Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
File: 8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json)
Hash identifier: qqizdOYkWOb1zXv44KOP99UgI4Qw5s4vfG9LxBndW1o=
Subject key identifier: C7:3C:6E:5F:DF:38:43:B0:7E:C2:7B:AB:37:31:35:8D:EA:A8:B4:E7
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 019921E7D306B8C039A5E3CAC78411440AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
Manifest number: 15C3
Signing time: Sun 07 Sep 2025 02:01:04 +0000
Manifest this update: Sun 07 Sep 2025 02:01:04 +0000
Manifest next update: Mon 08 Sep 2025 02:01:04 +0000
Files and hashes: 1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: XWsFjSYxe9xlZE2srYQSQL53psZgbbKVH2SOvaO812A=)
2: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (hash: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d3:06:b8:c0:39:a5:e3:ca:c7:84:11:44:0a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Sep 7 02:01:04 2025 GMT
Not After : Sep 8 02:01:04 2025 GMT
Subject: CN=c73c6e5fdf3843b07ec27bab3731358deaa8b4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:4e:ee:c4:30:e2:ea:63:ee:6f:fd:71:04:
d7:ba:18:28:f1:53:ff:c8:54:ba:6c:f2:26:4a:b2:
c0:51:9a:97:60:e4:50:47:17:c3:bb:2a:99:0b:ff:
a6:2b:9d:92:1a:95:03:d0:3e:c7:ca:78:c8:38:d3:
d3:f6:7d:f3:24:91:52:77:7e:ec:fc:8c:cd:e0:d7:
f9:55:9e:43:81:56:ef:d9:e6:7e:2e:db:e2:ba:2b:
db:f8:91:3e:a0:94:5f:05:e3:62:0a:4a:ea:79:3e:
66:cc:af:36:15:a7:90:e4:7c:df:ba:32:c9:aa:74:
e8:48:e6:94:b0:c9:93:78:d3:e4:4e:fc:a4:a3:f2:
b8:27:53:6f:2e:d5:bf:1b:eb:7b:36:d0:d0:9a:ad:
09:39:3e:a2:83:ab:70:6e:2a:c3:72:db:f3:11:fa:
ca:a9:4a:d7:5e:25:27:52:df:0b:59:ca:36:c0:25:
8c:d0:c0:b6:b0:77:ff:79:09:3f:ba:f1:eb:01:87:
e4:1e:f3:ac:2a:37:44:9d:40:a3:ca:d6:82:05:77:
d6:06:b0:a2:48:fd:63:a8:18:00:fe:c1:f8:4d:83:
07:21:34:77:cf:35:b4:d7:3d:d3:b2:7d:35:a9:84:
8d:b4:e4:b1:e4:bf:fd:ec:30:a2:3d:a4:f3:5e:b5:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:6E:5F:DF:38:43:B0:7E:C2:7B:AB:37:31:35:8D:EA:A8:B4:E7
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:c0:e8:13:c0:34:f7:76:40:fc:be:6b:c3:aa:4b:20:9e:
9c:04:d9:c3:42:83:23:54:6f:27:95:2b:6a:59:90:6c:ba:a8:
b7:4b:41:c4:c4:7f:82:6a:8a:f0:fd:db:e7:08:35:8f:59:02:
af:7f:ce:49:51:b1:d4:29:ed:64:ae:9e:1e:87:d8:d5:fc:27:
a8:d1:0a:29:ce:32:65:5c:f8:f0:cd:37:4b:19:1b:41:eb:5d:
0a:be:c8:4d:b6:6f:94:e2:f6:d4:c2:9d:23:6a:de:3b:bf:81:
a5:2e:df:65:82:81:bf:ad:55:dc:58:14:59:95:43:d0:ca:12:
74:c2:03:af:ac:7d:a9:df:e8:f5:e3:5f:c8:2e:47:04:63:cd:
c4:90:4f:e5:b6:9f:b7:f7:7f:49:ce:ef:48:9e:c1:13:1a:f8:
f3:3f:94:0c:5f:c6:c2:cc:fe:8a:9f:2a:82:7f:b4:1e:2d:2d:
4f:c1:cc:b8:a5:1a:a1:a7:28:f9:12:c3:94:85:9c:7b:c2:ef:
61:c4:e3:94:27:b7:a9:61:49:90:f0:1f:ca:31:20:5d:cc:f3:
27:1d:a7:64:12:4d:9d:8e:3e:35:a3:ea:8f:17:d5:2e:1d:eb:
4b:70:8c:22:6c:94:30:1c:0f:30:3f:5e:1a:dc:c8:57:be:a8:
5a:b9:e4:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh59MGuMA5pePKx4QRRAq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZjZhNTdlYTJhOTAyZWI0OTEyZGU5MjdkZjgwMzA0YzM1
NWFiMTIwHhcNMjUwOTA3MDIwMTA0WhcNMjUwOTA4MDIwMTA0WjAzMTEwLwYDVQQD
EyhjNzNjNmU1ZmRmMzg0M2IwN2VjMjdiYWIzNzMxMzU4ZGVhYThiNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFBO7sQw4upj7m/9cQTXuhgo8VP/
yFS6bPImSrLAUZqXYORQRxfDuyqZC/+mK52SGpUD0D7HynjIONPT9n3zJJFSd37s
/IzN4Nf5VZ5DgVbv2eZ+Ltviuivb+JE+oJRfBeNiCkrqeT5mzK82FaeQ5HzfujLJ
qnToSOaUsMmTeNPkTvyko/K4J1NvLtW/G+t7NtDQmq0JOT6ig6twbirDctvzEfrK
qUrXXiUnUt8LWco2wCWM0MC2sHf/eQk/uvHrAYfkHvOsKjdEnUCjytaCBXfWBrCi
SP1jqBgA/sH4TYMHITR3zzW01z3Tsn01qYSNtOSx5L/97DCiPaTzXrVqBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc8bl/fOEOwfsJ7qzcxNY3qqLTnMB8GA1UdIwQY
MBaAFPP2pX6iqQLrSRLekn34AwTDVasSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMt
OTQwYzZiOGI1MDJhLzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMtOTQwYzZiOGI1MDJh
LzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsXA6BPA
NPd2QPy+a8OqSyCenATZw0KDI1RvJ5UralmQbLqot0tBxMR/gmqK8P3b5wg1j1kC
r3/OSVGx1CntZK6eHofY1fwnqNEKKc4yZVz48M03SxkbQetdCr7ITbZvlOL21MKd
I2reO7+BpS7fZYKBv61V3FgUWZVD0MoSdMIDr6x9qd/o9eNfyC5HBGPNxJBP5baf
t/d/Sc7vSJ7BExr48z+UDF/Gwsz+ip8qgn+0Hi0tT8HMuKUaoaco+RLDlIWce8Lv
YcTjlCe3qWFJkPAfyjEgXczzJx2nZBJNnY4+NaPqjxfVLh3rS3CMImyUMBwPMD9e
GtzIV76oWrnkww==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:23 2025 by rpki-client