
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File: 8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier: 7eoLp25+L3vJrn3gJb/QdvLqkN/EA+M/aIHeUI3+AX4=
Subject key identifier: 63:C0:40:5F:93:05:56:36:37:7D:5F:FA:3C:BD:F5:F7:D0:B7:EF:71
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 019935A527257EEE73F3C1D8E060E0B3D682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number: 143B
Signing time: Wed 10 Sep 2025 22:00:39 +0000
Manifest this update: Wed 10 Sep 2025 22:00:39 +0000
Manifest next update: Thu 11 Sep 2025 22:00:39 +0000
Files and hashes: 1: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (hash: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=)
2: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: sJ9wdL6vy9zwN+RVmtTDQc5o3rU+0j9P1x4s0jRFW80=)
3: S4_bZaUrYeif2UyHHeNglamlIdY.roa (hash: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=)
4: k8gLy7StQaIvKZDqraAi2w_fvtc.roa (hash: SkLPv2Z8PHPm64h4i6RldP3OE6ycpgOCRTvbQRULZdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:27:25:7e:ee:73:f3:c1:d8:e0:60:e0:b3:d6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Sep 10 22:00:39 2025 GMT
Not After : Sep 11 22:00:39 2025 GMT
Subject: CN=63c0405f93055636377d5ffa3cbdf5f7d0b7ef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:4b:cf:00:f5:6a:2a:63:3e:cf:b9:74:96:
4b:f9:f3:72:00:84:a7:a9:cd:73:ff:89:e3:63:a1:
a0:14:6d:45:d4:85:da:eb:7a:69:01:61:70:c2:86:
3d:1b:02:34:24:e8:7e:fb:34:3a:9d:0f:b0:1f:da:
6a:14:f6:b6:88:3e:50:2a:7e:47:93:c9:61:18:c3:
b6:1d:63:37:9e:40:71:00:31:68:1d:2b:47:73:34:
f6:c5:1c:77:c0:e8:cb:c1:19:10:ed:28:c4:53:95:
28:b2:9b:ff:33:c7:d1:fc:3d:59:92:e9:eb:3e:5b:
ca:d8:7c:c1:f3:72:d4:54:9d:93:d5:91:94:32:ca:
d0:1b:b7:68:0e:2e:05:0c:6a:ce:53:8f:26:23:1b:
1d:79:b2:3e:8e:8b:67:49:a0:56:70:ec:9c:ce:f7:
05:38:ca:d8:b9:9e:b6:60:57:08:58:c1:fc:2c:e0:
3f:cf:97:d5:9e:37:2a:b2:2c:f6:77:bc:8b:16:55:
22:6a:1d:c7:6a:df:de:9b:67:b5:ad:5d:3a:7f:48:
d2:07:03:bf:46:38:c4:bd:d9:64:ce:2a:c0:79:eb:
4f:30:c0:1e:89:33:2b:95:fd:8d:23:19:55:52:95:
53:c4:6b:bb:5b:77:2a:fd:a7:09:5f:a4:97:8a:41:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:40:5F:93:05:56:36:37:7D:5F:FA:3C:BD:F5:F7:D0:B7:EF:71
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:47:79:4f:48:28:8a:4d:b8:6c:01:2f:5f:31:77:91:a6:a8:
ed:81:db:da:12:c5:0f:c0:b0:32:6c:c7:87:5a:94:e6:fb:2c:
c0:28:05:5d:3c:16:fa:35:d7:67:81:df:cc:04:26:01:11:29:
8f:6f:06:8a:bf:6d:85:61:03:71:8d:fe:b9:0e:e7:e3:bb:ef:
70:cc:63:c0:95:ab:88:b8:cc:df:ea:aa:64:71:89:51:79:a0:
8b:ce:60:2e:6c:ba:1e:75:67:e6:54:76:86:38:a6:fe:cf:66:
ec:3b:64:d9:c8:30:6b:de:21:e5:c9:34:de:25:1a:83:3a:ef:
65:03:06:e8:f9:d6:66:b5:5e:2c:19:47:cf:1f:35:60:a3:e5:
1f:d6:0a:df:49:35:cf:14:88:22:69:be:a0:59:11:c2:e8:3c:
be:5d:cb:8f:91:e0:c1:2c:d9:34:37:4c:4a:ac:8d:74:32:00:
ad:07:21:a4:ad:3e:55:d4:b2:5e:6e:a8:78:c5:30:be:9f:34:
eb:af:97:bc:a1:77:40:bc:c7:3f:87:7c:25:74:28:79:fa:a1:
a5:1e:ce:c9:8f:33:c1:fb:8b:9b:88:ec:b3:ec:9a:06:1a:61:
40:99:e1:06:98:d3:16:7f:21:45:a3:6f:59:46:ae:81:c7:8e:
eb:a6:e4:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1pSclfu5z88HY4GDgs9aCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZTM2MjIyY2NiYzZjNzIyMTM2MDU0MGJhYjNhOWRiYTlm
MjM3YTAwHhcNMjUwOTEwMjIwMDM5WhcNMjUwOTExMjIwMDM5WjAzMTEwLwYDVQQD
Eyg2M2MwNDA1ZjkzMDU1NjM2Mzc3ZDVmZmEzY2JkZjVmN2QwYjdlZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzhLzwD1aipjPs+5dJZL+fNyAISn
qc1z/4njY6GgFG1F1IXa63ppAWFwwoY9GwI0JOh++zQ6nQ+wH9pqFPa2iD5QKn5H
k8lhGMO2HWM3nkBxADFoHStHczT2xRx3wOjLwRkQ7SjEU5Uospv/M8fR/D1Zkunr
PlvK2HzB83LUVJ2T1ZGUMsrQG7doDi4FDGrOU48mIxsdebI+jotnSaBWcOyczvcF
OMrYuZ62YFcIWMH8LOA/z5fVnjcqsiz2d7yLFlUiah3Hat/em2e1rV06f0jSBwO/
RjjEvdlkzirAeetPMMAeiTMrlf2NIxlVUpVTxGu7W3cq/acJX6SXikHV3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPAQF+TBVY2N31f+jy99ffQt+9xMB8GA1UdIwQY
MBaAFPPjYiLMvGxyITYFQLqzqdup8jegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYt
ODcyNGVkNWU5MDNhLzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYtODcyNGVkNWU5MDNh
LzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEd5T0go
ik24bAEvXzF3kaao7YHb2hLFD8CwMmzHh1qU5vsswCgFXTwW+jXXZ4HfzAQmAREp
j28Gir9thWEDcY3+uQ7n47vvcMxjwJWriLjM3+qqZHGJUXmgi85gLmy6HnVn5lR2
hjim/s9m7Dtk2cgwa94h5ck03iUagzrvZQMG6PnWZrVeLBlHzx81YKPlH9YK30k1
zxSIImm+oFkRwug8vl3Lj5HgwSzZNDdMSqyNdDIArQchpK0+VdSyXm6oeMUwvp80
66+XvKF3QLzHP4d8JXQoefqhpR7OyY8zwfuLm4jss+yaBhphQJnhBpjTFn8hRaNv
WUaugceO66bkTg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:49:55 2025 by rpki-client