Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: 1TINuEnzwZQFojWqRCJ8lqUSlL0Lj/8xt69EXsLbEKo=
Subject key identifier: 20:80:68:66:26:51:79:43:22:A2:7B:9A:FA:20:49:80:73:FF:BD:F0
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 019A00DA1EC8B196B9F44BCCEA72DC9A4C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 04B5
Signing time: Mon 20 Oct 2025 09:01:25 +0000
Manifest this update: Mon 20 Oct 2025 09:01:25 +0000
Manifest next update: Tue 21 Oct 2025 09:01:25 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: 0YQQJs5FyPnT/mF79N7QVG1+xpAMT7mYeiYAaicXTZc=)
2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:1e:c8:b1:96:b9:f4:4b:cc:ea:72:dc:9a:4c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Oct 20 09:01:25 2025 GMT
Not After : Oct 21 09:01:25 2025 GMT
Subject: CN=208068662651794322a27b9afa20498073ffbdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:31:8a:35:35:73:1b:1b:5e:72:b3:6a:d8:
30:bd:65:78:18:d8:72:84:79:71:e4:19:d9:9c:3b:
de:87:37:3e:9a:4c:c2:dd:65:39:f3:35:ec:16:ab:
34:91:87:57:54:79:61:c6:4a:14:d2:9f:69:99:b8:
42:de:78:ce:b1:75:85:a3:c5:08:c3:17:84:01:a1:
3e:5f:c7:81:ea:21:9e:cd:c9:c7:5e:b9:15:19:28:
ef:08:58:00:6b:65:f3:2a:c6:74:28:eb:06:01:7e:
72:69:8b:e1:55:0b:f5:36:f3:86:97:08:01:0a:35:
b5:c5:10:10:3c:86:1b:34:f6:77:7f:37:b0:cc:ad:
14:e3:f3:59:b5:bb:91:2b:f0:a6:5b:81:7d:74:d7:
f9:b2:1a:cf:63:3e:6f:2a:47:ec:d4:9f:f2:ae:85:
8e:7f:b2:09:fa:59:88:c4:9c:7a:4b:21:12:8a:74:
55:58:1f:52:8e:b2:55:26:c7:47:72:c5:14:53:8d:
a0:29:4f:6b:f8:c2:07:f0:51:df:43:cd:c9:f8:8e:
66:25:d4:94:8e:7b:50:7b:db:11:52:ec:ae:23:96:
2d:a2:7c:bd:51:99:91:a5:3d:25:54:b2:4e:b0:5f:
e9:9e:58:33:49:1f:50:90:06:74:fb:7f:fa:cc:0f:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:68:66:26:51:79:43:22:A2:7B:9A:FA:20:49:80:73:FF:BD:F0
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:42:d1:72:a3:4a:ba:ba:29:f5:22:c9:15:38:3f:b2:2e:d6:
9e:c8:bb:ea:29:c5:bb:84:86:34:d0:26:c2:1f:2e:77:aa:26:
ec:e4:de:13:95:2b:07:db:56:e4:fb:cd:05:e4:32:0b:e5:cd:
ae:05:15:a9:5f:1d:d0:78:be:c4:aa:1e:ea:e4:7a:57:21:32:
69:f2:c8:25:06:e9:67:fe:6f:51:b6:85:41:18:a3:3a:c0:aa:
64:c1:4e:e8:28:4a:54:3f:4f:3a:e7:db:77:fb:35:64:5f:97:
26:30:5b:f5:a5:86:42:39:b0:24:a7:54:72:1a:73:0e:ba:c4:
c9:73:30:1c:b1:61:a1:39:75:2a:35:97:0c:f1:1c:69:21:ed:
4d:fb:a6:69:58:44:d1:47:62:1a:b0:f4:b2:f4:6a:7f:e9:c6:
06:e1:54:f6:ce:f1:75:ff:b8:8d:c4:42:68:d6:8e:1c:d7:66:
33:48:40:28:1a:57:ff:84:09:43:72:b0:fb:af:a4:0d:ff:76:
04:fb:7b:1e:94:e7:f9:99:91:c0:81:c6:cc:a6:93:b2:4e:66:
66:9f:01:c2:14:d3:d0:23:8c:5d:93:14:c4:04:5e:d6:58:3f:
0e:be:42:5d:76:84:f1:6a:8c:58:df:e1:fa:a8:9d:62:6c:c6:
79:b5:b9:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2h7IsZa59EvM6nLcmkyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjI3YWViZjAyYWJjMzU1MjEyYWZiZjE2MjFlM2UwZDRh
NzYwNTcwHhcNMjUxMDIwMDkwMTI1WhcNMjUxMDIxMDkwMTI1WjAzMTEwLwYDVQQD
EygyMDgwNjg2NjI2NTE3OTQzMjJhMjdiOWFmYTIwNDk4MDczZmZiZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZgxijU1cxsbXnKzatgwvWV4GNhy
hHlx5BnZnDvehzc+mkzC3WU58zXsFqs0kYdXVHlhxkoU0p9pmbhC3njOsXWFo8UI
wxeEAaE+X8eB6iGezcnHXrkVGSjvCFgAa2XzKsZ0KOsGAX5yaYvhVQv1NvOGlwgB
CjW1xRAQPIYbNPZ3fzewzK0U4/NZtbuRK/CmW4F9dNf5shrPYz5vKkfs1J/yroWO
f7IJ+lmIxJx6SyESinRVWB9SjrJVJsdHcsUUU42gKU9r+MIH8FHfQ83J+I5mJdSU
jntQe9sRUuyuI5Ytony9UZmRpT0lVLJOsF/pnlgzSR9QkAZ0+3/6zA8RkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCAaGYmUXlDIqJ7mvogSYBz/73wMB8GA1UdIwQY
MBaAFPDyeuvwKrw1UhKvvxYh4+DUp2BXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgt
YzQ1ZjhlMjUxMjQ4LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgtYzQ1ZjhlMjUxMjQ4
LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkLRcqNK
urop9SLJFTg/si7Wnsi76inFu4SGNNAmwh8ud6om7OTeE5UrB9tW5PvNBeQyC+XN
rgUVqV8d0Hi+xKoe6uR6VyEyafLIJQbpZ/5vUbaFQRijOsCqZMFO6ChKVD9POufb
d/s1ZF+XJjBb9aWGQjmwJKdUchpzDrrEyXMwHLFhoTl1KjWXDPEcaSHtTfumaVhE
0UdiGrD0svRqf+nGBuFU9s7xdf+4jcRCaNaOHNdmM0hAKBpX/4QJQ3Kw+6+kDf92
BPt7HpTn+ZmRwIHGzKaTsk5mZp8BwhTT0COMXZMUxARe1lg/Dr5CXXaE8WqMWN/h
+qidYmzGebW5LA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:39 2025 by rpki-client