Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier: 2yUl9MBJGH1gqRTsm0Q7Qm0nAMT/+MvhCjBFg75yDGM=
Subject key identifier: 0A:5F:24:4A:0A:B1:4D:F3:78:9B:2B:D8:E9:A5:79:A7:A7:3B:C4:E6
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019A22F73FA1BD4F10055B6519D9AC83C4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number: 07EE
Signing time: Mon 27 Oct 2025 00:00:20 +0000
Manifest this update: Mon 27 Oct 2025 00:00:20 +0000
Manifest next update: Tue 28 Oct 2025 00:00:20 +0000
Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: 3cJhq8vNdEbtibiOCicOrDc1qbd0y1ku6COCxMN5ols=)
2: VJcC3DZjVaOocdNxvr3eh-uH0lw.roa (hash: S/FApMeQF+bI8dQe3+ptgHneEZT+L8zmVlOAZBtIFyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:3f:a1:bd:4f:10:05:5b:65:19:d9:ac:83:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Oct 27 00:00:20 2025 GMT
Not After : Oct 28 00:00:20 2025 GMT
Subject: CN=0a5f244a0ab14df3789b2bd8e9a579a7a73bc4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:bb:8c:0e:66:73:ba:54:b8:bc:f5:53:1f:
bf:d2:29:72:54:e7:79:36:12:28:31:7d:37:3b:46:
10:46:d7:d3:fc:cc:13:e4:85:b1:fd:02:33:04:97:
f0:8f:28:c1:6b:36:bf:2a:5f:4e:44:32:cc:f8:86:
cd:05:d0:47:28:69:2a:27:51:29:e7:a8:4e:74:fa:
18:e3:01:a4:05:1a:f2:56:7c:7f:66:4a:40:8a:24:
53:34:a0:54:fd:91:0c:a9:b0:2c:7b:2d:0d:69:2d:
1f:e1:ba:17:e0:fc:b3:ca:ac:d5:1c:12:74:25:52:
68:98:b0:02:3f:34:ac:70:a7:fa:7c:15:bf:80:0f:
e2:9b:4e:a9:95:8f:f4:52:d9:cc:75:d2:5b:a5:e0:
11:92:e6:b3:b2:8a:4e:4c:df:fa:2f:b1:1a:fc:d9:
e6:3c:c3:cc:53:4a:4a:2f:7f:04:69:f1:4d:b1:ca:
b8:85:24:cd:5e:a0:d4:26:bd:ba:93:57:5b:17:ea:
c3:35:cd:8b:dd:12:15:f7:47:f4:21:fa:81:a3:ca:
28:4a:5a:5e:d0:35:af:50:89:ad:06:ff:86:f8:f6:
87:9e:b1:43:48:fd:1e:82:f6:8c:db:03:55:73:68:
57:3a:05:19:b3:cb:b2:bb:a9:7b:23:ce:6e:c9:17:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5F:24:4A:0A:B1:4D:F3:78:9B:2B:D8:E9:A5:79:A7:A7:3B:C4:E6
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:43:69:43:7c:70:93:25:fc:e1:91:3c:07:e1:b8:b6:b4:e0:
67:48:d1:91:cb:a8:72:04:fc:fe:79:f5:54:0d:1e:6e:fa:b9:
76:d6:de:e1:2a:06:99:f5:9f:dd:e5:9f:6f:8b:d3:c1:f6:0f:
d3:e4:24:74:73:1a:f7:76:09:9d:28:48:57:05:ed:dd:c3:b8:
a4:9b:63:c4:69:31:c1:0c:91:29:75:80:ff:63:d2:bb:b7:94:
c8:10:ef:39:f7:f7:db:08:52:18:6c:44:11:61:9a:ff:51:19:
ff:5a:ec:da:18:e4:78:fa:56:26:38:28:50:98:a8:c4:e9:a0:
8b:7e:a7:66:37:96:60:6e:25:97:01:9d:67:1e:25:14:f5:be:
7e:aa:25:bb:c8:f3:30:a7:60:4b:52:a4:86:66:cd:d0:47:f8:
56:67:18:e5:16:59:75:7e:74:ff:3c:a5:f9:71:dc:a2:8c:9f:
1d:40:f7:78:27:59:e3:e4:b0:6c:e1:73:1e:14:ae:bc:18:d4:
00:03:9f:84:1e:a5:00:49:5b:8b:50:6d:45:2c:8f:37:bc:e3:
aa:24:4b:b7:d8:d0:dd:b9:f2:6b:a8:d8:2f:69:7e:c7:f1:2e:
9a:a0:db:23:79:93:06:89:a8:f2:c0:56:b0:30:5e:af:cc:5e:
7a:70:8f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi9z+hvU8QBVtlGdmsg8TAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5
ZTY1YTEwHhcNMjUxMDI3MDAwMDIwWhcNMjUxMDI4MDAwMDIwWjAzMTEwLwYDVQQD
EygwYTVmMjQ0YTBhYjE0ZGYzNzg5YjJiZDhlOWE1NzlhN2E3M2JjNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgy7jA5mc7pUuLz1Ux+/0ilyVOd5
NhIoMX03O0YQRtfT/MwT5IWx/QIzBJfwjyjBaza/Kl9ORDLM+IbNBdBHKGkqJ1Ep
56hOdPoY4wGkBRryVnx/ZkpAiiRTNKBU/ZEMqbAsey0NaS0f4boX4PyzyqzVHBJ0
JVJomLACPzSscKf6fBW/gA/im06plY/0UtnMddJbpeARkuazsopOTN/6L7Ea/Nnm
PMPMU0pKL38EafFNscq4hSTNXqDUJr26k1dbF+rDNc2L3RIV90f0IfqBo8ooSlpe
0DWvUImtBv+G+PaHnrFDSP0egvaM2wNVc2hXOgUZs8uyu6l7I85uyRdJxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApfJEoKsU3zeJsr2OmleaenO8TmMB8GA1UdIwQY
MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct
YmQyYjNhYmFlMTIxLzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx
LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxENpQ3xw
kyX84ZE8B+G4trTgZ0jRkcuocgT8/nn1VA0ebvq5dtbe4SoGmfWf3eWfb4vTwfYP
0+QkdHMa93YJnShIVwXt3cO4pJtjxGkxwQyRKXWA/2PSu7eUyBDvOff32whSGGxE
EWGa/1EZ/1rs2hjkePpWJjgoUJioxOmgi36nZjeWYG4llwGdZx4lFPW+fqolu8jz
MKdgS1KkhmbN0Ef4VmcY5RZZdX50/zyl+XHcooyfHUD3eCdZ4+SwbOFzHhSuvBjU
AAOfhB6lAElbi1BtRSyPN7zjqiRLt9jQ3bnya6jYL2l+x/EumqDbI3mTBomo8sBW
sDBer8xeenCPeA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:02 2025 by rpki-client