Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: AIuVHrWi1vaOgXOIyBdARs0m1cI2hZcxp1Q1zpr21QM=
Subject key identifier: B9:18:EE:CD:68:07:AC:BF:2A:8D:C4:3B:E5:EA:BE:4F:98:DE:1D:7F
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 019A1A621720A07AEF245BF3FEA79CD5E9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 1684
Signing time: Sat 25 Oct 2025 08:00:27 +0000
Manifest this update: Sat 25 Oct 2025 08:00:27 +0000
Manifest next update: Sun 26 Oct 2025 08:00:27 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: jsveGc1boJM4xDYVfPwmD+ie6+Y5JkxoiAhYI2lKXAM=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:62:17:20:a0:7a:ef:24:5b:f3:fe:a7:9c:d5:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Oct 25 08:00:27 2025 GMT
Not After : Oct 26 08:00:27 2025 GMT
Subject: CN=b918eecd6807acbf2a8dc43be5eabe4f98de1d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:28:50:f0:88:65:6b:e5:a5:6c:8a:0e:1e:
76:dc:63:06:03:0d:14:66:96:0b:56:a8:81:9d:16:
3f:37:9f:ab:d4:9c:ee:14:bc:ba:22:74:0a:b2:b8:
c9:3d:d9:40:bc:99:d7:85:c7:95:3a:00:51:70:83:
ab:26:f4:5e:49:0e:e5:f6:38:e2:d2:9a:cc:ed:d9:
5c:23:35:46:d0:57:0b:38:f4:1c:b1:6d:35:a1:49:
b0:fe:de:47:a4:de:9c:92:6e:3e:9a:2b:50:d8:06:
a0:b5:b8:4b:20:bd:a2:18:be:6e:58:c5:81:a3:f2:
56:37:2f:57:4b:aa:9f:cf:11:39:a4:31:89:3b:ee:
cd:2e:81:a4:ac:51:19:a8:eb:c8:49:04:d1:66:29:
0a:6b:53:e0:99:f2:19:00:1d:35:9b:5c:cd:c7:55:
04:49:9b:45:8d:10:52:f4:f9:7d:46:5c:24:89:1e:
af:67:d4:10:e3:f7:4d:f4:14:77:43:66:5c:5b:65:
71:35:f8:47:bf:c0:92:d3:08:d8:01:04:a6:42:68:
ee:42:cb:f9:9e:33:f0:e2:88:c6:31:11:47:41:56:
1a:6a:2c:19:f0:3f:ba:cf:01:4b:c6:24:b5:d2:0f:
d9:65:40:ac:27:0b:48:60:9a:b3:d3:a4:a6:5b:ee:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:EE:CD:68:07:AC:BF:2A:8D:C4:3B:E5:EA:BE:4F:98:DE:1D:7F
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:69:86:cd:ea:ac:17:2f:c9:de:9b:33:74:77:64:08:c6:82:
e5:f8:49:3c:49:c0:e5:a7:16:a9:20:8b:48:b0:59:26:fe:5e:
a5:44:85:ac:5b:04:ec:fd:ad:7e:98:72:eb:58:44:6d:d4:14:
c8:7c:5a:5e:06:1c:e0:d8:6a:f7:c4:b9:e1:3e:58:48:9d:6f:
68:70:56:e1:6c:29:b8:be:09:12:e6:6c:bf:19:8f:82:0a:3c:
15:b0:1d:e6:34:ef:ec:6e:35:46:5e:1d:9c:39:b1:8b:7e:e5:
78:26:3e:0e:c4:d7:ce:a3:18:d3:36:cb:b2:c6:51:93:04:d8:
34:dd:9f:b3:5f:59:89:4e:b8:a9:b4:86:ec:b6:a6:ae:2f:14:
02:7f:45:18:bc:bf:34:6f:af:98:6e:ff:72:37:e8:c5:b1:b2:
fb:37:52:ad:59:3c:ad:06:26:19:fc:67:b9:b4:d6:a5:38:67:
73:4f:04:45:4f:84:b9:5f:27:e4:3c:3c:6d:18:57:ff:cb:62:
a1:b7:24:19:8f:e2:76:36:f2:f8:e8:b8:47:a4:ac:10:4a:07:
5c:4b:d4:6c:17:f9:2a:d3:bd:83:d5:1f:fe:b6:5e:89:68:95:
48:08:f6:92:83:df:86:d8:03:72:27:4f:75:40:d6:47:8b:c7:
67:f9:98:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaYhcgoHrvJFvz/qec1emqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjY3MmJkYjdiMDc2NTkxNDdlNTg3ZDQ0MzFhYTYwNGY3
NmEzODQwHhcNMjUxMDI1MDgwMDI3WhcNMjUxMDI2MDgwMDI3WjAzMTEwLwYDVQQD
EyhiOTE4ZWVjZDY4MDdhY2JmMmE4ZGM0M2JlNWVhYmU0Zjk4ZGUxZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVEoUPCIZWvlpWyKDh523GMGAw0U
ZpYLVqiBnRY/N5+r1JzuFLy6InQKsrjJPdlAvJnXhceVOgBRcIOrJvReSQ7l9jji
0prM7dlcIzVG0FcLOPQcsW01oUmw/t5HpN6ckm4+mitQ2AagtbhLIL2iGL5uWMWB
o/JWNy9XS6qfzxE5pDGJO+7NLoGkrFEZqOvISQTRZikKa1PgmfIZAB01m1zNx1UE
SZtFjRBS9Pl9RlwkiR6vZ9QQ4/dN9BR3Q2ZcW2VxNfhHv8CS0wjYAQSmQmjuQsv5
njPw4ojGMRFHQVYaaiwZ8D+6zwFLxiS10g/ZZUCsJwtIYJqz06SmW+6vNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkY7s1oB6y/Ko3EO+Xqvk+Y3h1/MB8GA1UdIwQY
MBaAFPL2cr23sHZZFH5YfUQxqmBPdqOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEt
NjI2ZWY4OGYyMWE5LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEtNjI2ZWY4OGYyMWE5
LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2mGzeqs
Fy/J3pszdHdkCMaC5fhJPEnA5acWqSCLSLBZJv5epUSFrFsE7P2tfphy61hEbdQU
yHxaXgYc4Nhq98S54T5YSJ1vaHBW4WwpuL4JEuZsvxmPggo8FbAd5jTv7G41Rl4d
nDmxi37leCY+DsTXzqMY0zbLssZRkwTYNN2fs19ZiU64qbSG7Lamri8UAn9FGLy/
NG+vmG7/cjfoxbGy+zdSrVk8rQYmGfxnubTWpThnc08ERU+EuV8n5Dw8bRhX/8ti
obckGY/idjby+Oi4R6SsEEoHXEvUbBf5KtO9g9Uf/rZeiWiVSAj2koPfhtgDcidP
dUDWR4vHZ/mYFw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:42:32 2025 by rpki-client