Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
File: 8zXtZqwB15F1zk149nKh_kcgN4A.mft (raw, json)
Hash identifier: C9+B99duh2Q025YnBNLrF9GJwdWVLlpppvb2EDS60Yg=
Subject key identifier: A4:C4:58:E3:45:5A:5C:7A:2E:87:35:C2:DE:34:6A:18:B5:05:02:DC
Authority key identifier: F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
Certificate issuer: /CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Certificate serial: 0199EAC0323070000CE227783C0B13A90D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
Manifest number: 9E
Signing time: Thu 16 Oct 2025 02:01:28 +0000
Manifest this update: Thu 16 Oct 2025 02:01:28 +0000
Manifest next update: Fri 17 Oct 2025 02:01:28 +0000
Files and hashes: 1: 8zXtZqwB15F1zk149nKh_kcgN4A.crl (hash: WG3CGBPTmpWzhcmwbM+/9ssWk7dZyGpzM0WviBKnrQE=)
2: Gc7bIWg_002hRPQXdkZu34Nt1hk.roa (hash: rYe2LH24NobxlRDRXW8nW9SeQn4FShUkG8Kt27Qhtsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ea:c0:32:30:70:00:0c:e2:27:78:3c:0b:13:a9:0d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Validity
Not Before: Oct 16 02:01:28 2025 GMT
Not After : Oct 17 02:01:28 2025 GMT
Subject: CN=a4c458e3455a5c7a2e8735c2de346a18b50502dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:d0:7f:e0:dd:2f:d1:4e:c6:08:2f:7b:9c:
06:c9:6b:d9:4e:dc:27:b9:7e:ff:c3:48:9b:74:1d:
a0:b0:5b:03:03:61:d9:2d:0c:e1:f1:0d:d4:4d:bc:
17:a7:c7:ba:97:01:6d:41:22:cd:d9:54:15:dd:3f:
fd:4d:cf:89:65:69:ad:64:e3:64:e2:32:19:67:0a:
25:92:f7:3e:2f:85:57:98:67:3f:f2:48:31:03:84:
c5:09:1a:ba:3a:fb:4a:f7:3b:1b:54:9d:24:b0:2d:
f1:4b:95:fb:d8:06:39:c9:7d:cc:9d:4f:7e:08:34:
e1:c1:50:e3:e7:a1:3a:37:b7:d8:36:25:73:09:47:
d4:48:2f:cd:6a:b6:93:1e:f0:24:9e:e0:f5:d2:19:
d8:ca:f0:fc:e0:4d:d6:f7:4b:d5:90:88:8f:0b:36:
16:dc:6f:d8:9c:15:fa:77:2b:40:f4:d6:b9:bb:ca:
93:bd:99:43:8b:ed:37:2d:ba:ca:0f:2e:c9:b8:bc:
4d:25:21:03:46:0a:4d:38:68:e7:86:b7:17:fc:35:
80:ef:dc:d0:0c:60:02:b9:bc:84:5e:e1:6a:44:21:
2a:24:cf:1c:70:72:d2:e0:c9:c6:59:64:c2:1c:40:
a1:0b:a0:0f:9e:2a:98:8d:a0:b8:44:d7:22:58:88:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C4:58:E3:45:5A:5C:7A:2E:87:35:C2:DE:34:6A:18:B5:05:02:DC
X509v3 Authority Key Identifier:
keyid:F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:95:a8:fd:a5:a4:0b:d3:2b:ed:02:c0:7c:84:d5:fb:d3:db:
49:ee:0b:51:93:73:1b:5c:b6:61:9b:5a:a5:cb:a9:95:80:d4:
e9:5c:4f:db:31:06:9d:bc:80:43:ab:4e:99:77:b6:34:bd:71:
f5:c8:d4:2c:b2:c5:71:a0:dd:e8:95:d9:d9:c0:fd:de:5b:f2:
22:65:70:53:e8:ab:4d:b6:0b:4c:1e:04:99:7b:48:dd:a2:5d:
c3:41:a0:96:d7:8c:d9:ab:0d:c5:ce:31:f4:02:ee:7b:9e:df:
9c:3c:66:bc:b5:14:99:82:b8:cf:4d:b0:26:9d:5a:38:3a:62:
e0:26:ae:49:5c:91:3b:33:3a:98:a7:62:aa:83:c6:e5:19:05:
0d:23:fb:99:85:c7:8e:9e:ce:1c:af:fa:9b:c9:ec:17:89:a4:
94:13:7f:60:40:61:fc:d3:19:82:c1:67:23:12:25:c5:7b:98:
6c:57:2e:f6:33:12:53:c0:d6:2c:d0:25:43:41:68:aa:73:b6:
88:5e:ee:b0:34:d2:bf:11:28:7d:01:11:95:48:15:c1:33:91:
ef:da:80:68:fc:48:2b:78:4d:1e:01:63:50:71:17:eb:68:88:
de:e9:d2:86:11:23:2e:c1:2b:e0:6c:9c:80:84:d0:3d:58:17:
d9:6b:9e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnqwDIwcAAM4id4PAsTqQ1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMzVlZDY2YWMwMWQ3OTE3NWNlNGQ3OGY2NzJhMWZlNDcy
MDM3ODAwHhcNMjUxMDE2MDIwMTI4WhcNMjUxMDE3MDIwMTI4WjAzMTEwLwYDVQQD
EyhhNGM0NThlMzQ1NWE1YzdhMmU4NzM1YzJkZTM0NmExOGI1MDUwMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq/Qf+DdL9FOxggve5wGyWvZTtwn
uX7/w0ibdB2gsFsDA2HZLQzh8Q3UTbwXp8e6lwFtQSLN2VQV3T/9Tc+JZWmtZONk
4jIZZwolkvc+L4VXmGc/8kgxA4TFCRq6OvtK9zsbVJ0ksC3xS5X72AY5yX3MnU9+
CDThwVDj56E6N7fYNiVzCUfUSC/NaraTHvAknuD10hnYyvD84E3W90vVkIiPCzYW
3G/YnBX6dytA9Na5u8qTvZlDi+03LbrKDy7JuLxNJSEDRgpNOGjnhrcX/DWA79zQ
DGACubyEXuFqRCEqJM8ccHLS4MnGWWTCHEChC6APniqYjaC4RNciWIhS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTEWONFWlx6Loc1wt40ahi1BQLcMB8GA1UdIwQY
MBaAFPM17WasAdeRdc5NePZyof5HIDeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83OTg4ODktMjlkNC00ZjUzLWEwNDEt
NTBhY2JhZWVjN2NhLzEvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83OTg4ODktMjlkNC00ZjUzLWEwNDEtNTBhY2JhZWVjN2Nh
LzEvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpWo/aWk
C9Mr7QLAfITV+9PbSe4LUZNzG1y2YZtapcuplYDU6VxP2zEGnbyAQ6tOmXe2NL1x
9cjULLLFcaDd6JXZ2cD93lvyImVwU+irTbYLTB4EmXtI3aJdw0GglteM2asNxc4x
9ALue57fnDxmvLUUmYK4z02wJp1aODpi4CauSVyROzM6mKdiqoPG5RkFDSP7mYXH
jp7OHK/6m8nsF4mklBN/YEBh/NMZgsFnIxIlxXuYbFcu9jMSU8DWLNAlQ0FoqnO2
iF7usDTSvxEofQERlUgVwTOR79qAaPxIK3hNHgFjUHEX62iI3unShhEjLsEr4Gyc
gITQPVgX2WuePw==
-----END CERTIFICATE-----
Generated at Thu Oct 16 07:24:16 2025 by rpki-client