Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: ZknaQbvnG9m25ob+PjhqpiNE3xRRmqoq0YdXD1NzpY4=
Subject key identifier: 69:EC:5E:9D:B8:F4:67:4B:1D:AC:33:CD:1E:EA:99:7B:6E:B6:57:D6
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 019922FAA3F428FD8FC9F62B308C2A502566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 05D4
Signing time: Sun 07 Sep 2025 07:01:15 +0000
Manifest this update: Sun 07 Sep 2025 07:01:15 +0000
Manifest next update: Mon 08 Sep 2025 07:01:15 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: XUFtcwJjCiHs2tjdwZK/pqh08iOdGuXylw5EtvMOfzs=)
2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a3:f4:28:fd:8f:c9:f6:2b:30:8c:2a:50:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Sep 7 07:01:15 2025 GMT
Not After : Sep 8 07:01:15 2025 GMT
Subject: CN=69ec5e9db8f4674b1dac33cd1eea997b6eb657d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:3a:fd:07:ba:4a:20:89:42:c9:f0:65:cf:
cf:10:f6:f3:93:6d:c0:9c:f8:9c:43:4e:e5:5b:e8:
ea:41:02:a3:5d:5c:79:a7:77:33:b8:9b:91:82:50:
0f:ac:71:a8:8f:cd:a9:af:d4:c2:1b:cb:a9:07:09:
46:fa:d8:df:91:99:3d:56:d5:b2:16:0c:00:be:40:
2b:e2:ae:ad:c2:a6:b5:ee:8c:94:d4:ff:9e:61:cf:
45:51:89:8e:89:e2:14:2f:d2:ed:e7:f2:f6:17:80:
c3:b6:b3:cb:0c:ad:b2:00:92:34:3e:5c:8e:fe:9f:
9d:43:aa:f7:5a:e5:84:68:ae:6e:20:35:96:52:c4:
59:c6:8c:60:6a:7a:c4:dd:5b:0e:f9:f8:70:93:d4:
f1:77:20:43:98:90:fe:21:f2:d0:d9:d7:df:0b:5b:
16:73:12:2e:a3:9c:87:6a:9a:4d:14:30:ef:a4:0e:
2a:32:98:e4:e2:1d:db:37:fa:77:09:5f:5e:4c:2a:
52:d1:c1:23:4e:5b:66:42:74:49:3b:d9:dd:a3:aa:
c7:c1:06:6f:0d:47:07:b4:93:77:28:51:f3:d7:33:
02:ff:a5:e2:5b:84:3c:c5:cd:56:c8:a8:b4:b4:f8:
e3:c5:2c:d4:b4:1a:b4:c6:d2:29:5e:ca:9a:eb:0b:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:5E:9D:B8:F4:67:4B:1D:AC:33:CD:1E:EA:99:7B:6E:B6:57:D6
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:61:28:b1:db:03:30:e6:77:4e:66:52:41:ad:db:8a:da:c5:
07:0c:86:2a:bf:0c:d2:87:28:2b:35:55:16:1b:df:69:fa:74:
70:f6:a3:b5:1f:70:ad:72:22:7f:9a:26:0b:a9:68:2f:06:5f:
f1:44:dc:c2:8a:36:e0:29:9d:7a:5f:92:97:4d:9b:c3:f6:60:
87:d5:53:b9:b0:04:8a:f2:04:fb:41:1c:a7:b9:8d:1a:42:62:
16:bd:b5:42:8d:5c:62:47:92:51:56:5b:cb:e8:04:8d:cb:f0:
92:34:ee:87:f4:d5:e7:40:a1:83:ee:eb:95:0e:5a:87:a4:27:
41:7a:ca:10:06:2c:eb:18:29:44:00:90:b6:44:e7:e9:09:41:
34:a8:37:27:ad:dd:dd:61:c7:b6:57:88:70:8d:a1:94:2e:20:
8a:c2:0c:91:12:a9:2e:42:d0:b2:fc:e6:02:57:5c:58:4b:96:
72:64:5a:34:38:8a:b1:bc:6d:6d:2d:fc:65:b8:a2:df:5d:40:
d6:60:3a:97:4c:02:dd:db:1b:cb:61:d7:00:b2:d9:c4:50:2b:
fb:2b:1a:29:42:87:f8:10:05:da:c6:b5:c0:0c:17:3d:5f:c0:
19:a3:37:01:2c:25:c1:56:88:a1:96:74:0c:c1:ad:65:9b:1a:
2b:a3:f9:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+qP0KP2PyfYrMIwqUCVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh
OTk0NGIwHhcNMjUwOTA3MDcwMTE1WhcNMjUwOTA4MDcwMTE1WjAzMTEwLwYDVQQD
Eyg2OWVjNWU5ZGI4ZjQ2NzRiMWRhYzMzY2QxZWVhOTk3YjZlYjY1N2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwg6/Qe6SiCJQsnwZc/PEPbzk23A
nPicQ07lW+jqQQKjXVx5p3czuJuRglAPrHGoj82pr9TCG8upBwlG+tjfkZk9VtWy
FgwAvkAr4q6twqa17oyU1P+eYc9FUYmOieIUL9Lt5/L2F4DDtrPLDK2yAJI0PlyO
/p+dQ6r3WuWEaK5uIDWWUsRZxoxganrE3VsO+fhwk9TxdyBDmJD+IfLQ2dffC1sW
cxIuo5yHappNFDDvpA4qMpjk4h3bN/p3CV9eTCpS0cEjTltmQnRJO9ndo6rHwQZv
DUcHtJN3KFHz1zMC/6XiW4Q8xc1WyKi0tPjjxSzUtBq0xtIpXsqa6wveiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnsXp249GdLHawzzR7qmXtutlfWMB8GA1UdIwQY
MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt
ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw
LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWEosdsD
MOZ3TmZSQa3bitrFBwyGKr8M0ocoKzVVFhvfafp0cPajtR9wrXIif5omC6loLwZf
8UTcwoo24Cmdel+Sl02bw/Zgh9VTubAEivIE+0Ecp7mNGkJiFr21Qo1cYkeSUVZb
y+gEjcvwkjTuh/TV50Chg+7rlQ5ah6QnQXrKEAYs6xgpRACQtkTn6QlBNKg3J63d
3WHHtleIcI2hlC4gisIMkRKpLkLQsvzmAldcWEuWcmRaNDiKsbxtbS38Zbii311A
1mA6l0wC3dsby2HXALLZxFAr+ysaKUKH+BAF2sa1wAwXPV/AGaM3ASwlwVaIoZZ0
DMGtZZsaK6P5KQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:44 2025 by rpki-client