Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: X6HK2DwuR59aBF7NMVsBZD7blDQJ0iOcz1QDc4y5Jds=
Subject key identifier: 9F:A7:16:E1:CF:16:2F:16:B6:EC:96:A9:F3:D2:3B:92:AA:B3:DC:E8
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 01984A77BA774859F6D25B512799FF29CE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 0628
Signing time: Sun 27 Jul 2025 06:00:17 +0000
Manifest this update: Sun 27 Jul 2025 06:00:17 +0000
Manifest next update: Mon 28 Jul 2025 06:00:17 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: SGZ7Aw7xVcK67LVotcVoDt3KTka87JoPyJn0/i/eMfI=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ba:77:48:59:f6:d2:5b:51:27:99:ff:29:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Jul 27 06:00:17 2025 GMT
Not After : Jul 28 06:00:17 2025 GMT
Subject: CN=9fa716e1cf162f16b6ec96a9f3d23b92aab3dce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:2a:10:87:9e:1f:9d:62:a8:f3:cf:e1:51:
9b:7a:2e:a3:1a:33:c1:59:1f:3d:69:de:aa:03:68:
83:4e:15:76:30:58:77:3a:ba:40:6b:d1:d1:a8:82:
2b:86:a0:da:eb:f4:8c:08:64:c7:68:32:bb:f6:8e:
8a:61:55:13:57:fd:e5:37:f1:e1:58:8b:c4:b0:bd:
ad:75:23:45:52:5d:65:17:15:a9:ce:7c:20:df:13:
9f:dc:32:fd:b5:fd:ce:a3:c2:83:77:e3:26:4a:1c:
9b:3d:aa:2f:40:11:00:82:e4:84:ba:36:9e:a3:9e:
9d:fe:f1:9a:f1:79:41:22:1b:4a:af:e8:ec:9b:6d:
6c:84:e9:e6:f7:1c:8f:46:87:50:29:9a:34:64:61:
99:49:1f:04:30:1a:2f:57:8b:00:c2:47:98:84:64:
b7:46:49:5e:41:cf:77:ef:fb:c7:f1:1f:04:d6:64:
63:ba:3a:a3:25:49:06:69:20:97:fe:f8:c0:80:d6:
b8:3d:d8:74:44:9e:87:26:bb:dd:5a:24:6f:8e:61:
8f:4a:b1:c0:77:4a:1c:87:7e:9b:57:db:df:a9:4f:
54:c3:d4:92:8c:e6:07:84:b8:01:2b:eb:cf:92:36:
2d:f4:a9:ff:5e:08:aa:fb:93:7f:83:16:e4:ec:7d:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A7:16:E1:CF:16:2F:16:B6:EC:96:A9:F3:D2:3B:92:AA:B3:DC:E8
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bd:11:69:40:50:84:28:82:2b:c2:20:45:ae:60:ec:d8:98:
e3:ba:09:83:33:d4:e6:31:34:ae:0c:c4:97:af:46:b1:e3:ed:
be:45:c0:f7:de:5d:c3:83:5f:55:da:ea:ee:39:07:0b:e2:3e:
0f:76:2c:41:47:71:5c:e7:15:f6:23:17:b6:5d:df:19:4f:f3:
7a:04:28:b9:14:c9:a5:70:2c:3f:cc:3c:65:2c:08:88:f7:60:
a7:12:4f:0c:cd:f7:8f:75:3b:78:82:e7:69:55:ff:f9:5b:e8:
ed:9e:8b:03:ed:33:cd:8e:cc:77:e6:66:4b:08:19:62:5f:14:
34:fa:a4:43:4f:17:48:3f:2d:2e:b7:1b:5f:47:b6:a4:ca:48:
14:5d:ae:f1:7e:0f:1a:3e:fd:d9:2e:cf:c7:3f:1b:c2:1c:12:
a5:7d:b3:aa:ca:42:1a:b0:60:c4:73:e0:82:e9:47:fa:83:ee:
91:b0:1c:33:91:a1:08:eb:e2:ed:14:00:bc:bd:32:7e:9d:f5:
fa:63:9a:9b:60:98:81:11:ab:44:83:01:74:65:9b:a6:89:e9:
86:e7:97:66:4b:e8:db:c2:fb:80:24:93:f8:0c:cb:d8:91:02:
54:3a:46:db:85:3c:87:4d:06:44:64:79:9e:b3:2a:6a:5c:62:
21:9d:37:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd7p3SFn20ltRJ5n/Kc5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk
NjQ4NGIwHhcNMjUwNzI3MDYwMDE3WhcNMjUwNzI4MDYwMDE3WjAzMTEwLwYDVQQD
Eyg5ZmE3MTZlMWNmMTYyZjE2YjZlYzk2YTlmM2QyM2I5MmFhYjNkY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxcqEIeeH51iqPPP4VGbei6jGjPB
WR89ad6qA2iDThV2MFh3OrpAa9HRqIIrhqDa6/SMCGTHaDK79o6KYVUTV/3lN/Hh
WIvEsL2tdSNFUl1lFxWpznwg3xOf3DL9tf3Oo8KDd+MmShybPaovQBEAguSEujae
o56d/vGa8XlBIhtKr+jsm21shOnm9xyPRodQKZo0ZGGZSR8EMBovV4sAwkeYhGS3
RkleQc937/vH8R8E1mRjujqjJUkGaSCX/vjAgNa4Pdh0RJ6HJrvdWiRvjmGPSrHA
d0och36bV9vfqU9Uw9SSjOYHhLgBK+vPkjYt9Kn/Xgiq+5N/gxbk7H2RnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+nFuHPFi8WtuyWqfPSO5Kqs9zoMB8GA1UdIwQY
MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt
MTEwOThhYTJlYmMzLzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz
LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE70RaUBQ
hCiCK8IgRa5g7NiY47oJgzPU5jE0rgzEl69GsePtvkXA995dw4NfVdrq7jkHC+I+
D3YsQUdxXOcV9iMXtl3fGU/zegQouRTJpXAsP8w8ZSwIiPdgpxJPDM33j3U7eILn
aVX/+Vvo7Z6LA+0zzY7Md+ZmSwgZYl8UNPqkQ08XSD8tLrcbX0e2pMpIFF2u8X4P
Gj792S7Pxz8bwhwSpX2zqspCGrBgxHPggulH+oPukbAcM5GhCOvi7RQAvL0yfp31
+mOam2CYgRGrRIMBdGWbponphueXZkvo28L7gCST+AzL2JECVDpG24U8h00GRGR5
nrMqalxiIZ03Ig==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:11 2025 by rpki-client