Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: xyPwh69ofwwMKt/JWyD/1MRGPhKdJ5L6FnjjRBkoD90=
Subject key identifier: CC:A9:B6:DE:2D:58:5A:79:79:C4:4B:F2:82:B9:C0:3D:9A:AF:AF:3B
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 01974DE97B0FCD8E16C0F65F3D7C16E562BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 0F92
Signing time: Sun 08 Jun 2025 05:00:36 +0000
Manifest this update: Sun 08 Jun 2025 05:00:36 +0000
Manifest next update: Mon 09 Jun 2025 05:00:36 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: exzRtv/eQGIOGXHQbHSIg5DEz7h9eOYHv7qqM1Y/boU=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:7b:0f:cd:8e:16:c0:f6:5f:3d:7c:16:e5:62:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Jun 8 05:00:36 2025 GMT
Not After : Jun 9 05:00:36 2025 GMT
Subject: CN=cca9b6de2d585a7979c44bf282b9c03d9aafaf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:4c:54:ee:cb:21:af:9e:5f:ff:1b:8e:5a:
6a:9a:2d:8b:b7:17:75:6a:25:d0:ca:e5:3b:ab:96:
52:3f:c2:d4:6c:33:8c:4b:ee:d7:cf:c9:80:5e:35:
95:c2:fb:8a:ba:97:41:54:7a:50:1f:b8:66:07:83:
66:f4:dd:44:5b:88:63:be:14:36:d5:3e:4f:f6:d7:
24:db:96:e1:a6:b0:16:ad:86:2b:42:63:fe:14:31:
2d:59:8d:38:e1:71:59:25:1e:64:a0:78:24:fb:cd:
27:90:c5:28:fe:e1:f2:76:49:d2:c6:d9:57:92:a5:
f2:b3:1c:b6:d5:6c:d2:6a:60:ab:80:d1:3e:8e:aa:
7e:af:0c:f7:df:57:aa:d5:c4:33:85:86:92:d1:97:
1b:b4:6c:27:f8:1c:fa:6e:e8:c5:08:6d:e4:32:47:
e2:fb:cd:9b:7f:e7:69:cf:34:33:c5:42:06:95:d0:
b2:bc:ff:72:20:d6:81:53:27:82:9d:c3:8d:bc:b7:
fb:a2:45:97:73:da:43:54:4d:94:cf:a7:4f:6d:2c:
3e:3a:ad:63:f0:b7:5a:23:7c:e2:11:ae:d3:b9:a2:
ef:6a:f0:c0:1b:1e:c7:51:85:60:fb:3b:b6:3e:91:
5d:56:be:cd:a7:7e:50:a9:f4:3c:cd:75:ae:b7:2d:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A9:B6:DE:2D:58:5A:79:79:C4:4B:F2:82:B9:C0:3D:9A:AF:AF:3B
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c2:34:bb:9c:cd:ad:5f:d5:12:6f:37:ca:96:a7:f0:eb:41:
4c:49:f8:cc:a1:ea:c6:89:86:7e:ae:0d:29:9e:36:0e:10:da:
94:2b:35:d1:cd:2d:8c:ff:55:c1:8c:56:3c:4e:f1:32:5b:66:
99:db:32:9e:8f:88:82:f6:78:3a:be:3d:12:cd:55:25:57:67:
70:80:09:ef:1a:66:82:9e:de:79:e5:eb:f2:f0:78:b2:cd:1d:
b8:d8:e5:8f:12:4f:f0:a1:ca:98:b9:62:e3:40:be:c5:0f:ac:
ca:c3:ce:75:d4:77:42:eb:1c:2e:06:49:91:8e:20:fb:5a:a0:
e8:b8:a2:f4:6e:96:bf:fa:62:07:be:c4:c3:55:71:3a:57:df:
90:23:be:4f:69:ab:8d:ad:94:1b:53:e9:d3:0b:b0:b3:f0:92:
ab:cd:77:bd:73:6f:e7:83:fe:c6:cd:9f:44:37:f2:94:50:10:
6f:fd:4e:88:27:eb:c8:96:44:bb:35:db:61:eb:5a:79:e3:2c:
55:ef:cc:0c:48:ba:e3:31:0f:22:b8:e5:7d:8c:ad:3a:3f:04:
ab:e0:27:24:74:2d:d2:92:52:ff:b5:54:26:bc:be:ef:9a:c5:
2a:d9:3d:af:2f:3e:f3:22:99:6f:5f:a0:97:b4:93:b8:4d:96:
61:30:27:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6XsPzY4WwPZfPXwW5WK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl
NTUwNmQwHhcNMjUwNjA4MDUwMDM2WhcNMjUwNjA5MDUwMDM2WjAzMTEwLwYDVQQD
EyhjY2E5YjZkZTJkNTg1YTc5NzljNDRiZjI4MmI5YzAzZDlhYWZhZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDFMVO7LIa+eX/8bjlpqmi2Ltxd1
aiXQyuU7q5ZSP8LUbDOMS+7Xz8mAXjWVwvuKupdBVHpQH7hmB4Nm9N1EW4hjvhQ2
1T5P9tck25bhprAWrYYrQmP+FDEtWY044XFZJR5koHgk+80nkMUo/uHydknSxtlX
kqXysxy21WzSamCrgNE+jqp+rwz331eq1cQzhYaS0ZcbtGwn+Bz6bujFCG3kMkfi
+82bf+dpzzQzxUIGldCyvP9yINaBUyeCncONvLf7okWXc9pDVE2Uz6dPbSw+Oq1j
8LdaI3ziEa7TuaLvavDAGx7HUYVg+zu2PpFdVr7Np35QqfQ8zXWuty2QIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyptt4tWFp5ecRL8oK5wD2ar687MB8GA1UdIwQY
MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt
MGE1MzIxNTZiMmE2LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2
LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMI0u5zN
rV/VEm83ypan8OtBTEn4zKHqxomGfq4NKZ42DhDalCs10c0tjP9VwYxWPE7xMltm
mdsyno+IgvZ4Or49Es1VJVdncIAJ7xpmgp7eeeXr8vB4ss0duNjljxJP8KHKmLli
40C+xQ+sysPOddR3QuscLgZJkY4g+1qg6Lii9G6Wv/piB77Ew1VxOlffkCO+T2mr
ja2UG1Pp0wuws/CSq813vXNv54P+xs2fRDfylFAQb/1OiCfryJZEuzXbYetaeeMs
Ve/MDEi64zEPIrjlfYytOj8Eq+AnJHQt0pJS/7VUJry+75rFKtk9ry8+8yKZb1+g
l7STuE2WYTAnsg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:35:17 2025 by rpki-client