Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: ACuYvdBMc+F3WdONkh8PBSNBdElOMhfA2014oA8V2mA=
Subject key identifier: BA:54:DE:15:80:4B:D3:B0:E7:5F:C8:10:AF:ED:EE:66:DA:6C:92:FF
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 0199FBEBF0EA9C3EFAB5BB754EF55F06E489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 03C3
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: xHWPFrJA61d/jyrUiO0Aa+atGhXWVP7mKwoNDvgxnoE=)
2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=)
3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=)
4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f0:ea:9c:3e:fa:b5:bb:75:4e:f5:5f:06:e4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=ba54de15804bd3b0e75fc810afedee66da6c92ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:e6:8f:97:c9:1d:30:80:5f:5e:e8:89:58:
82:88:60:bd:ae:20:96:e2:02:5f:45:d0:f7:9f:6c:
f7:7a:54:c0:8d:68:32:6e:e6:9b:1a:20:96:6d:23:
7f:7d:ab:78:3b:fb:ae:ac:33:d7:d1:48:91:84:35:
0b:2d:ee:e0:fe:06:5b:fb:f6:2b:19:d3:bf:7b:8b:
2d:d8:9f:c5:1a:aa:71:59:ab:d4:ab:08:37:fd:18:
57:f8:73:39:49:3a:b6:ef:05:59:c0:2e:b6:fc:7b:
90:36:c7:b8:99:4c:03:26:3d:39:7e:06:57:39:a0:
ee:3d:da:e1:68:ea:44:cc:83:ab:96:ae:f6:29:c2:
06:86:7b:e4:10:39:86:0e:3f:9c:b9:93:34:aa:0f:
5a:e1:60:6b:a4:42:7a:4a:e1:df:4b:e1:37:2c:70:
0d:14:64:e1:67:c8:ef:d0:0e:ed:2c:da:0c:b5:6e:
df:60:2a:f3:6e:21:62:1f:b8:31:21:47:f1:3c:e2:
55:95:84:9b:ee:3d:0d:08:bd:a5:b0:69:d8:b1:1b:
2d:01:ad:42:71:78:07:c8:ea:b7:f5:d9:c9:5f:99:
b3:40:de:b0:a0:ba:2b:89:3c:1c:be:6a:54:58:dc:
34:b9:5a:aa:e1:c1:69:28:97:aa:59:44:b3:ad:c8:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:54:DE:15:80:4B:D3:B0:E7:5F:C8:10:AF:ED:EE:66:DA:6C:92:FF
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f5:2b:95:8f:20:54:1a:09:3a:52:01:f6:93:9d:fa:c8:fb:
96:23:aa:3d:26:68:99:e6:8e:14:15:e0:f2:2e:7a:d9:33:df:
8d:ab:70:e5:8f:5f:54:bf:93:d6:71:a2:b6:d8:53:60:76:34:
dc:c6:39:c2:9c:d7:8b:0f:4c:b7:d6:83:0f:cf:7a:f4:0d:7f:
58:44:f1:e5:a8:78:d7:1d:62:2b:d8:3d:7b:bf:14:64:02:a0:
41:01:d4:70:26:b3:d2:4a:38:30:98:8b:30:62:ec:d7:b9:bd:
cf:92:09:b9:80:b0:4e:72:1f:c8:01:05:b1:6a:2b:9c:94:40:
64:9c:88:98:8f:76:a2:c2:e8:93:8f:ef:1c:95:b4:c9:58:5b:
d8:45:33:e5:2c:e1:a5:75:cd:67:3a:c0:9c:c1:60:91:1c:96:
85:ec:0c:fa:c3:50:59:97:af:43:d8:5a:ce:0d:6c:ce:f6:10:
e9:41:fd:88:29:f2:00:1f:68:3a:2a:c5:71:3a:d9:51:88:07:
b5:c8:a1:fe:49:ea:ae:07:03:9c:cd:4f:15:48:84:f9:f5:29:
63:59:f4:07:e1:b1:6c:57:bc:18:98:b4:c0:ef:49:43:52:aa:
0e:82:e5:f3:73:c3:ef:9e:4d:23:23:19:ff:a6:75:cf:97:dc:
d7:6f:7d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/DqnD76tbt1TvVfBuSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0
ZWE3YTUwHhcNMjUxMDE5MTAwMjQ3WhcNMjUxMDIwMTAwMjQ3WjAzMTEwLwYDVQQD
EyhiYTU0ZGUxNTgwNGJkM2IwZTc1ZmM4MTBhZmVkZWU2NmRhNmM5MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPzmj5fJHTCAX17oiViCiGC9riCW
4gJfRdD3n2z3elTAjWgybuabGiCWbSN/fat4O/uurDPX0UiRhDULLe7g/gZb+/Yr
GdO/e4st2J/FGqpxWavUqwg3/RhX+HM5STq27wVZwC62/HuQNse4mUwDJj05fgZX
OaDuPdrhaOpEzIOrlq72KcIGhnvkEDmGDj+cuZM0qg9a4WBrpEJ6SuHfS+E3LHAN
FGThZ8jv0A7tLNoMtW7fYCrzbiFiH7gxIUfxPOJVlYSb7j0NCL2lsGnYsRstAa1C
cXgHyOq39dnJX5mzQN6woLoriTwcvmpUWNw0uVqq4cFpKJeqWUSzrcgZqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpU3hWAS9Ow51/IEK/t7mbabJL/MB8GA1UdIwQY
MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt
YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm
LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvUrlY8g
VBoJOlIB9pOd+sj7liOqPSZomeaOFBXg8i562TPfjatw5Y9fVL+T1nGitthTYHY0
3MY5wpzXiw9Mt9aDD8969A1/WETx5ah41x1iK9g9e78UZAKgQQHUcCaz0ko4MJiL
MGLs17m9z5IJuYCwTnIfyAEFsWornJRAZJyImI92osLok4/vHJW0yVhb2EUz5Szh
pXXNZzrAnMFgkRyWhewM+sNQWZevQ9hazg1szvYQ6UH9iCnyAB9oOirFcTrZUYgH
tcih/knqrgcDnM1PFUiE+fUpY1n0B+GxbFe8GJi0wO9JQ1KqDoLl83PD755NIyMZ
/6Z1z5fc12999A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:03 2025 by rpki-client