Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: S9/vA0eV0MVMnVmGaUaMKs2otMbzoaqiPdsX+NF9p0A=
Subject key identifier: 52:B6:06:52:C8:09:30:13:D2:06:41:7C:A9:51:09:B3:30:D2:9D:B8
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 0199FB7C734A5FE1006764A30751FC833C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 37
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: qHU6rUzjCByHoAtAfg65yvdkRIH2gqFAgxeNuoyJVuU=)
2: Xd7ijHjwtfXf4zZiE_HQf8TmqP0.roa (hash: w9B2n3G58lCmyJiIUIJesOdWt7RmGyJHNmHtEsf7LS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:73:4a:5f:e1:00:67:64:a3:07:51:fc:83:3c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=52b60652c8093013d206417ca95109b330d29db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:d2:b9:2f:8f:d9:e7:76:51:5f:9a:c8:9b:
6b:6b:3f:ff:ab:e5:0b:89:d4:67:1f:cb:ff:b0:2b:
94:4d:be:89:de:ad:d5:85:42:9a:a2:10:48:4e:b1:
41:8d:da:ab:1f:8e:93:be:5b:c5:bc:c8:31:37:60:
b4:0b:f2:dc:7f:4d:a9:91:6a:fe:15:84:b4:cd:ef:
e2:dd:5a:ca:f0:63:f5:38:94:7e:a4:b7:f3:63:69:
67:95:33:ad:c2:a8:c0:c6:97:5e:be:b2:de:ed:5a:
69:d5:53:f5:df:4f:e1:54:b5:b6:ef:f1:53:e8:66:
e6:c9:35:d1:a9:9a:3b:41:ec:9b:02:1e:dc:54:82:
17:42:3f:de:51:5f:ad:24:ce:a7:0c:20:f5:30:a7:
96:cf:90:9f:71:44:b1:1d:a6:d3:9b:26:17:c5:b6:
3d:c6:a3:c2:c8:13:aa:ff:56:56:6d:94:75:6a:f3:
b2:0a:1a:f4:ab:fc:63:35:55:51:a6:18:58:df:e8:
b3:94:0d:ca:c4:13:21:a8:00:24:d2:d2:31:68:54:
65:82:08:7c:5a:4c:d2:28:81:13:be:29:9a:d7:86:
c8:da:61:a6:ed:8b:f7:58:74:94:42:73:11:5c:e4:
b2:71:8a:ac:e0:3a:60:ac:a2:0b:7d:fc:21:46:65:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:06:52:C8:09:30:13:D2:06:41:7C:A9:51:09:B3:30:D2:9D:B8
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0b:fc:c6:aa:60:09:18:c4:03:ff:aa:e9:cd:f6:07:44:ed:
d3:8a:5b:02:b7:07:75:2b:9a:61:a6:40:99:74:e3:6b:a0:39:
ba:74:e4:f2:8f:63:64:e5:9c:41:d0:11:49:17:6d:c8:c5:0c:
52:45:9c:f2:f5:42:78:a5:28:b5:d0:80:bb:d6:b7:5f:c4:4c:
82:a2:05:07:f0:67:55:98:18:12:5d:b4:b1:09:63:28:db:76:
37:7f:3a:97:16:58:c4:b9:26:42:34:3f:27:7b:e3:ed:d2:96:
7c:16:04:11:a4:6f:bb:fb:a2:bf:66:90:91:9a:ac:c2:f1:23:
bf:61:a2:c5:e3:b6:07:64:74:10:b0:29:f5:3e:f0:e8:70:44:
df:4b:bc:7f:3c:7f:b4:0e:d4:dc:eb:d4:fd:6a:e1:b6:cf:58:
24:cb:d6:59:6d:b5:e1:84:ac:a6:59:93:a0:87:31:6c:95:b3:
02:c7:3c:ee:e4:19:8a:ab:1f:07:d0:86:08:e6:41:47:91:4b:
91:88:f8:b7:55:8b:39:73:ec:c0:57:53:e2:89:0a:31:a5:a7:
88:42:39:2f:1a:f5:a9:09:60:2d:57:78:c4:8a:53:cf:1c:57:
cd:59:9e:f8:39:8f:28:63:e6:e7:af:00:f3:38:77:74:15:0a:
e8:5e:4d:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fHNKX+EAZ2SjB1H8gzwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3
M2U0MjQwHhcNMjUxMDE5MDgwMTAxWhcNMjUxMDIwMDgwMTAxWjAzMTEwLwYDVQQD
Eyg1MmI2MDY1MmM4MDkzMDEzZDIwNjQxN2NhOTUxMDliMzMwZDI5ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+DSuS+P2ed2UV+ayJtraz//q+UL
idRnH8v/sCuUTb6J3q3VhUKaohBITrFBjdqrH46TvlvFvMgxN2C0C/Lcf02pkWr+
FYS0ze/i3VrK8GP1OJR+pLfzY2lnlTOtwqjAxpdevrLe7Vpp1VP130/hVLW27/FT
6GbmyTXRqZo7QeybAh7cVIIXQj/eUV+tJM6nDCD1MKeWz5CfcUSxHabTmyYXxbY9
xqPCyBOq/1ZWbZR1avOyChr0q/xjNVVRphhY3+izlA3KxBMhqAAk0tIxaFRlggh8
WkzSKIETvima14bI2mGm7Yv3WHSUQnMRXOSycYqs4DpgrKILffwhRmVVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFK2BlLICTAT0gZBfKlRCbMw0p24MB8GA1UdIwQY
MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt
NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj
LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQv8xqpg
CRjEA/+q6c32B0Tt04pbArcHdSuaYaZAmXTja6A5unTk8o9jZOWcQdARSRdtyMUM
UkWc8vVCeKUotdCAu9a3X8RMgqIFB/BnVZgYEl20sQljKNt2N386lxZYxLkmQjQ/
J3vj7dKWfBYEEaRvu/uiv2aQkZqswvEjv2GixeO2B2R0ELAp9T7w6HBE30u8fzx/
tA7U3OvU/Wrhts9YJMvWWW214YSsplmToIcxbJWzAsc87uQZiqsfB9CGCOZBR5FL
kYj4t1WLOXPswFdT4okKMaWniEI5Lxr1qQlgLVd4xIpTzxxXzVme+DmPKGPm568A
8zh3dBUK6F5N2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:59 2025 by rpki-client