Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: coM24zdCiFVdyUqB2aOKxuc2aCV4CFsehUQuNMcmZcM=
Subject key identifier: 77:20:A2:8D:22:49:57:75:A2:FC:18:07:42:96:09:97:F7:B5:AE:FC
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 01991D65E78021509A1211EE68A096364EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1674
Signing time: Sat 06 Sep 2025 05:00:41 +0000
Manifest this update: Sat 06 Sep 2025 05:00:41 +0000
Manifest next update: Sun 07 Sep 2025 05:00:41 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: zNxEk4EB0Oj3zgzT9qm7aj+O3NoXnxhwKVXd8GoZ/HM=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:65:e7:80:21:50:9a:12:11:ee:68:a0:96:36:4e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Sep 6 05:00:41 2025 GMT
Not After : Sep 7 05:00:41 2025 GMT
Subject: CN=7720a28d22495775a2fc180742960997f7b5aefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:a3:27:df:4c:60:fd:ad:10:6e:ad:82:8e:
91:c0:ef:a2:4e:ba:e1:65:22:b2:5a:8b:a8:f8:a6:
38:81:a3:09:b1:7a:4a:0a:8b:5b:f0:2c:49:a4:24:
af:4e:d2:e1:88:d6:a3:21:d7:ad:77:bb:77:68:05:
89:2f:75:7e:a3:94:68:a7:2f:c9:f8:d5:83:5c:02:
c1:c0:44:6c:a0:13:87:76:47:33:0d:04:4d:a8:8a:
12:55:0d:24:2f:52:32:07:82:db:c7:f8:2e:af:a7:
34:49:2e:68:39:95:34:77:fb:81:ed:b7:0c:b7:45:
e6:b6:ee:3c:47:a6:03:60:b0:e1:a4:a3:31:d0:22:
49:a8:7d:3e:8a:bf:25:d7:12:be:25:b9:29:ce:b4:
23:10:19:2f:02:b7:24:b8:8a:e9:a5:0d:1a:9f:ca:
5d:3c:b0:ad:30:60:a9:d6:c2:8f:31:68:b2:be:97:
8e:28:d8:ff:00:b1:45:50:df:6c:7f:f4:c7:ec:36:
ee:44:00:31:34:ae:59:8e:1a:ac:12:b7:9b:6a:a3:
3e:05:00:c3:f9:25:b5:09:d3:fc:1c:af:e0:27:79:
81:f1:72:e8:9c:c9:b2:cb:8c:76:bb:d2:bc:f6:b7:
fb:84:37:1f:85:7f:35:02:b1:6a:3b:a8:48:6c:72:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:20:A2:8D:22:49:57:75:A2:FC:18:07:42:96:09:97:F7:B5:AE:FC
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:16:bb:a8:e5:06:f1:de:79:7a:1c:83:de:46:0b:bb:8f:2e:
ad:c1:d1:d0:46:24:a7:54:21:b8:b2:74:04:ac:ec:1d:5e:60:
bf:93:61:97:92:61:eb:16:d7:d4:2b:06:b2:a6:81:bc:be:e7:
4b:90:20:e7:ce:3e:f1:30:f8:82:ed:ad:6c:8d:68:23:77:4d:
7d:bc:e4:a5:ef:e7:ef:65:90:a7:e3:bf:a4:cd:c0:43:cd:0c:
24:99:b1:23:3f:79:2a:40:c0:f7:50:1d:e8:41:7c:82:2a:49:
6f:66:c3:c7:92:f8:b3:17:85:88:ae:8b:1b:a3:c7:0f:25:90:
9e:02:35:2c:4e:42:f7:0e:ec:32:86:7c:61:ef:3d:6f:3e:25:
e2:32:ae:36:1e:86:3b:fa:3c:28:33:25:65:fd:dd:4c:b7:5d:
34:e1:78:33:b1:c1:40:8f:96:b8:ca:4c:ac:47:35:d5:30:31:
29:37:e9:b9:a6:0b:86:c1:bb:3d:38:af:08:8a:20:9b:50:7a:
f0:ea:24:d6:92:c0:3a:58:11:55:26:96:e1:83:ce:42:f5:b3:
a1:52:13:71:98:e8:63:1a:73:97:14:c8:bb:8b:35:86:cc:46:
b8:0a:05:e8:ad:3c:c4:1c:b5:83:7c:02:16:62:23:1e:9d:76:
64:33:82:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkdZeeAIVCaEhHuaKCWNk63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh
MWQwMzQwHhcNMjUwOTA2MDUwMDQxWhcNMjUwOTA3MDUwMDQxWjAzMTEwLwYDVQQD
Eyg3NzIwYTI4ZDIyNDk1Nzc1YTJmYzE4MDc0Mjk2MDk5N2Y3YjVhZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SKjJ99MYP2tEG6tgo6RwO+iTrrh
ZSKyWouo+KY4gaMJsXpKCotb8CxJpCSvTtLhiNajIdetd7t3aAWJL3V+o5Ropy/J
+NWDXALBwERsoBOHdkczDQRNqIoSVQ0kL1IyB4Lbx/gur6c0SS5oOZU0d/uB7bcM
t0Xmtu48R6YDYLDhpKMx0CJJqH0+ir8l1xK+JbkpzrQjEBkvArckuIrppQ0an8pd
PLCtMGCp1sKPMWiyvpeOKNj/ALFFUN9sf/TH7DbuRAAxNK5ZjhqsErebaqM+BQDD
+SW1CdP8HK/gJ3mB8XLonMmyy4x2u9K89rf7hDcfhX81ArFqO6hIbHLvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcgoo0iSVd1ovwYB0KWCZf3ta78MB8GA1UdIwQY
MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHha7qOUG
8d55ehyD3kYLu48urcHR0EYkp1QhuLJ0BKzsHV5gv5Nhl5Jh6xbX1CsGsqaBvL7n
S5Ag584+8TD4gu2tbI1oI3dNfbzkpe/n72WQp+O/pM3AQ80MJJmxIz95KkDA91Ad
6EF8gipJb2bDx5L4sxeFiK6LG6PHDyWQngI1LE5C9w7sMoZ8Ye89bz4l4jKuNh6G
O/o8KDMlZf3dTLddNOF4M7HBQI+WuMpMrEc11TAxKTfpuaYLhsG7PTivCIogm1B6
8Ook1pLAOlgRVSaW4YPOQvWzoVITcZjoYxpzlxTIu4s1hsxGuAoF6K08xBy1g3wC
FmIjHp12ZDOCIw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:09:23 2025 by rpki-client