Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
File: 8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json)
Hash identifier: 3o4VVJrmZM04sSn3ZMEx0Fq7YQqQ/Gw21d/CyrG4UDs=
Subject key identifier: 0E:07:28:77:BF:5B:8A:BD:43:C8:C6:20:C3:55:93:1B:1F:15:D3:8E
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial: 019922FA1C302E4F6EA9A9D3A8B016C316B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
Manifest number: 0EE7
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: 9tLDeFay/5MFNh/PlifioZGHp/8NTVHAkW3hnLAhgv4=)
2: G1CMU250DLNf-oup7Q0hOPQNrZw.roa (hash: 0pwKFn2zlhCRBk1YacOr41wGcqVSw2Yno4Qxh/muNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1c:30:2e:4f:6e:a9:a9:d3:a8:b0:16:c3:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=0e072877bf5b8abd43c8c620c355931b1f15d38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:9e:52:90:b4:37:8e:78:38:3d:25:2c:cf:
cf:38:fe:30:38:64:94:4b:c1:56:25:89:62:ed:44:
40:14:66:bc:12:6f:21:f3:be:d0:cb:d6:e9:5c:24:
a9:7a:52:47:77:e9:4f:ef:b1:12:d4:98:30:c9:b6:
19:28:4e:05:13:a7:7c:b9:33:bd:8d:4e:e5:47:a6:
3b:b3:dc:40:d5:3a:c3:8e:95:a1:82:3a:e2:12:8d:
2d:fe:9a:4c:d2:f1:c0:86:14:ae:37:03:78:34:1b:
e7:38:be:ba:da:47:4e:4a:22:16:dc:5a:d4:af:65:
60:0a:39:d3:bf:08:0c:e2:7e:0f:44:bb:eb:8c:a5:
73:cd:cf:48:12:c5:ea:2d:dc:1c:41:64:6a:d7:a4:
31:d5:4f:bb:f2:9a:c6:88:7b:19:54:ad:6f:97:97:
53:59:f7:87:a6:86:bc:f3:91:c9:c3:58:71:d7:90:
98:97:d4:8e:77:c8:56:15:33:ae:d5:33:32:5e:a2:
69:f5:fa:74:23:80:8b:95:a6:ac:0a:93:df:58:e8:
87:41:94:b8:6c:14:33:c7:c6:9f:63:c0:7f:49:a0:
bb:6c:71:e6:21:af:c6:45:da:3d:c8:13:c7:90:96:
b2:33:7a:37:08:2a:9f:82:b6:3e:e3:0d:31:4a:8c:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:28:77:BF:5B:8A:BD:43:C8:C6:20:C3:55:93:1B:1F:15:D3:8E
X509v3 Authority Key Identifier:
keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f9:ec:dd:6c:2a:f4:9a:c3:3f:ca:f7:a0:51:da:28:76:8f:
d7:81:c9:d7:be:d6:82:c6:31:c0:31:6e:41:0b:19:89:d4:c9:
de:40:df:de:33:68:9d:d8:f0:5f:37:5b:c1:0f:d2:bf:5b:6b:
64:43:8c:2b:2c:54:4b:48:15:1f:4f:67:c5:d3:be:12:20:19:
10:84:c8:ab:86:85:1f:7e:30:51:5f:86:98:b7:56:7b:4c:d8:
97:2e:d1:4a:71:51:a0:ae:f3:51:34:d0:63:32:a6:97:a2:d3:
fd:aa:4e:41:b5:28:2e:fd:bd:3b:a4:f8:ec:d8:b4:c5:01:ee:
f2:c6:cc:2a:d2:6f:53:38:b9:e8:bf:9e:6b:00:6c:8f:b2:35:
d0:16:bc:89:c4:04:bc:39:ae:c1:ad:06:65:8f:7c:9d:9e:de:
32:a4:c5:d0:31:73:34:3f:36:53:dd:85:5e:97:a2:a9:0d:ca:
8b:59:db:a8:1a:c8:82:30:99:ad:64:05:5d:93:cd:da:7b:09:
25:90:9a:2d:36:67:31:59:53:62:6c:ea:22:3b:0a:b2:f7:0d:
db:cf:9c:46:3a:52:77:0b:d5:7e:70:ac:73:06:ea:e0:cd:f1:
d3:f8:58:ab:a1:ba:42:57:1f:64:4a:0a:b2:2d:be:ca:82:9f:
69:66:0e:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+hwwLk9uqanTqLAWwxa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzMzYTY3NTRjMDA4ZWRiYmFjNWYzMmViZDAxOWVhNjQ3
M2FlYTgwHhcNMjUwOTA3MDcwMDQwWhcNMjUwOTA4MDcwMDQwWjAzMTEwLwYDVQQD
EygwZTA3Mjg3N2JmNWI4YWJkNDNjOGM2MjBjMzU1OTMxYjFmMTVkMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF6eUpC0N454OD0lLM/POP4wOGSU
S8FWJYli7URAFGa8Em8h877Qy9bpXCSpelJHd+lP77ES1JgwybYZKE4FE6d8uTO9
jU7lR6Y7s9xA1TrDjpWhgjriEo0t/ppM0vHAhhSuNwN4NBvnOL662kdOSiIW3FrU
r2VgCjnTvwgM4n4PRLvrjKVzzc9IEsXqLdwcQWRq16Qx1U+78prGiHsZVK1vl5dT
WfeHpoa885HJw1hx15CYl9SOd8hWFTOu1TMyXqJp9fp0I4CLlaasCpPfWOiHQZS4
bBQzx8afY8B/SaC7bHHmIa/GRdo9yBPHkJayM3o3CCqfgrY+4w0xSoxHlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4HKHe/W4q9Q8jGIMNVkxsfFdOOMB8GA1UdIwQY
MBaAFPEzOmdUwAjtu6xfMuvQGepkc66oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84NDlkZmQtOTM5ZC00YzVkLThlYjYt
ZjA1OTY3MGRhZjNkLzEvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS84NDlkZmQtOTM5ZC00YzVkLThlYjYtZjA1OTY3MGRhZjNk
LzEvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPns3Wwq
9JrDP8r3oFHaKHaP14HJ177WgsYxwDFuQQsZidTJ3kDf3jNondjwXzdbwQ/Sv1tr
ZEOMKyxUS0gVH09nxdO+EiAZEITIq4aFH34wUV+GmLdWe0zYly7RSnFRoK7zUTTQ
YzKml6LT/apOQbUoLv29O6T47Ni0xQHu8sbMKtJvUzi56L+eawBsj7I10Ba8icQE
vDmuwa0GZY98nZ7eMqTF0DFzND82U92FXpeiqQ3Ki1nbqBrIgjCZrWQFXZPN2nsJ
JZCaLTZnMVlTYmzqIjsKsvcN28+cRjpSdwvVfnCscwbq4M3x0/hYq6G6QlcfZEoK
si2+yoKfaWYOKg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:24:15 2025 by rpki-client