Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: WePyQdIPAbZpmGbA1AaXA2vtBvkeopeDFvjuGFfWlYE=
Subject key identifier: 95:74:B2:BF:65:15:A8:59:91:F1:53:98:C4:67:F5:91:7D:2E:16:F6
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 0199FBEBA707F8A60B0EAF3CDEDAC2BB8477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0CE7
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: JGcL58+B2f+OqrG53fgrk2Rk0JvgSn1gpUzJ0/jrAG8=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a7:07:f8:a6:0b:0e:af:3c:de:da:c2:bb:84:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=9574b2bf6515a85991f15398c467f5917d2e16f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:a2:5d:93:32:cb:10:1b:26:3d:af:c4:13:
70:d4:aa:95:fe:e0:0c:bd:13:66:ad:60:2e:9b:85:
9e:78:d5:92:31:16:be:e8:e4:b7:db:bf:98:40:b9:
24:bd:6b:2f:53:00:23:0c:73:37:f9:44:60:c5:a3:
39:08:c5:87:9d:0c:88:87:f7:5e:62:d5:e6:bb:62:
fd:1b:05:5a:b8:29:ee:67:8a:2b:52:cc:91:4c:93:
53:53:95:ce:5d:97:86:95:ec:72:9f:4c:be:9d:95:
38:8a:4b:86:b0:3e:ec:8d:ad:6a:c2:21:dd:9c:d8:
e9:7c:79:1e:36:03:6d:7a:99:45:74:5a:15:76:e2:
7c:40:a9:bb:94:93:42:d2:d6:be:fa:0e:ab:44:b4:
4f:7e:b4:42:08:2b:c3:88:b3:5a:4f:b3:01:4a:00:
a1:32:e3:37:9e:84:aa:d5:b2:d0:23:37:af:65:be:
d4:9a:0e:53:9b:4c:cb:aa:d5:a9:87:2b:50:f7:19:
af:63:38:99:19:25:b7:17:3b:5a:c5:6a:35:19:a0:
c6:08:0b:6e:9c:2f:f0:93:0e:08:7f:1d:32:a3:08:
ea:ca:06:bc:5e:29:6d:82:a5:00:b3:06:ac:ec:4f:
84:b9:6e:c9:1e:e3:91:f5:fb:b6:22:89:7b:72:4e:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:74:B2:BF:65:15:A8:59:91:F1:53:98:C4:67:F5:91:7D:2E:16:F6
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6c:80:ec:73:1c:ac:7e:58:73:0e:6e:81:33:86:13:7b:f5:
eb:db:21:59:6c:23:c6:4d:75:de:e7:01:f4:0d:d7:a7:d6:fc:
d9:43:85:b5:bb:aa:73:d3:59:dd:38:06:39:f2:a7:12:3f:1b:
ad:bd:11:25:a7:b6:c6:63:db:b5:d0:de:08:c8:14:e2:84:0e:
74:1b:13:36:7b:fd:e0:ca:e2:0c:ac:98:03:14:4e:e6:7d:f1:
8f:6a:b8:37:fb:91:a4:f8:ad:ee:e5:f0:5d:3a:d0:58:70:9a:
f4:7c:ef:28:1d:5e:d3:9d:76:95:ac:b3:8a:13:e5:55:65:1d:
c0:3f:0f:3f:27:9a:39:87:62:72:c8:77:69:60:dc:7d:a0:97:
33:28:de:34:af:30:84:6e:8c:08:fb:2d:77:69:03:e2:0f:b4:
2e:11:4f:c9:2b:a1:4c:97:27:ed:69:c0:61:80:0d:e5:73:f2:
f7:26:15:f1:8f:74:98:e3:1b:df:b0:63:fc:f4:80:64:4f:72:
d7:00:78:7e:3f:f9:01:15:7b:d9:c4:6d:1e:06:c2:a3:e7:2e:
2a:f3:7c:46:05:73:c8:1b:51:c3:9b:86:d7:0a:2d:63:8e:34:
b6:e2:2b:be:08:98:be:42:e7:33:0b:73:b4:6b:5c:b7:31:b6:
fc:43:56:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766cH+KYLDq883trCu4R3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjRkMGY0NzI5NzY4MDUzNWViMjc5OTE4OWRiODg4YjQw
NjY3ODIwHhcNMjUxMDE5MTAwMjI4WhcNMjUxMDIwMTAwMjI4WjAzMTEwLwYDVQQD
Eyg5NTc0YjJiZjY1MTVhODU5OTFmMTUzOThjNDY3ZjU5MTdkMmUxNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xSiXZMyyxAbJj2vxBNw1KqV/uAM
vRNmrWAum4WeeNWSMRa+6OS327+YQLkkvWsvUwAjDHM3+URgxaM5CMWHnQyIh/de
YtXmu2L9GwVauCnuZ4orUsyRTJNTU5XOXZeGlexyn0y+nZU4ikuGsD7sja1qwiHd
nNjpfHkeNgNteplFdFoVduJ8QKm7lJNC0ta++g6rRLRPfrRCCCvDiLNaT7MBSgCh
MuM3noSq1bLQIzevZb7Umg5Tm0zLqtWphytQ9xmvYziZGSW3FztaxWo1GaDGCAtu
nC/wkw4Ifx0yowjqyga8XiltgqUAswas7E+EuW7JHuOR9fu2Iol7ck7biQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV0sr9lFahZkfFTmMRn9ZF9Lhb2MB8GA1UdIwQY
MBaAFPMk0PRyl2gFNesnmRiduIi0BmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjkt
MDI2NWU1Y2Q2OTY2LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjktMDI2NWU1Y2Q2OTY2
LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2yA7HMc
rH5Ycw5ugTOGE3v169shWWwjxk113ucB9A3Xp9b82UOFtbuqc9NZ3TgGOfKnEj8b
rb0RJae2xmPbtdDeCMgU4oQOdBsTNnv94MriDKyYAxRO5n3xj2q4N/uRpPit7uXw
XTrQWHCa9HzvKB1e0512layzihPlVWUdwD8PPyeaOYdicsh3aWDcfaCXMyjeNK8w
hG6MCPstd2kD4g+0LhFPySuhTJcn7WnAYYAN5XPy9yYV8Y90mOMb37Bj/PSAZE9y
1wB4fj/5ARV72cRtHgbCo+cuKvN8RgVzyBtRw5uG1wotY440tuIrvgiYvkLnMwtz
tGtctzG2/ENWwA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:36 2025 by rpki-client