Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier: avggiAyQ5BviorubnYLhC3c/8SbbJNliMgjjFbJrxQ0=
Subject key identifier: CB:7B:8D:6B:14:ED:C7:83:70:92:7B:68:B9:49:AA:7E:C0:EF:2A:AE
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 0199FD33ED66EA1FDCEDA38B6E9E1D7BB578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number: 0B20
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: 1-s_qFSQKBRG1ihqBmhzdBKCiJNM.roa (hash: LshraZqBwrj50k+MVV5n8/UzMU3Sq3fCYs5NyUMMWNA=)
2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: fE26EwWlHREOvpky3Xr7LVCXAK6uUfCH9eQX4s6K6Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ed:66:ea:1f:dc:ed:a3:8b:6e:9e:1d:7b:b5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=cb7b8d6b14edc78370927b68b949aa7ec0ef2aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:28:78:4d:05:10:e6:47:72:b6:37:f0:ce:
10:0e:8d:c3:db:d0:3e:2d:ca:5e:5b:fd:72:a7:d0:
4a:6e:3a:78:e6:fe:8c:b3:ed:c1:5c:87:f1:9b:ec:
88:22:c1:63:53:11:db:5c:ed:40:bd:02:a5:9b:ca:
46:fb:68:9c:0c:2c:8b:57:20:fd:bd:63:da:a4:f9:
c8:d9:4f:84:21:6b:ce:e0:3a:6b:06:85:08:c6:4e:
fc:c5:f0:42:6e:82:e1:e2:a6:34:66:b0:de:a8:1a:
0b:f0:6c:ac:57:b4:89:5a:18:c0:32:5d:d7:8b:0f:
33:d6:8f:eb:95:01:0e:61:52:a1:a1:4c:d5:85:a0:
2d:40:da:07:65:2e:76:55:e8:1e:56:2b:03:9d:7d:
f5:a4:d9:fa:66:0e:c6:ea:a7:c2:8d:18:24:2b:8d:
e0:88:6f:89:04:ca:9e:77:cb:19:f1:9c:61:ad:2a:
93:e0:0e:e6:d4:e3:79:ba:13:cb:bb:b2:31:2f:e0:
01:99:90:55:81:02:9c:6b:1c:09:3c:85:cc:ee:73:
9b:6c:75:c7:08:86:46:3a:17:45:05:47:3f:17:2d:
68:df:09:5f:c7:d1:85:a3:47:71:7d:00:38:dc:bc:
53:56:fa:bd:c6:64:82:a7:f5:95:3d:4a:c9:77:3d:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7B:8D:6B:14:ED:C7:83:70:92:7B:68:B9:49:AA:7E:C0:EF:2A:AE
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fd:42:79:ad:6b:22:84:92:7d:a8:ea:36:b8:b5:9a:d4:ce:
e2:19:60:2b:b6:73:3f:02:31:a6:c5:4f:d5:f8:af:af:2c:07:
e3:a1:9b:c5:14:03:fe:dd:13:e0:e2:65:7b:0c:2f:cb:08:a6:
7a:84:fb:e1:82:90:57:1e:5f:b6:af:94:2f:77:cd:1d:1b:57:
2d:3c:40:0b:81:cf:c4:da:ee:93:be:b8:88:b4:71:27:d7:a3:
fa:b5:cf:eb:a4:2c:d4:e7:37:02:b9:ff:f4:48:64:0b:10:ca:
58:a8:55:67:5c:e6:e6:09:ae:07:53:37:6f:5d:9d:b2:48:67:
3a:f0:fd:9c:53:6b:49:f5:d6:42:b2:61:55:72:20:ca:1b:38:
c3:03:0c:e4:49:0c:08:07:b2:e6:ad:24:08:e8:b1:93:c2:89:
0c:c9:5f:ed:1d:f0:5a:e1:44:a7:c8:91:62:65:23:d4:36:ac:
94:dc:93:5f:91:ed:b4:69:f9:54:b0:db:55:8d:f5:6e:09:45:
b7:7d:1d:79:37:43:22:ae:3e:61:62:ff:51:08:1e:f3:c6:7d:
45:38:bc:44:80:d5:98:b4:63:78:c6:19:45:f4:c9:53:34:cc:
83:bc:a3:82:06:ae:c5:82:50:e4:3a:77:a4:f7:f3:d3:9a:11:
91:47:f2:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+1m6h/c7aOLbp4de7V4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWYyZTQzM2QwMGEyNTNjOTlhNDUwNDg1MDc5NDQzODU0
NTdjZjAwHhcNMjUxMDE5MTYwMTAyWhcNMjUxMDIwMTYwMTAyWjAzMTEwLwYDVQQD
EyhjYjdiOGQ2YjE0ZWRjNzgzNzA5MjdiNjhiOTQ5YWE3ZWMwZWYyYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqMoeE0FEOZHcrY38M4QDo3D29A+
LcpeW/1yp9BKbjp45v6Ms+3BXIfxm+yIIsFjUxHbXO1AvQKlm8pG+2icDCyLVyD9
vWPapPnI2U+EIWvO4DprBoUIxk78xfBCboLh4qY0ZrDeqBoL8GysV7SJWhjAMl3X
iw8z1o/rlQEOYVKhoUzVhaAtQNoHZS52VegeVisDnX31pNn6Zg7G6qfCjRgkK43g
iG+JBMqed8sZ8ZxhrSqT4A7m1ON5uhPLu7IxL+ABmZBVgQKcaxwJPIXM7nObbHXH
CIZGOhdFBUc/Fy1o3wlfx9GFo0dxfQA43LxTVvq9xmSCp/WVPUrJdz32awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt7jWsU7ceDcJJ7aLlJqn7A7yquMB8GA1UdIwQY
MBaAFJPvLkM9AKJTyZpFBIUHlEOFRXzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay04dVF6MEFvbFBKbWtVRWhRZVVRNFZGZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wY2IwNmItMTUxOC00ZGUwLWE2OTkt
ZmZiZDRjNmMxMTEyLzEvay04dVF6MEFvbFBKbWtVRWhRZVVRNFZGZlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wY2IwNmItMTUxOC00ZGUwLWE2OTktZmZiZDRjNmMxMTEy
LzEvay04dVF6MEFvbFBKbWtVRWhRZVVRNFZGZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiP1Cea1r
IoSSfajqNri1mtTO4hlgK7ZzPwIxpsVP1fivrywH46GbxRQD/t0T4OJlewwvywim
eoT74YKQVx5ftq+UL3fNHRtXLTxAC4HPxNruk764iLRxJ9ej+rXP66Qs1Oc3Arn/
9EhkCxDKWKhVZ1zm5gmuB1M3b12dskhnOvD9nFNrSfXWQrJhVXIgyhs4wwMM5EkM
CAey5q0kCOixk8KJDMlf7R3wWuFEp8iRYmUj1DaslNyTX5HttGn5VLDbVY31bglF
t30deTdDIq4+YWL/UQge88Z9RTi8RIDVmLRjeMYZRfTJUzTMg7yjggauxYJQ5Dp3
pPfz05oRkUfyyw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:56 2025 by rpki-client