Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File: 8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier: AdWjGBtwQK6pNs26/VOzs7VQxdrsQpe60nZnNKCbLDA=
Subject key identifier: 3D:5A:42:D3:55:25:B9:7B:28:40:E0:A5:33:78:86:BC:8D:AB:5B:08
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer: /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial: 0199FBEB0D8BE2A5262B42D380BB8AD4D02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number: 0FC7
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: D/fq9eFBKYYTihVYkieLUPe+8sJxv6870RyJ1GuoUhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0d:8b:e2:a5:26:2b:42:d3:80:bb:8a:d4:d0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=3d5a42d35525b97b2840e0a5337886bc8dab5b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:93:d7:0d:74:63:e7:00:4d:c6:9f:01:ff:
65:c3:27:5e:c3:fb:4f:b4:7c:dc:86:09:1b:d9:d1:
71:b3:2f:50:3e:23:02:4a:75:5a:c4:b1:62:2d:0d:
9b:fe:af:b9:8e:74:48:4a:db:06:39:7b:b6:d5:f7:
79:34:08:76:34:61:cc:a2:4d:fa:c9:fc:69:b2:83:
d5:95:6a:09:19:83:b7:b4:b4:d1:f8:94:28:54:8e:
91:51:ec:ee:a0:d6:df:5b:3f:19:c8:e9:a8:e5:a7:
09:47:13:f5:3d:c2:f9:37:e8:02:6f:62:34:54:58:
d6:67:c1:b8:04:3d:d1:a2:cc:e3:be:f6:aa:92:32:
42:87:51:c9:29:f8:22:b5:96:08:c9:6b:11:23:94:
2f:0e:6a:a3:ea:30:69:68:f3:eb:0d:7c:14:ec:04:
17:ba:b4:b4:69:d4:90:91:cc:5b:65:84:1f:a3:f4:
84:1a:b1:d5:f4:34:52:3e:49:9e:02:cd:7f:68:1f:
f1:6b:59:08:6d:a3:32:dc:e5:d7:c2:9c:c5:51:97:
26:1f:88:36:7e:4c:18:0a:79:66:0c:92:ae:9e:a7:
3a:28:74:20:8c:80:a2:f4:07:fb:2f:ea:89:de:5d:
c4:7f:1b:a5:34:16:f4:42:fd:ee:13:eb:44:2d:41:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5A:42:D3:55:25:B9:7B:28:40:E0:A5:33:78:86:BC:8D:AB:5B:08
X509v3 Authority Key Identifier:
keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:57:81:e1:dc:e2:af:68:cf:24:91:bf:67:e5:fa:9c:a6:76:
c4:b0:e4:e4:f9:7a:c5:bd:8a:65:5c:0a:35:36:d6:68:09:02:
c2:0a:05:51:83:77:fd:29:18:c7:37:26:d5:80:52:7e:7c:3b:
c9:78:9d:41:37:3a:c3:09:c8:44:40:d1:21:c2:64:10:3c:79:
7c:a5:3f:72:07:28:09:f8:49:27:97:a9:66:4c:d9:06:25:8d:
e2:fe:08:db:b2:84:8c:0d:ba:85:8b:fa:12:3c:5a:e5:4a:7a:
1f:c7:02:33:b1:e1:ea:5a:c0:e1:fc:a6:14:d4:f9:ce:31:e7:
f5:b1:dd:8f:e6:9b:3e:10:a0:63:67:45:b3:1e:7a:17:a0:57:
86:de:8f:c3:6d:ca:01:cc:e3:3d:72:a4:ec:88:67:9a:b7:ae:
ec:89:ca:95:42:74:a1:0c:ab:90:b1:c1:a2:ec:66:ef:a7:79:
a5:25:3f:1e:91:68:5c:d7:1a:6f:8a:7e:4d:d3:76:4b:af:70:
e4:0b:be:c6:48:68:63:7e:e1:ab:9c:e3:3a:6b:0e:41:44:4d:
ad:3f:6a:39:d6:f6:3b:a2:aa:d5:1c:0f:e9:c5:e4:6e:a7:2f:
3e:05:86:59:7e:28:34:d4:01:04:4d:89:8e:53:56:ca:46:fe:
d7:a3:7a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76w2L4qUmK0LTgLuK1NAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjAyMTQ3OTFjZjg0OTlmYzkzYWYwMWY3YTQzZjVjYmU5
MDJhOTgwHhcNMjUxMDE5MTAwMTQ5WhcNMjUxMDIwMTAwMTQ5WjAzMTEwLwYDVQQD
EygzZDVhNDJkMzU1MjViOTdiMjg0MGUwYTUzMzc4ODZiYzhkYWI1YjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmleT1w10Y+cATcafAf9lwydew/tP
tHzchgkb2dFxsy9QPiMCSnVaxLFiLQ2b/q+5jnRIStsGOXu21fd5NAh2NGHMok36
yfxpsoPVlWoJGYO3tLTR+JQoVI6RUezuoNbfWz8ZyOmo5acJRxP1PcL5N+gCb2I0
VFjWZ8G4BD3RoszjvvaqkjJCh1HJKfgitZYIyWsRI5QvDmqj6jBpaPPrDXwU7AQX
urS0adSQkcxbZYQfo/SEGrHV9DRSPkmeAs1/aB/xa1kIbaMy3OXXwpzFUZcmH4g2
fkwYCnlmDJKunqc6KHQgjICi9Af7L+qJ3l3EfxulNBb0Qv3uE+tELUGFfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1aQtNVJbl7KEDgpTN4hryNq1sIMB8GA1UdIwQY
MBaAFPJgIUeRz4SZ/JOvAfekP1y+kCqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81NzU5MTUtZmY3Zi00MzY0LWEzZTYt
NzMxZThiMTFkNTVkLzEvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81NzU5MTUtZmY3Zi00MzY0LWEzZTYtNzMxZThiMTFkNTVk
LzEvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1eB4dzi
r2jPJJG/Z+X6nKZ2xLDk5Pl6xb2KZVwKNTbWaAkCwgoFUYN3/SkYxzcm1YBSfnw7
yXidQTc6wwnIREDRIcJkEDx5fKU/cgcoCfhJJ5epZkzZBiWN4v4I27KEjA26hYv6
Ejxa5Up6H8cCM7Hh6lrA4fymFNT5zjHn9bHdj+abPhCgY2dFsx56F6BXht6Pw23K
AczjPXKk7Ihnmreu7InKlUJ0oQyrkLHBouxm76d5pSU/HpFoXNcab4p+TdN2S69w
5Au+xkhoY37hq5zjOmsOQURNrT9qOdb2O6Kq1RwP6cXkbqcvPgWGWX4oNNQBBE2J
jlNWykb+16N6NA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:12 2025 by rpki-client