Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: QwN5PLvtamrZpKoIFDoRAy4lFzVQB3TNWuk5XOgklGs=
Subject key identifier: DB:76:69:D6:3A:20:08:C9:16:1C:97:FD:95:72:05:3F:56:96:B6:01
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 0199FFFE2E48D3E3F3EB708CE92A4B402CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 04BF
Signing time: Mon 20 Oct 2025 05:01:12 +0000
Manifest this update: Mon 20 Oct 2025 05:01:12 +0000
Manifest next update: Tue 21 Oct 2025 05:01:12 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: Q9quECIrOS8sMgap8adCeDjv4OCP5Gp9IFOXaGvEQKo=)
2: ZEIkHOpAjx_99PsiN5R21UlMSKc.roa (hash: vTffovFaT4NCjWWk8Fwv+MgUP11pdffCPeTnPWoxFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:2e:48:d3:e3:f3:eb:70:8c:e9:2a:4b:40:2c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Oct 20 05:01:12 2025 GMT
Not After : Oct 21 05:01:12 2025 GMT
Subject: CN=db7669d63a2008c9161c97fd9572053f5696b601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:09:18:89:23:0f:a6:3e:d9:a1:16:c7:78:
5a:6a:98:09:85:f5:a7:b7:8c:84:69:57:f4:0d:47:
15:51:8d:9f:7a:f0:30:d2:ee:a9:fa:af:a1:9c:db:
d2:f4:b5:fb:2e:54:78:98:0a:93:06:96:46:db:42:
7f:a6:ed:64:86:33:b9:92:b7:3d:48:89:33:50:a2:
13:24:2e:c1:01:b8:c2:8a:92:b4:26:79:fa:a8:5d:
25:08:b9:53:ed:78:1d:87:12:15:eb:48:3a:10:fd:
6f:4d:53:c4:4b:7d:79:25:f9:fb:73:ef:e2:6b:d3:
e4:1c:22:b5:e2:44:0f:a8:3b:3a:13:55:db:0f:5f:
f5:23:44:f6:93:b1:fa:74:b7:19:47:64:2a:bd:45:
b0:4f:3e:f4:76:59:ab:01:6d:71:0d:a8:41:32:fc:
01:11:de:63:cb:70:6b:be:02:90:44:2c:71:dc:08:
68:97:d0:fd:25:97:a3:11:2e:7e:a8:fb:25:37:f1:
32:11:0c:26:59:45:e5:05:08:c3:9f:c9:fd:08:36:
81:97:93:bd:5b:07:a6:a4:69:4e:d8:f8:25:eb:fa:
62:6d:0b:4b:1b:30:d8:12:5d:b3:90:b5:26:02:e1:
88:b3:13:f9:64:e5:84:cb:ee:c1:b3:72:71:7a:d1:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:69:D6:3A:20:08:C9:16:1C:97:FD:95:72:05:3F:56:96:B6:01
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c4:23:4c:be:6f:0c:cc:f5:35:21:46:ee:46:49:d6:65:1d:
e1:90:0f:2f:72:f4:e1:17:48:5b:09:74:a2:ae:a7:3e:b9:4f:
69:38:35:c8:50:56:0a:71:7c:2c:60:bd:90:b4:ac:26:c6:b2:
81:25:34:52:c3:8d:a5:c8:6f:87:db:30:71:e2:73:ee:7d:b2:
94:df:88:63:b4:e1:49:06:ec:ba:e3:0a:cb:e5:43:b3:ac:fd:
2f:c0:1a:ae:29:3e:ef:b0:18:11:eb:f6:d9:a6:a3:36:58:a6:
28:06:49:94:b5:b7:5c:8e:48:db:f1:03:11:07:64:32:af:92:
7d:40:99:b4:a4:86:cf:cb:64:b7:3e:f6:c3:a0:81:6d:35:1d:
bc:dd:79:50:24:fd:2a:25:26:2e:5d:95:e1:d5:10:1c:48:4a:
f8:78:05:f5:72:7a:2e:02:c3:9b:25:6b:38:8c:f6:e4:8e:0d:
52:76:b7:02:7a:b3:ef:a0:7f:ee:b1:48:44:65:03:4a:e2:cd:
da:e7:e3:18:a1:74:f0:18:a8:0a:3d:84:ba:d1:2b:36:e1:eb:
9c:7c:2c:26:07:10:7c:c6:3b:e7:08:83:1a:b7:43:d3:47:c9:
bf:95:8a:2e:f7:bb:c6:af:e8:b7:f5:0a:f1:b8:48:fe:8c:91:
13:64:0b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//i5I0+Pz63CM6SpLQCzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmIyZWZiNGVjMWU5YjZmNmM2ZDBiYTI2MDc0N2E5YzNl
MGFkY2EwHhcNMjUxMDIwMDUwMTEyWhcNMjUxMDIxMDUwMTEyWjAzMTEwLwYDVQQD
EyhkYjc2NjlkNjNhMjAwOGM5MTYxYzk3ZmQ5NTcyMDUzZjU2OTZiNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWoJGIkjD6Y+2aEWx3haapgJhfWn
t4yEaVf0DUcVUY2fevAw0u6p+q+hnNvS9LX7LlR4mAqTBpZG20J/pu1khjO5krc9
SIkzUKITJC7BAbjCipK0Jnn6qF0lCLlT7XgdhxIV60g6EP1vTVPES315Jfn7c+/i
a9PkHCK14kQPqDs6E1XbD1/1I0T2k7H6dLcZR2QqvUWwTz70dlmrAW1xDahBMvwB
Ed5jy3BrvgKQRCxx3Ahol9D9JZejES5+qPslN/EyEQwmWUXlBQjDn8n9CDaBl5O9
WwempGlO2Pgl6/pibQtLGzDYEl2zkLUmAuGIsxP5ZOWEy+7Bs3JxetFRsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt2adY6IAjJFhyX/ZVyBT9WlrYBMB8GA1UdIwQY
MBaAFPP7LvtOwem29sbQuiYHR6nD4K3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQt
NmU5MTJkYjAyZjVkLzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQtNmU5MTJkYjAyZjVk
LzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisQjTL5v
DMz1NSFG7kZJ1mUd4ZAPL3L04RdIWwl0oq6nPrlPaTg1yFBWCnF8LGC9kLSsJsay
gSU0UsONpchvh9swceJz7n2ylN+IY7ThSQbsuuMKy+VDs6z9L8Aarik+77AYEev2
2aajNlimKAZJlLW3XI5I2/EDEQdkMq+SfUCZtKSGz8tktz72w6CBbTUdvN15UCT9
KiUmLl2V4dUQHEhK+HgF9XJ6LgLDmyVrOIz25I4NUna3Anqz76B/7rFIRGUDSuLN
2ufjGKF08BioCj2EutErNuHrnHwsJgcQfMY75wiDGrdD00fJv5WKLve7xq/ot/UK
8bhI/oyRE2QL/w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:58 2025 by rpki-client