Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier: IIBJWDFf+ADYfbt3ws/q9u/OXHdzaU153kJrbJpFnzM=
Subject key identifier: 2E:92:06:7C:E1:5B:4F:B6:AD:1A:69:EE:E2:72:5E:BD:40:AE:94:63
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 019921B11A9C9BAE1E4A4B54BD1F9EB70933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number: 0A1B
Signing time: Sun 07 Sep 2025 01:01:18 +0000
Manifest this update: Sun 07 Sep 2025 01:01:18 +0000
Manifest next update: Mon 08 Sep 2025 01:01:18 +0000
Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: 4vq0puM33qjDhTuJGfmp24qYTEL6GdWb1pvyqwZBbVg=)
2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:1a:9c:9b:ae:1e:4a:4b:54:bd:1f:9e:b7:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Sep 7 01:01:18 2025 GMT
Not After : Sep 8 01:01:18 2025 GMT
Subject: CN=2e92067ce15b4fb6ad1a69eee2725ebd40ae9463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:c7:1d:88:87:30:98:b1:6e:e0:97:3f:60:
1e:e1:11:9a:7c:9a:f7:28:d8:97:32:50:2c:67:57:
c0:53:1a:6b:ce:44:28:31:ca:85:7d:22:c1:e8:20:
93:39:4f:0e:68:88:fa:c2:ae:a9:52:48:c1:0b:eb:
51:53:91:63:e4:3c:30:d4:14:7a:d5:0a:b3:16:49:
a6:8f:54:c4:96:79:41:f8:fd:3f:82:2d:24:3e:4f:
d1:71:7e:bc:2d:36:d0:19:ae:ed:a3:4c:1b:66:16:
97:c8:20:95:6c:69:e8:32:54:35:7c:f3:bf:81:60:
fa:1b:f0:50:be:cb:7a:84:0c:07:e4:fe:34:95:e3:
64:4b:30:5b:03:c3:80:ae:7f:ee:69:36:22:36:fc:
14:57:63:30:98:e6:3c:e0:a3:9f:d4:3e:5d:b8:36:
8c:2c:8c:5c:e1:48:11:28:48:d1:b4:84:69:6b:22:
6e:4d:0a:de:80:be:4d:85:b6:5e:3b:3c:86:4a:7d:
29:84:8f:f6:eb:25:b1:93:61:7b:71:10:d8:17:78:
37:e7:5d:d4:ae:6b:38:97:58:81:81:21:f9:12:79:
a2:83:b4:b8:d6:71:77:b6:f0:ab:b9:61:7d:cb:22:
81:2e:9d:4e:6e:17:8d:5c:dc:5f:16:35:1e:a8:f4:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:06:7C:E1:5B:4F:B6:AD:1A:69:EE:E2:72:5E:BD:40:AE:94:63
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:53:63:b3:a3:49:2d:fe:f4:b5:c4:35:de:9a:ff:71:b2:8c:
65:3b:7b:7f:da:65:f2:88:f5:cd:3b:fa:58:97:59:57:d0:7f:
41:e5:70:2f:15:44:a5:3d:f8:fa:cc:37:e4:53:ad:75:1a:7f:
97:53:d5:23:ef:27:0c:96:04:cc:01:d6:9c:04:44:25:c4:43:
22:a8:9a:f5:42:09:b6:b5:d6:4f:e0:c0:ad:d7:49:3e:15:d7:
8c:61:d5:54:e8:f1:1e:eb:ea:d1:4d:db:9a:59:cd:c9:88:91:
c6:a7:01:da:f2:e9:4e:82:2f:48:00:22:01:c4:32:40:ed:bd:
d0:8c:a9:05:7c:6e:73:9f:4e:39:62:25:26:f7:7f:7d:34:d3:
b0:7e:0d:20:ee:ff:c8:36:ca:d3:96:6a:b0:97:4f:59:ac:76:
be:b2:54:57:35:a9:ff:fc:14:df:08:a3:73:f1:56:c7:e3:37:
72:89:55:7d:53:66:e7:6f:c8:80:6b:a2:c4:19:f7:43:cf:f6:
da:4a:45:c8:f7:de:eb:90:19:6e:52:d9:86:e5:58:5e:f2:9f:
a4:af:27:20:08:09:12:ce:4e:0a:ff:1f:97:1c:24:0f:88:d3:
cd:bf:8f:12:98:19:bf:66:d8:db:a8:2a:f7:f5:d3:f0:f8:bd:
1c:49:05:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsRqcm64eSktUvR+etwkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjdmYTdlMTk0NzJlNTgzYjcyMDkzNmMzOWQwZmQyNDI2
NjE5ZmQwHhcNMjUwOTA3MDEwMTE4WhcNMjUwOTA4MDEwMTE4WjAzMTEwLwYDVQQD
EygyZTkyMDY3Y2UxNWI0ZmI2YWQxYTY5ZWVlMjcyNWViZDQwYWU5NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdrHHYiHMJixbuCXP2Ae4RGafJr3
KNiXMlAsZ1fAUxprzkQoMcqFfSLB6CCTOU8OaIj6wq6pUkjBC+tRU5Fj5Dww1BR6
1QqzFkmmj1TElnlB+P0/gi0kPk/RcX68LTbQGa7to0wbZhaXyCCVbGnoMlQ1fPO/
gWD6G/BQvst6hAwH5P40leNkSzBbA8OArn/uaTYiNvwUV2MwmOY84KOf1D5duDaM
LIxc4UgRKEjRtIRpayJuTQregL5NhbZeOzyGSn0phI/26yWxk2F7cRDYF3g3513U
rms4l1iBgSH5Enmig7S41nF3tvCruWF9yyKBLp1ObheNXNxfFjUeqPR0RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6SBnzhW0+2rRpp7uJyXr1ArpRjMB8GA1UdIwQY
MBaAFPMn+n4ZRy5YO3IJNsOdD9JCZhn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2Yt
MjNjMTYyNjNjZjNiLzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2YtMjNjMTYyNjNjZjNi
LzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVNjs6NJ
Lf70tcQ13pr/cbKMZTt7f9pl8oj1zTv6WJdZV9B/QeVwLxVEpT34+sw35FOtdRp/
l1PVI+8nDJYEzAHWnAREJcRDIqia9UIJtrXWT+DArddJPhXXjGHVVOjxHuvq0U3b
mlnNyYiRxqcB2vLpToIvSAAiAcQyQO290IypBXxuc59OOWIlJvd/fTTTsH4NIO7/
yDbK05ZqsJdPWax2vrJUVzWp//wU3wijc/FWx+M3colVfVNm52/IgGuixBn3Q8/2
2kpFyPfe65AZblLZhuVYXvKfpK8nIAgJEs5OCv8flxwkD4jTzb+PEpgZv2bY26gq
9/XT8Pi9HEkFYg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:29 2025 by rpki-client