
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier: HAI1ZsYANMuRbivg0GS8etvUwrwPLjncq5xJ71PJLac=
Subject key identifier: 4E:F3:E2:1E:AB:CB:33:4E:BC:F1:A2:BB:70:D3:87:00:B6:0B:4A:8F
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 0198D84FDB143EC3483B12D45F56F2A5BEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number: 09F5
Signing time: Sat 23 Aug 2025 19:02:48 +0000
Manifest this update: Sat 23 Aug 2025 19:02:48 +0000
Manifest next update: Sun 24 Aug 2025 19:02:48 +0000
Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: wBZ0wA1RsRXTNScyigkGc+9+I4Wripjlxb7qKME3pxs=)
2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:db:14:3e:c3:48:3b:12:d4:5f:56:f2:a5:be:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Aug 23 19:02:48 2025 GMT
Not After : Aug 24 19:02:48 2025 GMT
Subject: CN=4ef3e21eabcb334ebcf1a2bb70d38700b60b4a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:0d:cf:3f:28:0b:f2:b8:ea:74:4d:4b:7d:
fe:60:6f:2e:59:1c:c3:38:ec:f8:24:8f:29:8d:64:
67:91:39:34:52:68:ce:69:37:1e:67:1f:31:0f:13:
71:52:80:e5:2f:31:7a:26:64:a4:61:af:18:a2:a7:
ce:95:ad:bc:8e:3b:55:ae:66:fd:8b:00:aa:f0:63:
74:2b:e6:4c:7b:3d:58:4e:18:4c:fe:74:fa:01:69:
df:7a:ec:ae:21:ad:11:d5:ea:a8:8a:2d:f1:16:b0:
e7:d4:21:6a:42:70:27:c9:86:2a:62:18:01:b4:b9:
4e:6d:e1:55:41:c8:0f:63:f9:63:a1:fd:a0:74:ce:
09:8d:4b:f1:df:db:74:f5:1c:0c:e5:b1:45:e0:19:
3c:a9:a0:a6:c6:2e:b7:a8:66:12:f5:23:68:5a:18:
15:80:a7:92:ef:58:0d:36:c3:97:19:e3:a2:1d:5b:
ff:07:d9:69:dc:69:c8:e3:39:36:2e:33:eb:c4:35:
af:b6:cc:8a:ba:71:14:47:24:dd:98:db:19:85:10:
bc:bc:3a:1a:75:ee:e0:83:42:a6:24:c5:c7:d8:51:
ce:52:00:97:0f:c7:fd:5f:5f:dd:8b:0d:ee:80:3a:
6d:91:52:70:b7:f4:b3:f0:aa:3b:2c:88:69:bd:b4:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F3:E2:1E:AB:CB:33:4E:BC:F1:A2:BB:70:D3:87:00:B6:0B:4A:8F
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:86:49:b2:69:c6:3e:84:39:53:9f:90:16:e0:70:74:eb:19:
82:0a:dd:27:f3:fa:68:3d:a6:6a:d4:dc:ff:d5:1b:fd:34:37:
98:db:51:9e:ac:81:2c:2c:67:fe:e3:70:59:94:b9:e4:20:e8:
9d:bc:40:54:c3:cc:86:b7:ea:d2:2d:11:08:29:62:d9:f7:2c:
ea:56:dc:48:30:b0:cc:9f:05:3d:55:14:3d:84:fd:c8:f5:29:
72:12:54:5a:8c:d3:1f:e4:3e:9a:7c:3f:6e:5a:2c:89:a7:5e:
76:9b:da:a9:84:84:e8:03:26:5b:9a:61:f5:8d:4b:c3:f1:6b:
d1:08:c5:8f:3a:d8:13:87:2b:7d:90:10:ee:35:85:91:6f:c9:
72:f3:04:1e:91:d9:58:27:35:41:c1:0f:b9:1a:cf:ea:75:b4:
d6:ce:79:79:a4:21:68:e4:9b:27:94:6f:d1:05:de:ef:ff:1e:
0d:64:9a:69:98:16:30:09:49:25:5f:37:c3:ad:0a:a9:f1:d5:
ae:99:e7:a9:45:98:1e:82:df:55:69:85:51:b2:d5:04:29:70:
06:ec:36:5a:9b:ab:32:4b:ba:47:ad:a1:2f:b8:58:b2:76:f2:
a9:52:ed:17:6e:01:0d:c8:a2:c1:30:f0:dc:97:33:56:8b:19:
f6:6f:1c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT9sUPsNIOxLUX1bypb6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjdmYTdlMTk0NzJlNTgzYjcyMDkzNmMzOWQwZmQyNDI2
NjE5ZmQwHhcNMjUwODIzMTkwMjQ4WhcNMjUwODI0MTkwMjQ4WjAzMTEwLwYDVQQD
Eyg0ZWYzZTIxZWFiY2IzMzRlYmNmMWEyYmI3MGQzODcwMGI2MGI0YThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR8Nzz8oC/K46nRNS33+YG8uWRzD
OOz4JI8pjWRnkTk0UmjOaTceZx8xDxNxUoDlLzF6JmSkYa8YoqfOla28jjtVrmb9
iwCq8GN0K+ZMez1YThhM/nT6AWnfeuyuIa0R1eqoii3xFrDn1CFqQnAnyYYqYhgB
tLlObeFVQcgPY/ljof2gdM4JjUvx39t09RwM5bFF4Bk8qaCmxi63qGYS9SNoWhgV
gKeS71gNNsOXGeOiHVv/B9lp3GnI4zk2LjPrxDWvtsyKunEURyTdmNsZhRC8vDoa
de7gg0KmJMXH2FHOUgCXD8f9X1/diw3ugDptkVJwt/Sz8Ko7LIhpvbQZ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7z4h6ryzNOvPGiu3DThwC2C0qPMB8GA1UdIwQY
MBaAFPMn+n4ZRy5YO3IJNsOdD9JCZhn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2Yt
MjNjMTYyNjNjZjNiLzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2YtMjNjMTYyNjNjZjNi
LzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4ZJsmnG
PoQ5U5+QFuBwdOsZggrdJ/P6aD2matTc/9Ub/TQ3mNtRnqyBLCxn/uNwWZS55CDo
nbxAVMPMhrfq0i0RCCli2fcs6lbcSDCwzJ8FPVUUPYT9yPUpchJUWozTH+Q+mnw/
blosiadedpvaqYSE6AMmW5ph9Y1Lw/Fr0QjFjzrYE4crfZAQ7jWFkW/JcvMEHpHZ
WCc1QcEPuRrP6nW01s55eaQhaOSbJ5Rv0QXe7/8eDWSaaZgWMAlJJV83w60KqfHV
rpnnqUWYHoLfVWmFUbLVBClwBuw2WpurMku6R62hL7hYsnbyqVLtF24BDciiwTDw
3JczVosZ9m8cdw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:51 2025 by rpki-client