Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: Cha/riqxZHnXnnN8zDBEhMJLYNQc6GObziTWGDFtcxk=
Subject key identifier: 00:A1:6E:6E:B0:78:A7:98:4D:48:98:3E:F3:C5:C1:BD:68:55:8E:02
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 0199225558627FA397955160FD0DE09FBB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 087D
Signing time: Sun 07 Sep 2025 04:00:42 +0000
Manifest this update: Sun 07 Sep 2025 04:00:42 +0000
Manifest next update: Mon 08 Sep 2025 04:00:42 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: wJwn812zqCE8ND/WUPrH2b5bxnEHq8g1XtQS7g/KOR8=)
2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:58:62:7f:a3:97:95:51:60:fd:0d:e0:9f:bb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Sep 7 04:00:42 2025 GMT
Not After : Sep 8 04:00:42 2025 GMT
Subject: CN=00a16e6eb078a7984d48983ef3c5c1bd68558e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:31:ed:1a:04:9d:14:1a:ae:8e:84:f6:83:06:
19:ac:ad:d2:b8:69:b8:29:d9:73:4e:37:70:4d:35:
e2:f8:92:d7:d1:86:b8:3a:ba:21:5f:65:f6:08:e5:
ac:f0:07:bc:32:79:4b:f0:81:c9:84:06:c4:01:8e:
a4:f1:2b:23:ba:76:89:ba:60:2d:c9:fd:dc:a1:e0:
cd:be:1d:ba:73:01:58:8e:12:61:28:99:10:8e:87:
33:b2:92:35:e2:5a:a0:6c:8e:4c:96:98:60:42:21:
b1:0e:10:07:25:22:c3:ee:a1:51:62:0d:1c:1b:21:
7c:7b:fe:7b:99:a1:83:6d:74:26:ea:2f:37:a8:a5:
80:8f:b4:2a:c6:90:72:b2:e6:3d:58:88:82:71:2b:
72:4e:de:ff:44:44:22:e8:21:da:71:e4:70:b4:ed:
90:9b:4b:85:90:d0:53:5b:5d:83:2a:e3:6b:88:5c:
cb:9c:75:fa:5b:9a:5f:46:d0:3a:ca:89:9a:a7:9f:
a3:bc:81:82:32:c4:a0:cc:98:c1:ba:97:aa:2f:e8:
32:b9:5d:fd:ea:fb:9d:c4:35:cc:61:7e:c5:c8:65:
70:4e:28:7a:0b:12:9e:cc:e0:38:77:d6:fe:77:a3:
2e:2b:23:d8:9f:88:95:97:2e:fc:c8:db:2a:c7:64:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A1:6E:6E:B0:78:A7:98:4D:48:98:3E:F3:C5:C1:BD:68:55:8E:02
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:93:cb:f0:54:a2:36:64:58:2c:c8:1e:16:6a:52:e9:bf:c7:
24:70:03:48:17:cc:3e:87:f7:bf:f2:5d:5e:cb:a8:a1:ed:8b:
f7:3c:1f:a0:75:d5:56:11:0f:d9:c7:2e:46:2f:50:a8:a5:73:
66:33:2c:dc:ea:53:3d:97:8c:44:20:50:ba:94:3d:ed:41:6b:
d6:c1:ee:29:fa:34:ce:1d:2d:88:58:9a:2d:f7:0b:c8:d2:0b:
ca:3b:32:0e:70:38:42:eb:2a:d7:01:47:0c:89:a0:36:03:b4:
bc:9c:76:04:a2:bf:bd:9c:13:df:a1:7d:93:b8:80:22:9f:ff:
9b:bc:01:a0:ca:a4:e6:85:3d:9f:d9:1b:8d:d9:92:15:c6:fb:
72:b3:f9:37:02:b5:6a:86:01:40:70:84:d4:41:70:af:84:b9:
1d:4b:7e:c5:66:76:11:15:4b:f8:a6:54:f8:a9:49:f1:a1:b4:
31:9a:a1:d5:4a:06:d1:80:5f:d1:cb:2f:02:fb:68:2f:9b:f6:
ad:5b:91:21:4e:fc:a8:8e:fd:94:f1:68:18:da:e4:78:1a:48:
4f:a0:4e:e2:60:bc:01:36:e7:a8:0e:cf:86:40:5a:6d:dc:c5:
5d:c3:1d:14:9b:5b:59:94:80:80:d8:80:a3:18:78:ed:77:8e:
cd:12:78:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVVhif6OXlVFg/Q3gn7trMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGEwOGViOGZhN2JlZTZhMzE4M2UzMmRlNTFhMmYzY2Nk
NGFlNDcwHhcNMjUwOTA3MDQwMDQyWhcNMjUwOTA4MDQwMDQyWjAzMTEwLwYDVQQD
EygwMGExNmU2ZWIwNzhhNzk4NGQ0ODk4M2VmM2M1YzFiZDY4NTU4ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zHtGgSdFBqujoT2gwYZrK3SuGm4
KdlzTjdwTTXi+JLX0Ya4OrohX2X2COWs8Ae8MnlL8IHJhAbEAY6k8SsjunaJumAt
yf3coeDNvh26cwFYjhJhKJkQjoczspI14lqgbI5MlphgQiGxDhAHJSLD7qFRYg0c
GyF8e/57maGDbXQm6i83qKWAj7QqxpBysuY9WIiCcStyTt7/REQi6CHaceRwtO2Q
m0uFkNBTW12DKuNriFzLnHX6W5pfRtA6yomap5+jvIGCMsSgzJjBupeqL+gyuV39
6vudxDXMYX7FyGVwTih6CxKezOA4d9b+d6MuKyPYn4iVly78yNsqx2QV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAChbm6weKeYTUiYPvPFwb1oVY4CMB8GA1UdIwQY
MBaAFPCKCOuPp77moxg+Mt5RovPM1K5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hYjExYzktMjVkNS00M2ZhLTliZDMt
YjFlYzI4YzY3Yzc0LzEvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hYjExYzktMjVkNS00M2ZhLTliZDMtYjFlYzI4YzY3Yzc0
LzEvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpPL8FSi
NmRYLMgeFmpS6b/HJHADSBfMPof3v/JdXsuooe2L9zwfoHXVVhEP2ccuRi9QqKVz
ZjMs3OpTPZeMRCBQupQ97UFr1sHuKfo0zh0tiFiaLfcLyNILyjsyDnA4Qusq1wFH
DImgNgO0vJx2BKK/vZwT36F9k7iAIp//m7wBoMqk5oU9n9kbjdmSFcb7crP5NwK1
aoYBQHCE1EFwr4S5HUt+xWZ2ERVL+KZU+KlJ8aG0MZqh1UoG0YBf0csvAvtoL5v2
rVuRIU78qI79lPFoGNrkeBpIT6BO4mC8ATbnqA7PhkBabdzFXcMdFJtbWZSAgNiA
oxh47XeOzRJ4vg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:27 2025 by rpki-client