:c6:42:67:
83:cf:04:fe:17:36:45:00:e0:32:4c:22:41:a5:ed:02:85:fe:
9c:a2:9b:6d:d3:09:31:49:8d:8f:9b:34:96:e9:4e:90:7a:66:
9a:3c:9d:fd:4a:1d:1e:63:0c:ef:b6:2d:ef:fa:40:39:8c:f3:
c2:85:55:c9:89:bc:2d:7c:91:5d:d0:4b:82:7c:5e:7a:8a:69:
b0:fa:46:84:49:7f:58:19:f8:78:36:b1:db:98:97:c8:cf:56:
ba:8f:24:d4:d6:c4:0d:6e:f6:8c:20:2c:5b:be:db:05:2a:b2:
98:8d:46:ec:f5:db:14:b8:4c:74:0d:43:6b:d4:57:34:fa:0a:
c3:b7:a9:12:32:ce:46:21:e1:03:35:b8:b3:18:34:3e:79:bb:
ff:ca:42:c8:f7:7a:83:e8:40:3c:49:90:7a:b9:87:e1:0f:b1:
0b:1d:0b:e0:bd:d8:de:f3:f9:9a:11:85:4c:c5:4f:4d:58:19:
53:b8:ba:f9:14:ad:84:92:fb:11:3e:f7:53:09:2f:0f:be:71:
be:45:b4:ad:63:07:59:33:0a:f4:0d:fa:a4:8d:4c:71:36:5d:
ae:e4:06:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92PWgg03n/6qWKuIp2jiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmVmOGIwYzFjYTQ3ZTcxNmRhMjE5ZDMxMDI4MDI4N2Qz
NmViZTMwHhcNMjUxMDE5MTkwMTE4WhcNMjUxMDIwMTkwMTE4WjAzMTEwLwYDVQQD
EyhlNGY3MTdiNTFlMTE3ODEyZTM0MGNlNGZkZjUwZjg0MzFhNjllMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7KFz4kdTLaYlDD0iKNjbUy4B/SN
n2REPaL16cNCNcN4J1hKG29ZiyAvUfqY4Ji6B9N0LJIGL74knvWEUcFx1jy8Fw4g
sgiKZcr7X2KnZ5wd1waZfli1tp/kD3bZcOUDtZFrrlhMtRX16NWmbcnLpfKCs1E5
tZxoAIJt3zn+jn2+6pisKHrmVfXqN0Jdq9KmdSoV/z9ZbYvIbpxoVNQaIH8BEs3R
+DdVV4w10+N52T/zhOxqrQ2IrBfdtP2jwmtLs/WdTYvAAw4p2yOigxq3XdSrOG/e
bCF7mSAASckOamDMuhnPzrpbB9qf4SFusCX46y9o0iOccUL7j4bAcGTPywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOT3F7UeEXgS40DOT99Q+EMaaeEJMB8GA1UdIwQY
MBaAFPP++LDBykfnFtohnTECgCh9NuvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYt
Zjg3YzUwZGY2ZmI3LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYtZjg3YzUwZGY2ZmI3
LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWbHq6uf
fJqwixaczjTLBhucU24Y7HS7Ij2Kjevs6U0kxkJng88E/hc2RQDgMkwiQaXtAoX+
nKKbbdMJMUmNj5s0lulOkHpmmjyd/UodHmMM77Yt7/pAOYzzwoVVyYm8LXyRXdBL
gnxeeoppsPpGhEl/WBn4eDax25iXyM9Wuo8k1NbEDW72jCAsW77bBSqymI1G7PXb
FLhMdA1Da9RXNPoKw7epEjLORiHhAzW4sxg0Pnm7/8pCyPd6g+hAPEmQermH4Q+x
Cx0L4L3Y3vP5mhGFTMVPTVgZU7i6+RSthJL7ET73UwkvD75xvkW0rWMHWTMK9A36
pI1McTZdruQG7w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:31 2025 by rpki-client