Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: JJtt01AQtDddte3OjE80l3qRkTi/gMEy/QA076Mdc40=
Subject key identifier: C5:5D:D1:3D:4C:73:91:00:A9:62:04:F9:79:12:81:E7:65:8F:48:74
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 0199FC2171F26D0C3BA3E6068DA97F67F6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 068D
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: tHDJXYgV4Avy5YIGkv0DwOr833sn8V5v6Johv3gVWec=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:71:f2:6d:0c:3b:a3:e6:06:8d:a9:7f:67:f6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=c55dd13d4c739100a96204f9791281e7658f4874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:7d:d0:c4:d7:1f:15:29:0f:e4:e5:db:3d:
f4:aa:66:ec:f0:28:d0:bb:13:92:fc:8f:f1:ac:3a:
52:d7:b9:38:b3:3e:97:e7:56:72:29:28:8d:4d:d5:
c0:67:a6:00:73:c2:01:5e:77:a3:01:8d:61:0e:1e:
d7:be:92:af:f5:c5:07:25:d7:21:54:03:0f:6f:54:
1b:77:52:0e:d6:0b:87:61:21:88:80:a7:7a:31:8e:
ae:49:b5:40:6d:3a:21:8f:7f:f8:0b:ea:2f:1e:d2:
ab:12:3e:b8:b8:cd:f2:54:22:0a:1e:8b:f1:c6:5e:
39:ab:3f:8b:98:9a:bf:5d:6f:d3:4e:4c:08:d1:0d:
a1:41:c9:99:f6:11:05:a3:b3:7c:5a:84:c9:09:af:
c1:d2:22:7d:8d:bf:84:d9:e8:a5:8b:9d:f3:a0:ce:
aa:71:41:35:cc:3f:93:38:8b:6d:df:e8:3a:4f:08:
65:9c:71:d3:2f:11:cc:33:c9:12:83:95:fd:66:dc:
04:1f:e4:97:ef:53:a1:36:1a:fb:db:dd:c1:88:28:
eb:74:64:e3:50:5e:66:21:a0:8b:32:cc:7a:11:e5:
31:54:83:b5:84:cb:70:9e:af:08:76:82:d4:42:ae:
3e:2e:56:5f:ed:31:15:d4:72:a5:a2:29:ba:33:d4:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:D1:3D:4C:73:91:00:A9:62:04:F9:79:12:81:E7:65:8F:48:74
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:54:6b:cc:7a:43:79:b3:d4:84:42:5d:a6:ac:65:d7:61:
51:b5:61:a2:56:6e:fd:41:bd:36:d0:aa:de:43:21:ff:5a:25:
1e:e0:c9:61:0d:4f:ac:19:59:0b:a8:b4:78:6e:99:5b:60:82:
7b:46:04:79:a7:4c:77:a0:9b:9f:92:7c:f6:b2:67:88:f8:a3:
e2:b7:da:d6:1c:47:06:fa:0f:29:06:bc:4e:22:3c:15:79:05:
5c:e0:51:de:2f:db:eb:38:12:65:4c:67:93:ff:1f:47:27:72:
7b:d2:e6:d3:c8:6a:d8:3a:c1:03:42:ea:ab:ce:45:d7:3a:3b:
c0:eb:57:fc:bb:e1:e6:40:3c:a3:45:f5:e4:89:ee:13:77:0e:
62:8c:c7:8e:41:b4:de:62:c8:e8:db:49:c6:70:c1:96:b2:10:
c5:98:06:bf:16:59:b4:f2:ba:ae:59:a9:fb:8f:14:18:c8:b4:
72:35:e1:84:29:06:cd:96:be:22:08:c7:81:80:61:b8:1d:7c:
19:de:aa:5f:b3:68:e6:5c:a6:b4:c6:ea:9c:a0:95:6f:91:41:
5d:22:4e:13:5d:3c:09:9b:9b:69:bf:80:9e:cb:d1:dc:4c:e2:
63:30:87:88:c7:63:bd:cf:be:c1:0a:92:9c:7b:ab:3b:a7:f9:
fd:20:02:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXHybQw7o+YGjal/Z/a6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm
ODRkZDMwHhcNMjUxMDE5MTEwMTE0WhcNMjUxMDIwMTEwMTE0WjAzMTEwLwYDVQQD
EyhjNTVkZDEzZDRjNzM5MTAwYTk2MjA0Zjk3OTEyODFlNzY1OGY0ODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jZ90MTXHxUpD+Tl2z30qmbs8CjQ
uxOS/I/xrDpS17k4sz6X51ZyKSiNTdXAZ6YAc8IBXnejAY1hDh7XvpKv9cUHJdch
VAMPb1Qbd1IO1guHYSGIgKd6MY6uSbVAbTohj3/4C+ovHtKrEj64uM3yVCIKHovx
xl45qz+LmJq/XW/TTkwI0Q2hQcmZ9hEFo7N8WoTJCa/B0iJ9jb+E2eili53zoM6q
cUE1zD+TOItt3+g6TwhlnHHTLxHMM8kSg5X9ZtwEH+SX71OhNhr7293BiCjrdGTj
UF5mIaCLMsx6EeUxVIO1hMtwnq8IdoLUQq4+LlZf7TEV1HKloim6M9TdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVd0T1Mc5EAqWIE+XkSgedlj0h0MB8GA1UdIwQY
MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt
NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0
LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6JUa8x6
Q3mz1IRCXaasZddhUbVholZu/UG9NtCq3kMh/1olHuDJYQ1PrBlZC6i0eG6ZW2CC
e0YEeadMd6Cbn5J89rJniPij4rfa1hxHBvoPKQa8TiI8FXkFXOBR3i/b6zgSZUxn
k/8fRydye9Lm08hq2DrBA0Lqq85F1zo7wOtX/Lvh5kA8o0X15InuE3cOYozHjkG0
3mLI6NtJxnDBlrIQxZgGvxZZtPK6rlmp+48UGMi0cjXhhCkGzZa+IgjHgYBhuB18
Gd6qX7No5lymtMbqnKCVb5FBXSJOE108CZubab+AnsvR3EziYzCHiMdjvc++wQqS
nHurO6f5/SACnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:51 2025 by rpki-client