Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: IVBUp41jeJAUqbnAjyyopb6jbtnmRbPSbJfOXq0ncA0=
Subject key identifier: C3:35:81:7D:CB:B4:3A:52:55:D8:EE:96:51:A4:1A:B8:A2:95:2B:15
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 0199277C5C6553544F0FEB30264BD11A34FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0B60
Signing time: Mon 08 Sep 2025 04:01:25 +0000
Manifest this update: Mon 08 Sep 2025 04:01:25 +0000
Manifest next update: Tue 09 Sep 2025 04:01:25 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: Sf2NBHb5z3A3RW+TdircqZRtNHybNI/5xoNd7pjbt2w=)
2: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
3: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
4: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
5: VrAK-3V8CNeDpB5qVeCvMUDkHWY.roa (hash: LENa2mgDZKaaSJWhIwKS7EyivXKjCiNw/jcO9yMBo6I=)
6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
8: gHxt-7VNY3fc7Ia-bzrqoQMWyk4.roa (hash: zNJ0Kmvb3CH4yE59hTArSJep5ChElM6AnbN5rY/o7aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7c:5c:65:53:54:4f:0f:eb:30:26:4b:d1:1a:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Sep 8 04:01:25 2025 GMT
Not After : Sep 9 04:01:25 2025 GMT
Subject: CN=c335817dcbb43a5255d8ee9651a41ab8a2952b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:c7:2c:e7:61:91:99:19:6d:1f:97:db:aa:
ed:70:94:31:33:1c:ab:f8:20:bc:7c:8e:3a:cb:38:
4a:6a:8c:33:55:c2:4e:2a:38:08:cb:5f:3b:7e:31:
81:ad:03:ae:49:ed:c0:b3:71:8d:57:a8:05:5c:7d:
5c:86:4b:6b:ad:2f:ec:98:ca:07:9b:7e:fa:6d:79:
cc:71:8d:eb:b5:1b:7a:86:5c:d7:42:66:eb:59:a8:
c4:28:42:0c:2d:12:f4:4a:84:9f:42:30:a1:16:08:
18:57:04:df:0b:97:25:1c:bf:6c:3c:c2:88:d4:a7:
cb:94:23:86:ca:3b:30:3a:b0:a9:0e:37:fa:3f:07:
48:db:ed:05:32:12:84:24:f4:1b:79:31:d7:63:04:
80:ec:64:2f:d5:07:a9:0f:df:b9:d4:3c:c6:e0:f0:
25:c1:72:f0:aa:16:64:a8:71:1c:b0:c2:f6:4c:e1:
8e:ca:94:67:64:f9:a0:1a:b9:a2:8a:77:da:c3:e7:
3d:f4:eb:bf:96:ec:62:84:5e:2f:49:99:77:b2:4a:
21:97:60:f6:62:24:0f:cc:93:fd:d0:c8:4d:76:61:
b2:63:37:3d:f0:7a:73:61:4e:f7:53:f1:9c:8a:ee:
ed:fc:01:48:eb:e7:82:2b:1f:68:cc:fd:78:d4:ce:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:81:7D:CB:B4:3A:52:55:D8:EE:96:51:A4:1A:B8:A2:95:2B:15
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:98:d6:dd:bb:41:24:0a:a3:17:4a:85:18:8d:dc:8e:1e:2f:
46:25:c8:d9:f1:c7:9e:f0:ea:b4:e0:93:62:08:91:f1:f8:d7:
fe:65:57:b3:0b:02:1f:80:0b:dc:95:81:7b:18:55:d9:49:4a:
77:b7:d0:c7:0c:15:ed:10:d8:f7:af:92:9b:b1:88:46:23:74:
03:ff:cc:64:bd:7e:3d:6e:42:7e:b1:21:b7:ad:10:8d:f7:5a:
f2:da:f1:2d:a4:63:74:99:58:69:9a:1e:14:21:0e:40:60:e1:
3e:93:11:1c:37:1a:3d:a2:73:8b:8c:35:03:cf:83:6d:91:83:
4e:c3:c2:16:02:1c:28:43:84:06:a0:78:4d:82:a7:93:08:8c:
23:21:32:c0:36:d7:0f:d5:79:50:29:25:11:11:e0:2c:3c:00:
a5:62:d5:1e:b5:c8:c7:c6:30:09:08:2e:35:7a:3b:bf:dc:4a:
fc:f2:cf:ef:a9:a7:db:fd:f0:77:74:97:9d:60:ed:8b:3f:8c:
e5:6a:74:c0:38:f7:af:63:25:fc:97:2c:48:f5:99:73:ab:12:
40:e7:2a:3c:6c:2a:cd:6b:cb:9e:f6:be:02:1e:44:e4:08:da:
27:ec:eb:6e:50:23:e1:d7:bb:c1:67:cf:eb:c2:83:76:59:b1:
95:71:0e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknfFxlU1RPD+swJkvRGjT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1
OWJmNDYwHhcNMjUwOTA4MDQwMTI1WhcNMjUwOTA5MDQwMTI1WjAzMTEwLwYDVQQD
EyhjMzM1ODE3ZGNiYjQzYTUyNTVkOGVlOTY1MWE0MWFiOGEyOTUyYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24DHLOdhkZkZbR+X26rtcJQxMxyr
+CC8fI46yzhKaowzVcJOKjgIy187fjGBrQOuSe3As3GNV6gFXH1chktrrS/smMoH
m376bXnMcY3rtRt6hlzXQmbrWajEKEIMLRL0SoSfQjChFggYVwTfC5clHL9sPMKI
1KfLlCOGyjswOrCpDjf6PwdI2+0FMhKEJPQbeTHXYwSA7GQv1QepD9+51DzG4PAl
wXLwqhZkqHEcsML2TOGOypRnZPmgGrmiinfaw+c99Ou/luxihF4vSZl3skohl2D2
YiQPzJP90MhNdmGyYzc98HpzYU73U/Gciu7t/AFI6+eCKx9ozP141M5R6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM1gX3LtDpSVdjullGkGriilSsVMB8GA1UdIwQY
MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt
ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4
LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpjW3btB
JAqjF0qFGI3cjh4vRiXI2fHHnvDqtOCTYgiR8fjX/mVXswsCH4AL3JWBexhV2UlK
d7fQxwwV7RDY96+Sm7GIRiN0A//MZL1+PW5CfrEht60Qjfda8trxLaRjdJlYaZoe
FCEOQGDhPpMRHDcaPaJzi4w1A8+DbZGDTsPCFgIcKEOEBqB4TYKnkwiMIyEywDbX
D9V5UCklERHgLDwApWLVHrXIx8YwCQguNXo7v9xK/PLP76mn2/3wd3SXnWDtiz+M
5Wp0wDj3r2Ml/JcsSPWZc6sSQOcqPGwqzWvLnva+Ah5E5AjaJ+zrblAj4de7wWfP
68KDdlmxlXEOZg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:10:10 2025 by rpki-client