Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: Oy7mwxW+Adbeli+HpBYRuoxYGvLcW3YuVv/kKDCZVXE=
Subject key identifier: F9:37:0D:B2:B2:86:36:58:BA:F8:19:5C:C2:83:5D:33:99:3D:97:08
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 0198D583516AE0366AACF0A89A7FF2E7F350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0DD7
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: Fw1c4CmV5eVuMTWq/5VSTvOg8ejwdUBg+BwdA13lE+k=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:51:6a:e0:36:6a:ac:f0:a8:9a:7f:f2:e7:f3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=f9370db2b2863658baf8195cc2835d33993d9708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:94:85:b2:a8:6e:cf:e4:49:96:cc:3c:00:
7b:52:c9:90:16:6d:8a:84:80:6d:c8:81:01:7c:95:
52:a5:57:2d:bb:1f:6d:a7:8d:de:07:d0:eb:50:2a:
00:86:49:42:7e:f1:2d:9d:b3:55:84:39:83:d4:26:
39:21:c0:f5:a4:5a:ce:7b:08:b7:56:6f:d2:41:ab:
07:d8:8d:9e:60:81:72:0f:ea:5c:bf:22:98:e2:2c:
cc:59:45:78:f9:cd:40:eb:d1:b7:97:c6:87:57:a2:
56:f0:fb:04:78:c5:55:80:2e:c9:b7:c4:be:39:e3:
11:8e:76:7e:bc:41:df:b6:d2:b3:49:a0:51:7a:51:
aa:c4:b7:29:84:9e:6b:d6:66:6d:6f:9d:5c:8f:21:
8f:55:92:9d:65:59:fa:18:67:eb:97:12:0c:6b:2b:
01:a2:59:97:89:77:bc:d7:0c:bb:0d:09:da:04:22:
18:9b:6f:5f:84:2f:96:f3:5a:c1:04:2b:ca:9f:32:
04:6f:28:5f:4d:bf:a6:3b:36:5f:58:e3:0a:5d:e0:
7b:91:9c:12:06:f6:e3:20:5f:9e:1f:46:b8:92:81:
db:bb:cc:aa:b4:7c:b7:19:b0:79:51:27:3e:3c:0b:
13:70:6e:bb:1d:9f:f1:b3:bc:3d:e6:4d:99:f9:e1:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:37:0D:B2:B2:86:36:58:BA:F8:19:5C:C2:83:5D:33:99:3D:97:08
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cc:94:55:a8:96:d3:c0:f2:01:ee:3d:17:33:88:16:e7:16:
11:87:ce:a8:c9:5e:f1:28:6f:85:e6:cb:b7:d7:0c:2a:85:bf:
41:11:ab:ab:6b:5f:3a:01:5a:f1:50:db:c1:27:5a:0a:94:89:
59:df:b4:e9:46:a3:05:b3:51:8c:ee:6c:fd:e9:ee:56:8b:57:
73:4d:bf:24:57:77:c7:29:a3:a7:11:0c:1c:2d:d6:e7:fd:65:
9c:9a:77:c5:b4:c2:bf:71:32:c6:f7:55:66:40:67:64:83:b5:
9e:82:fd:4c:b2:a2:02:e0:eb:4d:c4:82:55:2f:a1:91:53:b5:
cc:e7:da:28:d4:a6:54:90:04:57:38:72:7b:40:80:69:b2:76:
e2:8f:6f:41:93:b7:11:93:9a:61:ce:9a:63:32:c4:76:80:2f:
12:99:bd:a7:a7:3a:63:e0:54:b9:ae:64:f4:eb:23:09:fc:3f:
d2:06:46:71:cb:1f:56:9d:75:d0:a2:d9:5c:45:d4:97:7b:d9:
a3:96:fb:16:64:0d:f0:c4:87:40:47:52:5f:e8:80:f4:e6:33:
bc:ff:2a:62:d2:aa:1f:70:82:06:49:3e:3a:e8:42:3e:be:00:
ac:74:98:06:59:2a:a1:f4:8e:f5:6b:27:0e:86:fb:74:09:67:
6e:26:fd:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1Fq4DZqrPComn/y5/NQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1
Y2MxMDMwHhcNMjUwODIzMDYwMDA5WhcNMjUwODI0MDYwMDA5WjAzMTEwLwYDVQQD
EyhmOTM3MGRiMmIyODYzNjU4YmFmODE5NWNjMjgzNWQzMzk5M2Q5NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KiUhbKobs/kSZbMPAB7UsmQFm2K
hIBtyIEBfJVSpVctux9tp43eB9DrUCoAhklCfvEtnbNVhDmD1CY5IcD1pFrOewi3
Vm/SQasH2I2eYIFyD+pcvyKY4izMWUV4+c1A69G3l8aHV6JW8PsEeMVVgC7Jt8S+
OeMRjnZ+vEHfttKzSaBRelGqxLcphJ5r1mZtb51cjyGPVZKdZVn6GGfrlxIMaysB
olmXiXe81wy7DQnaBCIYm29fhC+W81rBBCvKnzIEbyhfTb+mOzZfWOMKXeB7kZwS
BvbjIF+eH0a4koHbu8yqtHy3GbB5USc+PAsTcG67HZ/xs7w95k2Z+eFYiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk3DbKyhjZYuvgZXMKDXTOZPZcIMB8GA1UdIwQY
MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct
ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj
LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsyUVaiW
08DyAe49FzOIFucWEYfOqMle8ShvhebLt9cMKoW/QRGrq2tfOgFa8VDbwSdaCpSJ
Wd+06UajBbNRjO5s/enuVotXc02/JFd3xymjpxEMHC3W5/1lnJp3xbTCv3EyxvdV
ZkBnZIO1noL9TLKiAuDrTcSCVS+hkVO1zOfaKNSmVJAEVzhye0CAabJ24o9vQZO3
EZOaYc6aYzLEdoAvEpm9p6c6Y+BUua5k9OsjCfw/0gZGccsfVp110KLZXEXUl3vZ
o5b7FmQN8MSHQEdSX+iA9OYzvP8qYtKqH3CCBkk+OuhCPr4ArHSYBlkqofSO9Wsn
Dob7dAlnbib94g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:10 2025 by rpki-client