Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: zP7CP6Vxwfpusn7kmbksEXp5gKhHtDiM68uO8XSXDPg=
Subject key identifier: 34:3E:06:D4:BA:7E:56:2D:AB:DA:DE:EE:EB:AF:EA:C6:D9:7A:7A:4F
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 0199168827F1C8A6B93D38A0BBF9E1E59BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 08CF
Signing time: Thu 04 Sep 2025 21:00:45 +0000
Manifest this update: Thu 04 Sep 2025 21:00:45 +0000
Manifest next update: Fri 05 Sep 2025 21:00:45 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: KK/CcleaKusroUih5hjTOfdC/EduY+541okFb5ld6t8=)
2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:27:f1:c8:a6:b9:3d:38:a0:bb:f9:e1:e5:9b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Sep 4 21:00:45 2025 GMT
Not After : Sep 5 21:00:45 2025 GMT
Subject: CN=343e06d4ba7e562dabdadeeeebafeac6d97a7a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:7c:0a:88:0a:1c:e7:3c:6c:3b:7d:ee:d9:
03:2d:30:4d:d0:fc:c7:ff:e2:f8:3f:ab:19:f4:b2:
b3:ab:28:10:46:f0:9e:9e:44:f4:2c:7a:0c:0a:6b:
40:eb:9d:fe:4a:7d:7c:bd:64:9b:bf:16:f3:0e:e0:
d6:6c:7d:6c:6d:43:2d:8b:19:21:9e:31:4f:cc:a6:
85:38:91:2e:ca:c6:09:ac:c5:35:48:8b:a7:55:c7:
e9:14:3f:fe:cb:6e:97:9e:f0:32:21:a5:32:d0:00:
92:54:4a:46:1c:2c:16:5c:1d:26:05:ba:95:3f:c1:
1e:fb:a9:c0:15:ee:dd:f8:48:cd:1b:0c:a2:93:cd:
c3:b1:6b:dd:8c:b2:2f:33:0b:df:45:f2:c3:7f:cc:
6c:e5:3c:12:20:be:d4:e8:65:ea:a2:b3:a0:77:ca:
7e:60:a3:d1:71:18:76:f0:49:a5:f2:6e:b0:3e:e3:
b5:e5:65:f1:86:21:db:aa:ec:c2:d4:ae:37:47:7a:
9f:60:56:5e:74:06:91:1f:74:4c:c9:d7:50:26:d4:
4b:27:33:5a:84:61:27:bc:89:35:67:a4:fb:12:fd:
48:3b:bf:ba:70:64:a6:d1:11:9b:9b:2c:d3:10:b9:
22:9f:ce:1f:c3:73:39:84:d8:9e:a3:34:bf:9a:e8:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:06:D4:BA:7E:56:2D:AB:DA:DE:EE:EB:AF:EA:C6:D9:7A:7A:4F
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1e:fc:d7:ab:f4:2b:47:67:f4:6b:f6:77:f4:5c:41:01:0c:
32:84:b6:41:8e:28:e9:e8:eb:92:83:47:61:81:14:fe:bf:bb:
df:06:0c:a3:ea:e3:d5:66:e1:8b:e0:1e:62:d8:fe:bf:c9:0f:
c5:1c:21:82:9a:1f:42:f6:e9:e9:f8:f8:92:3a:90:ef:d6:c9:
49:8e:c5:fb:95:b7:0f:da:88:bb:f6:27:a7:c5:f5:a2:fc:81:
d3:41:06:72:b5:01:95:1d:0d:47:18:b5:23:88:6e:9f:87:18:
b7:e5:a2:5d:3f:c4:57:88:7a:8d:a0:e9:59:e5:92:7d:5a:bd:
a9:d7:15:9c:3b:0d:f6:88:af:a2:a6:b1:32:c5:39:3b:78:52:
d7:08:17:bf:6c:d2:8f:b5:ea:e4:f0:2d:ba:bb:59:e4:23:4b:
f7:43:dc:85:5e:e3:c9:2b:5f:cd:a5:60:94:c0:94:51:04:9b:
60:c4:1c:d9:88:4b:cb:26:b7:d5:d3:dd:26:d9:5c:07:ba:36:
5e:9b:48:36:56:0f:63:fd:ad:ad:82:2d:c3:01:1a:17:ea:b5:
79:a5:80:e0:db:2c:70:f5:37:78:04:99:6d:91:9a:21:9b:20:
a9:24:51:ab:68:f5:53:37:5d:29:ba:b1:55:57:11:5e:49:9b:
3e:78:69:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWiCfxyKa5PTigu/nh5ZvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl
OGE3ZTIwHhcNMjUwOTA0MjEwMDQ1WhcNMjUwOTA1MjEwMDQ1WjAzMTEwLwYDVQQD
EygzNDNlMDZkNGJhN2U1NjJkYWJkYWRlZWVlYmFmZWFjNmQ5N2E3YTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra58CogKHOc8bDt97tkDLTBN0PzH
/+L4P6sZ9LKzqygQRvCenkT0LHoMCmtA653+Sn18vWSbvxbzDuDWbH1sbUMtixkh
njFPzKaFOJEuysYJrMU1SIunVcfpFD/+y26XnvAyIaUy0ACSVEpGHCwWXB0mBbqV
P8Ee+6nAFe7d+EjNGwyik83DsWvdjLIvMwvfRfLDf8xs5TwSIL7U6GXqorOgd8p+
YKPRcRh28Eml8m6wPuO15WXxhiHbquzC1K43R3qfYFZedAaRH3RMyddQJtRLJzNa
hGEnvIk1Z6T7Ev1IO7+6cGSm0RGbmyzTELkin84fw3M5hNieozS/mugchwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ+BtS6flYtq9re7uuv6sbZenpPMB8GA1UdIwQY
MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt
Mzg3NzA2YzJhODQ5LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5
LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHR7816v0
K0dn9Gv2d/RcQQEMMoS2QY4o6ejrkoNHYYEU/r+73wYMo+rj1Wbhi+AeYtj+v8kP
xRwhgpofQvbp6fj4kjqQ79bJSY7F+5W3D9qIu/Ynp8X1ovyB00EGcrUBlR0NRxi1
I4hun4cYt+WiXT/EV4h6jaDpWeWSfVq9qdcVnDsN9oivoqaxMsU5O3hS1wgXv2zS
j7Xq5PAturtZ5CNL90PchV7jyStfzaVglMCUUQSbYMQc2YhLyya31dPdJtlcB7o2
XptINlYPY/2trYItwwEaF+q1eaWA4NsscPU3eASZbZGaIZsgqSRRq2j1UzddKbqx
VVcRXkmbPnhpug==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:09 2025 by rpki-client