Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: bmjYIqRdRMqxB1GTZR8WZxUWC2Iytooy0wwwo484krg=
Subject key identifier: 32:85:09:47:2A:53:B8:30:9A:4F:36:6F:D2:92:82:4B:91:D2:56:72
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 0199D0922A9F056A9DD29EF27EEDF9FF0055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 0E6C
Signing time: Sat 11 Oct 2025 00:01:03 +0000
Manifest this update: Sat 11 Oct 2025 00:01:03 +0000
Manifest next update: Sun 12 Oct 2025 00:01:03 +0000
Files and hashes: 1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: dzhGtV3jjOeKNq67XgRUV4OpMKCc/05T/2EUG9DtTKU=)
2: hNGctvUgxsV9VRFcAR330Ay19l8.roa (hash: zQTWmn2EIkYMs7iDpMx3kmmkHaS8RfsfTxjAwAVdFG4=)
3: kwVeacE9Id0juKigol5W8QUGZmY.roa (hash: 7cxULpmrleNFyzISvZ8CMCvy9RGxzfGSr5MdwYQQpa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d0:92:2a:9f:05:6a:9d:d2:9e:f2:7e:ed:f9:ff:00:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Oct 11 00:01:03 2025 GMT
Not After : Oct 12 00:01:03 2025 GMT
Subject: CN=328509472a53b8309a4f366fd292824b91d25672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:de:1b:ed:01:a1:39:db:52:b3:64:37:37:
76:cc:c5:f9:ac:61:c2:8e:90:1f:47:b5:a3:c1:cf:
5c:d4:cc:da:28:67:85:d7:c2:28:7f:66:1d:27:9d:
21:11:f7:3b:6f:8a:9c:a4:3a:32:27:a9:02:15:83:
9b:6b:a9:c0:fc:18:e4:02:a8:27:9b:42:bc:b3:2c:
c4:5e:95:b0:e4:ce:bd:29:72:8e:7f:fb:08:c3:09:
7b:c8:a1:e5:9a:b8:f6:7c:48:cf:80:34:9e:4a:77:
1f:c6:d7:9d:ad:29:ff:d4:9c:f5:96:5a:54:14:b3:
5c:0d:fa:f4:39:66:89:43:93:5e:6d:50:70:03:dc:
cc:e5:7a:d7:be:69:9b:9d:c7:08:7a:fa:04:83:2f:
e6:69:69:e4:68:69:28:47:77:ff:b0:78:ff:fe:83:
ac:ff:c0:b8:b4:3e:65:2e:4d:2f:59:74:be:67:2b:
d3:0a:9d:71:b9:77:2f:08:e2:88:03:03:cb:cf:fd:
05:60:99:4d:88:8b:ab:84:12:5c:ea:0b:7b:e0:bd:
96:f1:a1:ea:27:92:85:46:bd:57:0c:86:28:18:4c:
cd:de:1a:6e:fb:93:3c:55:aa:96:4d:a4:97:be:2d:
1b:81:87:bc:8c:fc:f0:4e:0d:91:d5:95:e2:81:72:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:85:09:47:2A:53:B8:30:9A:4F:36:6F:D2:92:82:4B:91:D2:56:72
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:75:f7:bb:b9:f6:8d:02:9f:85:61:1e:78:58:e5:b2:d1:d5:
5c:4a:c2:4a:e7:b1:cd:2e:e3:62:63:d0:1f:2d:a0:a8:f8:5b:
c2:fe:d2:c1:42:e7:04:4a:75:3b:96:90:de:c0:14:1f:04:e9:
92:9e:34:1c:a2:b3:0e:e5:cf:c2:9c:5e:65:9f:80:b3:c8:e8:
d3:61:45:e1:cb:ab:11:1a:ec:ae:d8:95:99:40:fc:8f:a3:41:
fc:93:60:7c:a3:46:3f:23:35:12:f4:5e:d8:38:ae:5d:d7:05:
e0:6c:c9:fa:8e:38:e4:62:41:d9:7d:4f:13:a5:97:81:e3:fb:
18:28:76:d1:8d:fb:55:91:5d:ee:34:3e:2a:fc:13:c5:5d:e0:
c8:d3:d8:32:e4:58:88:48:4b:93:82:1f:fc:c5:81:71:c8:91:
b0:d4:25:df:ab:b7:19:cd:0d:3b:a8:b1:68:36:62:a7:42:a5:
3f:14:0b:d9:44:61:f5:90:7d:85:28:15:b7:5f:54:36:16:e6:
5d:0b:9e:74:c8:4e:5b:fa:b5:ae:d9:67:86:72:29:a2:4f:26:
e1:68:75:8d:7d:ad:7b:f1:fd:1b:ab:83:88:29:32:f7:8a:1d:
46:fe:44:4c:3f:81:40:e5:f5:74:e6:23:f8:e9:15:3a:d6:39:
24:ac:ec:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnQkiqfBWqd0p7yfu35/wBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzdkZDI1Y2E1ZmIxZGM5MTNjMmZmYjkxNmZhMjJmYjg2
MTBiNzgwHhcNMjUxMDExMDAwMTAzWhcNMjUxMDEyMDAwMTAzWjAzMTEwLwYDVQQD
EygzMjg1MDk0NzJhNTNiODMwOWE0ZjM2NmZkMjkyODI0YjkxZDI1NjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz7eG+0BoTnbUrNkNzd2zMX5rGHC
jpAfR7Wjwc9c1MzaKGeF18Iof2YdJ50hEfc7b4qcpDoyJ6kCFYOba6nA/BjkAqgn
m0K8syzEXpWw5M69KXKOf/sIwwl7yKHlmrj2fEjPgDSeSncfxtedrSn/1Jz1llpU
FLNcDfr0OWaJQ5NebVBwA9zM5XrXvmmbnccIevoEgy/maWnkaGkoR3f/sHj//oOs
/8C4tD5lLk0vWXS+ZyvTCp1xuXcvCOKIAwPLz/0FYJlNiIurhBJc6gt74L2W8aHq
J5KFRr1XDIYoGEzN3hpu+5M8VaqWTaSXvi0bgYe8jPzwTg2R1ZXigXJZgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKFCUcqU7gwmk82b9KSgkuR0lZyMB8GA1UdIwQY
MBaAFHfH3SXKX7HckTwv+5Fvoi+4YQt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYt
ZGRiMzViMWFiYWQ1LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYtZGRiMzViMWFiYWQ1
LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHX3u7n2
jQKfhWEeeFjlstHVXErCSuexzS7jYmPQHy2gqPhbwv7SwULnBEp1O5aQ3sAUHwTp
kp40HKKzDuXPwpxeZZ+As8jo02FF4curERrsrtiVmUD8j6NB/JNgfKNGPyM1EvRe
2DiuXdcF4GzJ+o445GJB2X1PE6WXgeP7GCh20Y37VZFd7jQ+KvwTxV3gyNPYMuRY
iEhLk4If/MWBcciRsNQl36u3Gc0NO6ixaDZip0KlPxQL2URh9ZB9hSgVt19UNhbm
XQuedMhOW/q1rtlnhnIpok8m4Wh1jX2te/H9G6uDiCky94odRv5ETD+BQOX1dOYj
+OkVOtY5JKzsqA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 09:37:58 2025 by rpki-client