Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: //9ottA/bQg5SM9Dtrv6Ajz22fiEWDkANFMTpXmKlSc=
Subject key identifier: A5:2A:2A:79:AA:C1:A1:23:80:E3:47:59:83:15:3E:F0:5E:8C:00:53
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 0199FC216A15FB196B57614A9D807A1DA37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 168B
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: 2_G9MV3MarApcSIaC14zzAbTXto.roa (hash: Xsc0Q6TWSpbouB+us1TXP5dMLNVqwF4nhlITaZf4sco=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: AXHefAKRsgTVDy/Ljwqvk/g8EvYV4TEjNPGGnqwvvEs=)
3: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6a:15:fb:19:6b:57:61:4a:9d:80:7a:1d:a3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=a52a2a79aac1a12380e3475983153ef05e8c0053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:14:3c:29:8a:52:3e:97:24:4d:27:73:1d:
c2:31:b2:84:10:54:22:f8:47:f2:1f:9f:fc:37:d6:
97:ca:56:3c:1e:aa:ea:89:0e:d2:dc:1c:37:e4:94:
c5:47:38:b0:d9:ed:e3:88:fa:e4:f8:28:24:ad:38:
b3:cb:39:3a:f7:26:f5:01:ef:53:8a:6f:eb:15:b8:
28:fe:04:44:13:4f:11:b6:35:ef:eb:62:88:71:d5:
74:61:5e:89:36:65:9c:e4:26:ae:70:7e:f1:a4:82:
7d:f4:d6:ed:f8:87:05:c4:cb:01:2a:16:03:8e:0d:
34:1f:08:35:e6:a8:70:18:e0:ba:41:78:77:47:6e:
61:64:7a:b3:44:24:91:63:60:7f:65:5c:87:49:82:
95:62:2d:e0:37:67:3d:6b:e0:a8:cc:09:6d:c3:0f:
48:0f:46:6a:7c:2f:f9:ec:f0:e3:91:9b:a6:05:97:
06:7f:4d:96:bd:de:74:11:02:6e:f6:7b:5c:96:62:
cf:c5:c6:f3:9b:c6:62:fb:41:cc:9a:56:d4:b1:03:
f0:ec:9d:fe:7e:33:51:af:f6:79:d7:88:dc:9b:11:
9b:9f:b3:a0:3c:a2:0a:64:96:4d:53:4a:1d:db:d8:
ca:93:76:8f:35:c9:ec:3f:5a:3c:ec:1b:fc:39:8f:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2A:2A:79:AA:C1:A1:23:80:E3:47:59:83:15:3E:F0:5E:8C:00:53
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d1:dd:d5:3b:ca:e9:94:9c:6c:6c:78:bb:a2:62:2e:12:ed:
53:d5:e0:a7:f9:60:9e:88:74:64:15:71:43:53:07:c9:cb:51:
c4:35:7b:00:7d:5e:33:e1:c9:61:7e:f4:62:05:52:2c:ba:24:
d8:01:da:b1:ee:3a:b2:fd:46:5b:30:99:aa:d5:a8:e9:7c:f4:
ef:fe:d4:59:be:95:2d:a6:25:ba:d3:c8:73:a3:c7:8c:fe:02:
8f:aa:3a:07:a3:96:99:7f:95:9a:c2:16:02:c2:2c:e5:27:e4:
9e:c0:d0:0c:67:c7:ff:67:0d:c6:a7:11:03:77:1c:14:8e:fd:
4e:24:5c:be:59:ce:01:ea:4f:4e:ed:af:bf:8b:7c:4c:8e:59:
cd:18:80:e5:7a:c1:09:59:56:a4:e6:1a:5f:c9:63:cc:6b:df:
47:32:8c:9d:60:f8:66:5c:65:d9:b5:64:d4:42:79:04:d1:6b:
1a:98:49:db:5f:15:c7:3e:74:96:ee:26:a4:11:9b:39:37:01:
ab:1a:cb:dc:ba:7c:a9:65:3d:9e:d7:89:6a:c4:43:90:d7:b3:
23:0e:50:a5:ad:d5:40:9a:b2:24:79:cc:9e:ca:3e:d2:66:6a:
83:b4:09:3e:53:1e:eb:ca:79:26:da:4e:bd:87:13:7a:39:e9:
8d:20:6c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWoV+xlrV2FKnYB6HaN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZmU2ZjJhOTM3ODM4ZGYyYjE1ZGExNzQzYmNkOWZiMGUy
OWNmMmUwHhcNMjUxMDE5MTEwMTEyWhcNMjUxMDIwMTEwMTEyWjAzMTEwLwYDVQQD
EyhhNTJhMmE3OWFhYzFhMTIzODBlMzQ3NTk4MzE1M2VmMDVlOGMwMDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mkUPCmKUj6XJE0ncx3CMbKEEFQi
+EfyH5/8N9aXylY8HqrqiQ7S3Bw35JTFRziw2e3jiPrk+CgkrTizyzk69yb1Ae9T
im/rFbgo/gREE08RtjXv62KIcdV0YV6JNmWc5CaucH7xpIJ99Nbt+IcFxMsBKhYD
jg00Hwg15qhwGOC6QXh3R25hZHqzRCSRY2B/ZVyHSYKVYi3gN2c9a+CozAltww9I
D0ZqfC/57PDjkZumBZcGf02Wvd50EQJu9ntclmLPxcbzm8Zi+0HMmlbUsQPw7J3+
fjNRr/Z514jcmxGbn7OgPKIKZJZNU0od29jKk3aPNcnsP1o87Bv8OY/nzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUqKnmqwaEjgONHWYMVPvBejABTMB8GA1UdIwQY
MBaAFPL+byqTeDjfKxXaF0O82fsOKc8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMt
YjcyNTU3NjY4YjAxLzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMtYjcyNTU3NjY4YjAx
LzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdHd1TvK
6ZScbGx4u6JiLhLtU9Xgp/lgnoh0ZBVxQ1MHyctRxDV7AH1eM+HJYX70YgVSLLok
2AHase46sv1GWzCZqtWo6Xz07/7UWb6VLaYlutPIc6PHjP4Cj6o6B6OWmX+VmsIW
AsIs5SfknsDQDGfH/2cNxqcRA3ccFI79TiRcvlnOAepPTu2vv4t8TI5ZzRiA5XrB
CVlWpOYaX8ljzGvfRzKMnWD4Zlxl2bVk1EJ5BNFrGphJ218Vxz50lu4mpBGbOTcB
qxrL3Lp8qWU9nteJasRDkNezIw5Qpa3VQJqyJHnMnso+0mZqg7QJPlMe68p5JtpO
vYcTejnpjSBsFw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:01 2025 by rpki-client