Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: JAoF9jPowz5IVh8rvcjEiTSoYE1Pky7AIe2yv4MbxLE=
Subject key identifier: 5A:6E:DB:31:17:6C:6A:DE:18:56:14:57:68:B7:7D:7F:67:23:41:7F
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 0199FDD95890EED262BBD86DCECD7619FB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0DD8
Signing time: Sun 19 Oct 2025 19:01:43 +0000
Manifest this update: Sun 19 Oct 2025 19:01:43 +0000
Manifest next update: Mon 20 Oct 2025 19:01:43 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: DggqePyomqI4Q3FIdiXkHFa7uwqpqN7ofpV+TvyMjjg=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:58:90:ee:d2:62:bb:d8:6d:ce:cd:76:19:fb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Oct 19 19:01:43 2025 GMT
Not After : Oct 20 19:01:43 2025 GMT
Subject: CN=5a6edb31176c6ade1856145768b77d7f6723417f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:ea:d0:c3:d4:06:e2:80:19:d0:20:ff:76:
0f:54:cb:e7:e5:59:2e:fe:c1:cf:bf:b4:6b:17:5b:
b7:fb:35:f7:bb:17:5f:b5:70:02:31:17:e6:25:1e:
d8:21:cf:74:c5:cc:c1:12:8c:48:2c:bc:5b:c5:a5:
57:f6:02:6e:cc:5c:1a:ba:33:09:97:49:48:9c:b7:
96:41:1d:dc:be:b6:d5:b7:f5:13:4f:84:95:99:e4:
b6:e6:c6:b5:e2:0d:37:22:9e:93:86:1b:aa:10:7b:
30:20:d3:51:70:30:dd:28:b6:8a:f5:66:63:f7:49:
6c:0a:77:14:f1:b8:d4:8f:7b:e4:61:1a:62:d0:41:
02:b8:58:78:91:46:f1:82:e1:6d:63:f7:f2:b8:d2:
6b:88:06:ad:ef:04:80:61:82:c1:fa:b7:d0:7c:0b:
ba:98:75:a8:c4:9f:04:98:7a:27:14:af:c8:09:84:
47:6e:1f:4d:1b:5d:b7:1d:f7:b5:b9:04:87:db:4b:
81:76:d4:23:02:6f:25:53:f5:19:87:6c:a9:22:fb:
50:f6:5a:4a:db:e6:ef:48:d6:10:45:25:fb:b2:fb:
dd:09:18:2c:2b:31:c0:1f:cb:d5:3d:82:06:14:83:
54:6c:00:8d:1a:e3:6a:78:95:3a:e6:73:69:01:f8:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:DB:31:17:6C:6A:DE:18:56:14:57:68:B7:7D:7F:67:23:41:7F
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5c:8e:1b:3d:d4:3c:26:8a:1d:63:cf:8a:66:06:8b:8b:8d:
49:d6:e1:19:e1:e3:92:d9:77:2d:c2:bf:e9:b0:78:da:e0:c6:
95:a2:3e:04:b4:6f:78:8c:b6:77:e5:6e:26:26:2c:cd:a1:5b:
f4:5e:f8:9d:54:a8:6f:ee:ed:d6:f9:69:60:cc:fd:9c:a1:c7:
c4:b7:e7:69:df:fb:64:01:e5:df:f8:a2:3d:e4:ec:bf:a6:57:
25:de:3f:50:70:ae:47:0c:f2:05:63:56:68:e6:a5:2b:f0:86:
9a:77:18:9a:52:5b:f8:ac:65:f9:f0:90:aa:f5:d7:c3:ab:e7:
61:09:e3:e4:48:05:3e:be:a3:a5:51:00:26:b3:2d:35:eb:a8:
8c:f3:b9:15:19:ee:22:9f:b8:7e:e4:51:2b:4d:2f:63:dd:e4:
28:37:f9:3e:5a:9e:6a:d7:42:e5:01:2b:0d:15:c2:24:aa:f5:
aa:ce:e2:00:a2:10:1e:32:f8:fe:cd:e7:c3:63:7d:26:26:b5:
19:26:bd:28:72:73:91:72:e2:f2:b4:e6:d5:82:8d:63:80:74:
3f:a0:48:91:ff:a4:05:d4:dd:6e:b0:45:e7:4b:26:68:b4:7f:
d0:59:5d:b8:3c:31:f6:c3:a4:38:bb:8c:fe:37:68:38:5e:4a:
5f:df:d8:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ViQ7tJiu9htzs12GftyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTExNWM3MTdlNTg5MTM0YTU1MzY3MGYzZTJiNWI5Y2Rh
MTJkODMwHhcNMjUxMDE5MTkwMTQzWhcNMjUxMDIwMTkwMTQzWjAzMTEwLwYDVQQD
Eyg1YTZlZGIzMTE3NmM2YWRlMTg1NjE0NTc2OGI3N2Q3ZjY3MjM0MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoPq0MPUBuKAGdAg/3YPVMvn5Vku
/sHPv7RrF1u3+zX3uxdftXACMRfmJR7YIc90xczBEoxILLxbxaVX9gJuzFwaujMJ
l0lInLeWQR3cvrbVt/UTT4SVmeS25sa14g03Ip6ThhuqEHswINNRcDDdKLaK9WZj
90lsCncU8bjUj3vkYRpi0EECuFh4kUbxguFtY/fyuNJriAat7wSAYYLB+rfQfAu6
mHWoxJ8EmHonFK/ICYRHbh9NG123Hfe1uQSH20uBdtQjAm8lU/UZh2ypIvtQ9lpK
2+bvSNYQRSX7svvdCRgsKzHAH8vVPYIGFINUbACNGuNqeJU65nNpAfjNHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpu2zEXbGreGFYUV2i3fX9nI0F/MB8GA1UdIwQY
MBaAFPChFccX5YkTSlU2cPPitbnNoS2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgt
Mzc2MjRmNmE1MzExLzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgtMzc2MjRmNmE1MzEx
LzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlyOGz3U
PCaKHWPPimYGi4uNSdbhGeHjktl3LcK/6bB42uDGlaI+BLRveIy2d+VuJiYszaFb
9F74nVSob+7t1vlpYMz9nKHHxLfnad/7ZAHl3/iiPeTsv6ZXJd4/UHCuRwzyBWNW
aOalK/CGmncYmlJb+Kxl+fCQqvXXw6vnYQnj5EgFPr6jpVEAJrMtNeuojPO5FRnu
Ip+4fuRRK00vY93kKDf5PlqeatdC5QErDRXCJKr1qs7iAKIQHjL4/s3nw2N9Jia1
GSa9KHJzkXLi8rTm1YKNY4B0P6BIkf+kBdTdbrBF50smaLR/0FlduDwx9sOkOLuM
/jdoOF5KX9/YNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:23 2025 by rpki-client