Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: mu2fHAfIkYGjRqHC/Kplur2/q1Im0Tzdb+FNXSf+w1I=
Subject key identifier: 4A:06:0E:F8:52:B7:44:91:F8:72:39:BE:7E:69:F7:57:14:AE:C1:F0
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 019A725C7D896A8C8E5D60BA6C7921DDB0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 75
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: ELHaXz7/epPjT76A9coVNZgrOMSi4o0gyEudT34BZ2g=)
2: zVCCoN-U0ius3abDeot_YngoJfc.roa (hash: fP+nwjzWvUa3O/fKfTzCwxd5RWiCPK08gubU5L+iEvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7d:89:6a:8c:8e:5d:60:ba:6c:79:21:dd:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=4a060ef852b74491f87239be7e69f75714aec1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:2f:26:09:39:53:aa:c7:c9:fb:12:d4:93:
3f:1b:47:12:98:99:a8:7f:f2:d2:8b:06:ff:0f:de:
86:3e:33:af:be:c5:b9:4e:5e:a7:f7:63:f1:31:d8:
0a:78:f1:7d:41:c4:06:03:88:97:b9:f3:ed:ab:e7:
d8:0e:90:58:12:5f:21:01:11:3d:12:a6:f5:96:01:
65:00:5c:2d:a3:16:84:17:ff:7e:4f:88:69:82:54:
ef:83:15:3f:42:23:ff:9f:51:db:ae:6e:44:fb:71:
bf:b8:ea:96:23:cc:c6:69:46:55:f7:cf:2d:6d:df:
3b:57:28:6f:7a:0b:87:b8:50:ae:42:9b:65:10:45:
f0:0a:99:35:ff:e1:f7:5e:6f:3d:b8:1d:66:8e:16:
ee:1f:55:b8:39:c7:98:6f:aa:59:91:28:91:3a:3e:
a0:93:1b:4a:0a:95:be:a5:70:7b:ac:50:04:72:03:
44:91:dd:0d:cc:6f:8d:ea:b4:fd:3e:a9:fa:61:96:
35:3a:b2:ca:da:2b:e9:69:73:ed:ac:03:7c:bb:4d:
34:81:11:40:a9:19:e7:ae:da:79:e4:19:50:93:68:
30:17:60:e3:27:61:8f:b3:46:38:6a:c0:64:35:c5:
29:02:b4:b2:aa:98:41:e0:1b:8a:d4:99:72:f0:14:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:06:0E:F8:52:B7:44:91:F8:72:39:BE:7E:69:F7:57:14:AE:C1:F0
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ae:90:4b:a1:93:07:c4:fe:b0:64:2b:7f:6f:ec:33:8e:65:
ef:a1:08:99:a4:68:ea:67:a6:15:92:11:a7:43:b9:f8:20:77:
40:f0:56:42:aa:31:eb:ee:02:57:ab:ce:0b:ed:ea:7f:be:c4:
be:d9:4f:a9:ec:fa:0c:44:3b:ae:68:94:83:61:57:76:84:80:
a3:b0:f7:b7:ec:0e:a3:13:de:d8:06:ea:fb:85:05:e2:eb:bb:
3c:33:42:aa:bb:a6:30:f8:f9:ef:f4:00:78:6b:9f:da:99:1f:
78:c4:fb:41:f5:ad:d7:04:9b:c3:af:1a:c1:74:8a:62:c1:d8:
e7:eb:e7:4e:b9:50:14:17:14:b7:47:d4:89:f2:28:47:69:ff:
6c:70:e9:33:07:05:18:0f:18:f7:13:bf:5b:90:9d:b5:98:04:
16:d3:4d:78:af:4f:2f:ed:ec:73:b2:a7:4c:a5:77:83:30:9a:
34:ef:f9:61:d1:a4:d7:20:5d:06:37:83:1a:dc:40:3c:f5:f8:
8a:93:2f:fe:49:35:49:d1:cb:37:71:84:dd:47:e6:18:55:49:
39:9d:f6:ea:ca:54:e1:1b:91:6a:80:f6:ef:30:46:29:ff:1f:
80:38:a8:f8:fd:e7:df:94:af:48:03:48:73:b5:9a:46:a2:98:
1a:28:91:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXH2JaoyOXWC6bHkh3bCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2
ZWM2MzMwHhcNMjUxMTExMTAwMDU1WhcNMjUxMTEyMTAwMDU1WjAzMTEwLwYDVQQD
Eyg0YTA2MGVmODUyYjc0NDkxZjg3MjM5YmU3ZTY5Zjc1NzE0YWVjMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQcvJgk5U6rHyfsS1JM/G0cSmJmo
f/LSiwb/D96GPjOvvsW5Tl6n92PxMdgKePF9QcQGA4iXufPtq+fYDpBYEl8hARE9
Eqb1lgFlAFwtoxaEF/9+T4hpglTvgxU/QiP/n1Hbrm5E+3G/uOqWI8zGaUZV988t
bd87VyhveguHuFCuQptlEEXwCpk1/+H3Xm89uB1mjhbuH1W4OceYb6pZkSiROj6g
kxtKCpW+pXB7rFAEcgNEkd0NzG+N6rT9Pqn6YZY1OrLK2ivpaXPtrAN8u000gRFA
qRnnrtp55BlQk2gwF2DjJ2GPs0Y4asBkNcUpArSyqphB4BuK1Jly8BQxTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoGDvhSt0SR+HI5vn5p91cUrsHwMB8GA1UdIwQY
MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt
OWM4ZWFiNzZkYTk4LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4
LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy66QS6GT
B8T+sGQrf2/sM45l76EImaRo6memFZIRp0O5+CB3QPBWQqox6+4CV6vOC+3qf77E
vtlPqez6DEQ7rmiUg2FXdoSAo7D3t+wOoxPe2Abq+4UF4uu7PDNCqrumMPj57/QA
eGuf2pkfeMT7QfWt1wSbw68awXSKYsHY5+vnTrlQFBcUt0fUifIoR2n/bHDpMwcF
GA8Y9xO/W5CdtZgEFtNNeK9PL+3sc7KnTKV3gzCaNO/5YdGk1yBdBjeDGtxAPPX4
ipMv/kk1SdHLN3GE3UfmGFVJOZ326spU4RuRaoD27zBGKf8fgDio+P3n35SvSANI
c7WaRqKYGiiRrw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:16 2025 by rpki-client