
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier: 71BvceY20rN9sSVY/ZJeMgl83PwmvVfzRhykvLaJlik=
Subject key identifier: 2B:F7:CA:F7:EA:6C:54:2F:D2:2A:5A:3C:B6:F0:CB:EE:BE:48:9D:DA
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial: 0199FE7DE564ED4C7F0CD241FA4FDBA74A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number: 0A66
Signing time: Sun 19 Oct 2025 22:01:27 +0000
Manifest this update: Sun 19 Oct 2025 22:01:27 +0000
Manifest next update: Mon 20 Oct 2025 22:01:27 +0000
Files and hashes: 1: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: tn7L6v2Xqf+7AeeZ/zZado5ewRV1jJpzQTHxkPHJjJo=)
2: Jt10BH3qKoOGqx6R1oafXbYBRvg.roa (hash: 9VB1KYRqUDPucDZfXSnHKaNbHiQLBOlnBbvyv/YEMkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e5:64:ed:4c:7f:0c:d2:41:fa:4f:db:a7:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Validity
Not Before: Oct 19 22:01:27 2025 GMT
Not After : Oct 20 22:01:27 2025 GMT
Subject: CN=2bf7caf7ea6c542fd22a5a3cb6f0cbeebe489dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:fb:82:74:3b:a7:30:84:aa:b2:10:3c:84:
dd:99:c5:ed:64:5d:2f:42:7b:ac:a0:9c:ff:63:e8:
bc:7b:50:10:9b:a3:a6:ac:0e:90:5b:69:90:a6:f4:
ac:3a:11:67:de:10:ff:8a:35:48:08:fc:fd:f5:09:
82:e2:9f:98:17:a2:73:ae:0f:b9:a6:c3:ce:fd:22:
62:f4:37:d0:b6:c8:04:90:e2:d5:e4:70:a2:f2:67:
53:ad:7e:34:0f:e6:87:81:58:c3:79:36:f6:6f:13:
cb:00:26:58:14:55:49:f8:15:06:8a:d4:40:3e:46:
69:43:ae:a8:d6:89:76:d0:ed:39:57:c8:d7:ed:25:
93:08:c6:25:eb:d5:47:04:e9:ec:62:18:bf:c7:af:
48:39:92:61:c0:4f:a1:47:78:ac:62:65:83:d9:0f:
f7:53:31:98:45:5b:26:42:4c:61:b6:cc:45:56:fe:
5e:d7:bc:f6:ca:02:05:c2:95:e3:7f:62:8e:58:fd:
2b:c5:36:07:9c:92:63:49:67:1d:1a:aa:0d:fb:82:
bb:8a:c7:af:fa:c3:96:0f:da:3b:6c:b3:32:cb:55:
bc:5e:ee:fb:4f:71:50:4d:e0:b8:62:dd:25:eb:81:
15:a3:36:73:2e:2a:db:9e:a0:f8:c8:9c:a9:f3:41:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F7:CA:F7:EA:6C:54:2F:D2:2A:5A:3C:B6:F0:CB:EE:BE:48:9D:DA
X509v3 Authority Key Identifier:
keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:64:c9:49:51:8a:74:1e:fe:6d:98:bc:8e:98:51:aa:d7:50:
51:f5:81:be:76:8f:5a:7b:21:7b:1d:94:42:c2:e1:c4:21:2e:
09:60:7e:61:44:1e:f4:f5:ce:24:9f:62:14:d9:3b:34:e9:9d:
d5:bc:15:57:3f:3f:94:0a:43:62:bc:30:ff:89:ca:ee:4b:4f:
45:52:68:f1:40:9d:15:99:b7:9d:f2:f9:d3:2a:bd:1e:98:d8:
2f:49:23:9a:9c:d1:cf:8e:8b:96:45:d3:87:73:0c:c0:93:9f:
3e:d5:d6:a1:87:ce:a8:d6:e4:b0:9c:18:c7:a0:8e:75:b5:a4:
5b:14:e8:0b:6b:a6:ff:73:ca:6b:31:3e:af:64:8a:0d:6d:6d:
4c:76:cc:eb:01:d1:ac:da:79:35:6e:ea:7a:ae:9b:7b:0e:cd:
29:27:ae:05:a8:d4:d2:9c:8f:ba:4e:9c:ef:16:5c:18:32:6d:
1f:14:b0:8b:eb:2d:d6:5e:7e:e3:ec:db:98:6e:d5:f3:4c:b4:
c6:d2:c5:0c:5b:b2:14:b2:5c:80:98:18:7c:b1:29:9c:4b:a9:
5b:7b:bb:57:26:9b:3b:47:bd:a4:5a:05:e4:2c:c9:6a:95:d2:
3f:e2:44:29:b3:df:55:d3:54:b1:bc:24:f4:7a:84:d1:ca:28:
09:66:57:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+feVk7Ux/DNJB+k/bp0piMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmMxMWU2ZWNkM2EwYWYzZWU0Mzk0ZGNiYjdiM2VmOTAx
ODdkMzAwHhcNMjUxMDE5MjIwMTI3WhcNMjUxMDIwMjIwMTI3WjAzMTEwLwYDVQQD
EygyYmY3Y2FmN2VhNmM1NDJmZDIyYTVhM2NiNmYwY2JlZWJlNDg5ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf/7gnQ7pzCEqrIQPITdmcXtZF0v
QnusoJz/Y+i8e1AQm6OmrA6QW2mQpvSsOhFn3hD/ijVICPz99QmC4p+YF6Jzrg+5
psPO/SJi9DfQtsgEkOLV5HCi8mdTrX40D+aHgVjDeTb2bxPLACZYFFVJ+BUGitRA
PkZpQ66o1ol20O05V8jX7SWTCMYl69VHBOnsYhi/x69IOZJhwE+hR3isYmWD2Q/3
UzGYRVsmQkxhtsxFVv5e17z2ygIFwpXjf2KOWP0rxTYHnJJjSWcdGqoN+4K7isev
+sOWD9o7bLMyy1W8Xu77T3FQTeC4Yt0l64EVozZzLirbnqD4yJyp80GwZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv3yvfqbFQv0ipaPLbwy+6+SJ3aMB8GA1UdIwQY
MBaAFPK8Eebs06CvPuQ5Tcu3s++QGH0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYt
N2M0MjQ3YWU1YzFiLzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYtN2M0MjQ3YWU1YzFi
LzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2TJSVGK
dB7+bZi8jphRqtdQUfWBvnaPWnshex2UQsLhxCEuCWB+YUQe9PXOJJ9iFNk7NOmd
1bwVVz8/lApDYrww/4nK7ktPRVJo8UCdFZm3nfL50yq9HpjYL0kjmpzRz46LlkXT
h3MMwJOfPtXWoYfOqNbksJwYx6COdbWkWxToC2um/3PKazE+r2SKDW1tTHbM6wHR
rNp5NW7qeq6bew7NKSeuBajU0pyPuk6c7xZcGDJtHxSwi+st1l5+4+zbmG7V80y0
xtLFDFuyFLJcgJgYfLEpnEupW3u7VyabO0e9pFoF5CzJapXSP+JEKbPfVdNUsbwk
9HqE0cooCWZXEg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:14 2025 by rpki-client