Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File: 8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier: gNKXFFYxPP2IwZdjifh3OFpdgZFpUZ6p5l4kvCnkN+M=
Subject key identifier: 8B:8A:26:A8:6F:3C:2F:8B:6D:3B:75:FF:4C:8E:AC:73:26:2A:86:D9
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 019A2140225DD127384F4422A8F16600391E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number: 14B5
Signing time: Sun 26 Oct 2025 16:00:42 +0000
Manifest this update: Sun 26 Oct 2025 16:00:42 +0000
Manifest next update: Mon 27 Oct 2025 16:00:42 +0000
Files and hashes: 1: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (hash: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=)
2: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: IwO68vEyxWYScnE17NOqwO/3UcXGNUZXg/1qcRoYuL4=)
3: S4_bZaUrYeif2UyHHeNglamlIdY.roa (hash: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=)
4: k8gLy7StQaIvKZDqraAi2w_fvtc.roa (hash: SkLPv2Z8PHPm64h4i6RldP3OE6ycpgOCRTvbQRULZdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:22:5d:d1:27:38:4f:44:22:a8:f1:66:00:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Oct 26 16:00:42 2025 GMT
Not After : Oct 27 16:00:42 2025 GMT
Subject: CN=8b8a26a86f3c2f8b6d3b75ff4c8eac73262a86d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:7e:15:6f:51:35:88:74:7d:de:45:d7:0a:
9c:38:af:ab:8e:60:dd:ed:56:f2:8c:d2:8a:c7:78:
0a:e2:96:05:ae:89:bd:c1:f1:74:31:66:2c:77:41:
bd:95:d6:1b:b7:6a:25:9a:d0:1a:6f:53:78:81:39:
cb:0d:96:b4:fb:d1:30:37:ce:f9:f5:5a:c8:f3:ef:
77:61:e5:df:67:4f:e2:b7:bf:4b:7a:ef:7e:ac:0a:
d2:38:5c:56:11:27:76:09:0d:2d:50:7c:ec:93:60:
12:e3:17:75:2b:b6:37:e3:40:34:26:04:23:21:66:
97:2c:ce:41:89:81:4e:2b:22:13:9c:d4:46:5a:c9:
4f:cc:58:cc:b0:26:ae:ba:d4:07:a6:71:74:6f:57:
c6:61:29:dc:74:34:0c:ce:49:84:3e:03:4f:3d:0a:
a5:8f:74:32:37:69:2e:a9:ab:19:5e:ef:1e:6d:75:
29:ee:f9:ab:5a:d7:a6:d7:ff:ab:21:60:e9:35:bb:
f2:7e:5a:d9:cf:2b:e2:0d:16:c4:9d:b7:ec:c8:1a:
10:c5:72:a5:4e:3e:52:e7:f9:10:63:95:54:84:93:
db:4d:20:b0:5c:d8:60:df:23:d8:c5:73:24:bf:10:
bf:9e:b1:71:ba:d5:02:d3:91:f3:12:32:cd:24:60:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8A:26:A8:6F:3C:2F:8B:6D:3B:75:FF:4C:8E:AC:73:26:2A:86:D9
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:85:b1:8a:34:73:9c:77:f9:34:99:0f:0c:d5:4e:40:13:10:
32:13:2c:0f:6c:de:46:4e:0d:00:ce:22:63:ea:f0:e9:a6:7e:
9b:28:30:87:33:49:d0:58:a7:43:b2:03:db:1e:b0:10:94:08:
d2:65:26:d4:d2:e9:77:d3:67:dc:3b:7e:e5:11:f4:7a:0b:de:
58:1a:5c:1a:8f:18:67:b7:d8:02:30:8a:10:ed:41:5b:a0:f4:
3b:aa:7c:ef:5b:56:d9:83:e4:39:3a:5b:04:87:0a:a8:89:a7:
13:6a:de:f2:61:56:65:99:77:58:34:af:c6:71:2b:1a:d4:f7:
3a:4d:ba:04:f3:c3:66:8b:7f:35:24:97:0c:dc:06:56:90:b1:
92:ec:42:c1:9b:35:a7:37:22:f1:79:e4:67:13:f0:86:6a:3b:
9f:b0:c1:d1:aa:c7:8e:4c:7c:a8:01:f6:91:20:35:e0:bf:36:
5a:00:47:5d:76:67:f8:d7:bd:d3:75:a2:1b:64:2a:a1:0b:37:
9c:b0:1f:37:4c:6c:c6:3c:fa:91:05:14:bd:37:88:f7:19:5a:
c7:bf:c7:96:ef:22:e5:4a:6f:ac:4c:1b:b5:7b:57:96:36:e1:
23:f6:07:ce:e2:e0:e5:4e:da:26:72:6d:ea:a6:98:30:c7:67:
af:08:01:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohQCJd0Sc4T0QiqPFmADkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZTM2MjIyY2NiYzZjNzIyMTM2MDU0MGJhYjNhOWRiYTlm
MjM3YTAwHhcNMjUxMDI2MTYwMDQyWhcNMjUxMDI3MTYwMDQyWjAzMTEwLwYDVQQD
Eyg4YjhhMjZhODZmM2MyZjhiNmQzYjc1ZmY0YzhlYWM3MzI2MmE4NmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9d+FW9RNYh0fd5F1wqcOK+rjmDd
7VbyjNKKx3gK4pYFrom9wfF0MWYsd0G9ldYbt2olmtAab1N4gTnLDZa0+9EwN875
9VrI8+93YeXfZ0/it79Leu9+rArSOFxWESd2CQ0tUHzsk2AS4xd1K7Y340A0JgQj
IWaXLM5BiYFOKyITnNRGWslPzFjMsCauutQHpnF0b1fGYSncdDQMzkmEPgNPPQql
j3QyN2kuqasZXu8ebXUp7vmrWtem1/+rIWDpNbvyflrZzyviDRbEnbfsyBoQxXKl
Tj5S5/kQY5VUhJPbTSCwXNhg3yPYxXMkvxC/nrFxutUC05HzEjLNJGDRwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuKJqhvPC+LbTt1/0yOrHMmKobZMB8GA1UdIwQY
MBaAFPPjYiLMvGxyITYFQLqzqdup8jegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYt
ODcyNGVkNWU5MDNhLzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYtODcyNGVkNWU5MDNh
LzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoWxijRz
nHf5NJkPDNVOQBMQMhMsD2zeRk4NAM4iY+rw6aZ+mygwhzNJ0FinQ7ID2x6wEJQI
0mUm1NLpd9Nn3Dt+5RH0egveWBpcGo8YZ7fYAjCKEO1BW6D0O6p871tW2YPkOTpb
BIcKqImnE2re8mFWZZl3WDSvxnErGtT3Ok26BPPDZot/NSSXDNwGVpCxkuxCwZs1
pzci8XnkZxPwhmo7n7DB0arHjkx8qAH2kSA14L82WgBHXXZn+Ne903WiG2QqoQs3
nLAfN0xsxjz6kQUUvTeI9xlax7/Hlu8i5UpvrEwbtXtXljbhI/YHzuLg5U7aJnJt
6qaYMMdnrwgBqQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:19 2025 by rpki-client