Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier: 8Z2Dk2CAow6tkNE6yxoCAD15yAzTD6AUpxJvYr7N4vk=
Subject key identifier: 89:05:39:E8:E6:45:C4:FB:2A:0B:D9:B1:A9:F2:2F:A6:8F:4A:DF:C0
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial: 019A71B8FABF2528C765D72E7ADE0D068E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number: 038F
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=)
2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: G2FfswpowDPF8N/pZs+YZZIexDeUiUbbNKug9BHljcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fa:bf:25:28:c7:65:d7:2e:7a:de:0d:06:8e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=890539e8e645c4fb2a0bd9b1a9f22fa68f4adfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:1a:c0:cd:1b:1c:ee:d4:dc:7d:20:bf:92:
c5:4a:c8:0c:88:3d:a3:35:55:ef:34:ae:e3:db:76:
a2:b4:5e:4b:22:63:5a:cc:12:9e:21:9c:f5:fa:94:
8f:cc:a2:dc:3b:a6:0b:b9:e3:55:8b:ab:3d:ae:2b:
3c:12:69:2d:f6:1f:a2:fd:91:cf:80:41:64:3f:d3:
14:21:f2:ca:2d:06:8b:eb:97:4c:0a:e6:ac:ac:3b:
1e:92:2b:8d:99:4a:74:bf:a6:20:c0:a4:93:b7:20:
d1:3a:7a:94:94:33:de:10:6f:dd:92:65:8e:f2:f7:
80:3c:69:94:97:36:1b:81:c6:2c:1f:6c:44:34:4f:
43:a6:95:89:a5:c1:30:10:f4:28:5e:5c:39:14:52:
b5:4a:c8:8b:b5:05:e4:a1:3c:5b:d7:55:66:0e:c4:
a2:52:28:b0:b4:fe:8c:49:f0:8d:a1:a7:40:80:9e:
4f:52:ce:14:5b:f7:2f:f5:ca:2a:95:3c:29:fe:69:
32:04:96:3b:3d:4d:ae:52:7c:99:bd:0d:e6:d4:40:
b3:4d:c0:9e:1c:dc:31:b1:1e:7b:3c:11:13:4e:6a:
4b:99:62:41:b0:eb:ca:46:56:0a:ac:9b:13:c6:f9:
18:ef:b4:40:57:b9:57:c7:d5:7a:8c:da:41:80:2e:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:39:E8:E6:45:C4:FB:2A:0B:D9:B1:A9:F2:2F:A6:8F:4A:DF:C0
X509v3 Authority Key Identifier:
keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:1b:81:01:fd:f9:2a:eb:ff:bb:55:5e:60:17:a2:51:73:
56:fc:f8:53:cf:1f:8f:5a:6e:9b:03:88:f6:5f:0d:ea:76:83:
8c:e0:bf:9b:92:aa:7e:4f:00:3a:6b:b2:32:31:19:68:33:3f:
fd:72:f2:e3:f9:5a:29:3a:9b:41:8f:d8:df:26:d8:c6:2f:59:
1f:b3:6a:d1:03:bb:a5:e4:79:0a:f7:15:3e:bb:5a:92:ad:24:
06:66:00:03:31:a9:de:28:0e:57:4b:af:79:d6:38:4a:7d:5f:
6c:f7:ed:f4:6f:00:83:4d:68:53:a5:66:cd:c2:86:ad:8d:5e:
36:85:96:e5:54:53:5b:3f:2e:97:9e:80:d5:08:15:3a:55:51:
f4:90:d9:a9:4d:7e:58:f0:83:4e:5a:5f:ba:aa:b2:e2:a4:85:
44:1f:b0:0b:e2:22:77:58:72:0d:38:22:18:f4:c0:0e:27:27:
29:f2:55:1c:0f:4e:22:a8:99:b1:0c:10:6a:e1:d2:b7:1b:5f:
31:2b:24:df:df:44:7e:7a:39:33:f5:12:6a:b4:27:ca:67:c7:
cc:31:01:6f:c7:38:3f:f6:5d:ab:50:28:e1:69:6c:4f:d7:3b:
cf:e3:bc:39:17:cc:76:0c:8a:f7:ae:42:5c:9b:ff:de:26:90:
f3:67:c4:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPq/JSjHZdcuet4NBo6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWZmYjU0Y2FjN2Y1YjU3Njg1NjllNDE5N2Q0MWQ3NDQ2
YmYxZmMwHhcNMjUxMTExMDcwMjE5WhcNMjUxMTEyMDcwMjE5WjAzMTEwLwYDVQQD
Eyg4OTA1MzllOGU2NDVjNGZiMmEwYmQ5YjFhOWYyMmZhNjhmNGFkZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyIawM0bHO7U3H0gv5LFSsgMiD2j
NVXvNK7j23aitF5LImNazBKeIZz1+pSPzKLcO6YLueNVi6s9ris8Emkt9h+i/ZHP
gEFkP9MUIfLKLQaL65dMCuasrDsekiuNmUp0v6YgwKSTtyDROnqUlDPeEG/dkmWO
8veAPGmUlzYbgcYsH2xENE9DppWJpcEwEPQoXlw5FFK1SsiLtQXkoTxb11VmDsSi
UiiwtP6MSfCNoadAgJ5PUs4UW/cv9coqlTwp/mkyBJY7PU2uUnyZvQ3m1ECzTcCe
HNwxsR57PBETTmpLmWJBsOvKRlYKrJsTxvkY77RAV7lXx9V6jNpBgC6FvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkFOejmRcT7KgvZsanyL6aPSt/AMB8GA1UdIwQY
MBaAFPMf+1TKx/W1doVp5Bl9QddEa/H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEt
YzAzODRmZTFiMDA3LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEtYzAzODRmZTFiMDA3
LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJY8bgQH9
+Srr/7tVXmAXolFzVvz4U88fj1pumwOI9l8N6naDjOC/m5Kqfk8AOmuyMjEZaDM/
/XLy4/laKTqbQY/Y3ybYxi9ZH7Nq0QO7peR5CvcVPrtakq0kBmYAAzGp3igOV0uv
edY4Sn1fbPft9G8Ag01oU6VmzcKGrY1eNoWW5VRTWz8ul56A1QgVOlVR9JDZqU1+
WPCDTlpfuqqy4qSFRB+wC+Iid1hyDTgiGPTADicnKfJVHA9OIqiZsQwQauHStxtf
MSsk399Efno5M/USarQnymfHzDEBb8c4P/Zdq1Ao4WlsT9c7z+O8ORfMdgyK965C
XJv/3iaQ82fENQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:45 2025 by rpki-client