Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File: 8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier: iLW2yeG9kNLOUK99ZUvHs0ab9+kzmkVvHIqhFKvd1Fs=
Subject key identifier: A9:EF:8D:A4:7D:05:08:84:FD:08:98:70:59:03:0C:AA:5C:E6:10:C6
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer: /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial: 0199239F8D8E1DD967B781388CDA5F16A12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number: 0CFE
Signing time: Sun 07 Sep 2025 10:01:22 +0000
Manifest this update: Sun 07 Sep 2025 10:01:22 +0000
Manifest next update: Mon 08 Sep 2025 10:01:22 +0000
Files and hashes: 1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: RbnnjKI94jYnXTEgKvW5izbq5JqM9IHlWZlUA8WSjh4=)
2: Nh4smUq7Nayhm_h4hcJhFSXbd98.roa (hash: 0tOyxit0JfWpS02swEQXMIpCvZrxbPbACrr2wxwWLsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:8d:8e:1d:d9:67:b7:81:38:8c:da:5f:16:a1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Validity
Not Before: Sep 7 10:01:22 2025 GMT
Not After : Sep 8 10:01:22 2025 GMT
Subject: CN=a9ef8da47d050884fd08987059030caa5ce610c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:92:5d:ec:fd:6e:4b:be:ab:55:e6:c2:f7:
28:10:53:20:8c:1b:f5:32:30:ab:f4:24:a1:aa:ba:
4d:b6:0a:38:ee:f4:2b:d4:2d:2d:48:4c:d4:f5:a8:
4d:9d:db:b2:15:b4:9d:f5:f8:a5:8d:c1:b1:13:f8:
a2:59:da:a0:ea:23:fe:53:24:5c:25:eb:a5:ef:13:
ba:47:ad:a8:ca:04:54:d6:a3:67:e9:c9:1c:5e:da:
55:67:7c:83:17:6d:7d:2f:ce:c3:e9:04:cd:eb:2d:
45:4f:3e:a7:4b:c7:dc:d2:c9:2d:a3:af:6f:90:13:
12:72:f2:91:ec:c4:09:3f:22:98:cd:ea:9f:83:5c:
41:a7:0c:fd:c5:de:82:64:87:72:f6:dd:1c:01:d7:
f4:49:4f:83:ba:f9:ad:f0:df:2c:83:c9:a0:43:42:
24:35:a1:ec:75:ff:a5:ee:c3:09:2f:97:41:79:17:
e1:dd:dc:9a:34:45:b1:38:21:b8:64:5d:46:43:d4:
09:7d:aa:15:d2:33:33:e8:58:a9:0a:37:f4:58:56:
1d:86:7f:b8:85:88:2f:66:a3:bd:4d:1c:f4:4d:c9:
fb:c0:1e:50:72:0e:cc:fa:f2:c1:27:3c:d7:13:fd:
53:29:da:19:1e:e5:1e:1e:6b:4b:a3:9a:c8:21:d5:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EF:8D:A4:7D:05:08:84:FD:08:98:70:59:03:0C:AA:5C:E6:10:C6
X509v3 Authority Key Identifier:
keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ff:ca:e2:94:56:fc:b7:1a:23:39:cc:70:98:77:a9:2f:1b:
b3:16:41:57:fa:da:71:46:c2:77:00:6d:ae:92:0a:cf:f6:e5:
a0:ff:d3:44:34:34:58:96:1d:a1:f8:35:9f:5c:dc:c4:f8:5b:
bb:cc:92:a2:55:4d:8e:dd:29:29:e1:6a:55:d4:c2:64:63:7a:
44:44:36:24:9a:0f:ee:ba:66:95:d1:14:9c:9f:4a:65:bd:0a:
ac:cf:52:0a:6f:40:f9:d6:fc:e1:9a:04:ac:71:7d:24:d9:ad:
e4:07:26:c5:1a:e9:a7:a5:91:7c:9a:b4:83:9a:6f:be:eb:78:
b3:21:3d:db:41:9a:eb:dc:08:07:f6:48:29:da:f8:87:29:56:
59:47:87:c9:f6:c5:a2:9f:4b:93:b5:86:9d:0c:ed:bc:ab:33:
fa:57:e5:14:4e:3a:13:db:33:b2:02:cb:29:c0:f5:2c:0a:76:
65:f9:c7:be:36:fe:77:a5:20:bc:47:73:2f:eb:6e:e4:cf:80:
f7:9c:0a:5d:ca:16:27:6e:90:99:ca:6d:f6:ea:05:b0:3c:35:
4e:1a:9b:74:d8:4f:db:2f:4c:b3:71:1b:d1:c8:52:6a:24:d2:
70:42:e6:d4:d9:6e:12:01:ae:84:58:6a:de:02:e9:d1:54:8a:
c9:e8:5f:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn42OHdlnt4E4jNpfFqEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmVmOGIwYzFjYTQ3ZTcxNmRhMjE5ZDMxMDI4MDI4N2Qz
NmViZTMwHhcNMjUwOTA3MTAwMTIyWhcNMjUwOTA4MTAwMTIyWjAzMTEwLwYDVQQD
EyhhOWVmOGRhNDdkMDUwODg0ZmQwODk4NzA1OTAzMGNhYTVjZTYxMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSSSXez9bku+q1XmwvcoEFMgjBv1
MjCr9CShqrpNtgo47vQr1C0tSEzU9ahNnduyFbSd9filjcGxE/iiWdqg6iP+UyRc
Jeul7xO6R62oygRU1qNn6ckcXtpVZ3yDF219L87D6QTN6y1FTz6nS8fc0skto69v
kBMScvKR7MQJPyKYzeqfg1xBpwz9xd6CZIdy9t0cAdf0SU+Duvmt8N8sg8mgQ0Ik
NaHsdf+l7sMJL5dBeRfh3dyaNEWxOCG4ZF1GQ9QJfaoV0jMz6FipCjf0WFYdhn+4
hYgvZqO9TRz0Tcn7wB5Qcg7M+vLBJzzXE/1TKdoZHuUeHmtLo5rIIdUMJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnvjaR9BQiE/QiYcFkDDKpc5hDGMB8GA1UdIwQY
MBaAFPP++LDBykfnFtohnTECgCh9NuvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYt
Zjg3YzUwZGY2ZmI3LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYtZjg3YzUwZGY2ZmI3
LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf/K4pRW
/LcaIznMcJh3qS8bsxZBV/racUbCdwBtrpIKz/bloP/TRDQ0WJYdofg1n1zcxPhb
u8ySolVNjt0pKeFqVdTCZGN6REQ2JJoP7rpmldEUnJ9KZb0KrM9SCm9A+db84ZoE
rHF9JNmt5AcmxRrpp6WRfJq0g5pvvut4syE920Ga69wIB/ZIKdr4hylWWUeHyfbF
op9Lk7WGnQztvKsz+lflFE46E9szsgLLKcD1LAp2ZfnHvjb+d6UgvEdzL+tu5M+A
95wKXcoWJ26Qmcpt9uoFsDw1ThqbdNhP2y9Ms3Eb0chSaiTScELm1NluEgGuhFhq
3gLp0VSKyehfSQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:13 2025 by rpki-client