Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: ry/8XmlZ/FHZUSO9vu5hyC+mEjEqd3LZnQ4XGSy0EVs=
Subject key identifier: 43:3D:CE:3A:DA:8E:86:27:41:26:D3:9B:A3:89:16:2D:DE:1E:94:8E
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0199269FC8D87CF11D0EA6ADD27659BBCF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 0C3C
Signing time: Mon 08 Sep 2025 00:00:29 +0000
Manifest this update: Mon 08 Sep 2025 00:00:29 +0000
Manifest next update: Tue 09 Sep 2025 00:00:29 +0000
Files and hashes: 1: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (hash: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=)
2: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
3: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: xpPC168ySHh487A68QNFNO6h4UGCryFYJePPbYazsYk=)
4: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
5: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
6: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
7: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
8: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:9f:c8:d8:7c:f1:1d:0e:a6:ad:d2:76:59:bb:cf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Sep 8 00:00:29 2025 GMT
Not After : Sep 9 00:00:29 2025 GMT
Subject: CN=433dce3ada8e86274126d39ba389162dde1e948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:63:b1:55:fd:48:be:6c:77:04:f9:5b:ef:
72:9f:34:0c:bd:42:b2:5c:ed:2c:a5:da:01:94:ff:
31:da:fe:94:87:69:68:5d:af:b8:c4:05:ac:54:21:
10:ba:5a:18:67:77:5c:4f:22:34:f6:21:47:43:f5:
14:14:a6:10:25:a4:17:60:f0:82:0f:80:34:e8:78:
a4:4a:5e:f2:5f:1e:33:ee:45:e5:43:8e:0d:d0:c7:
51:13:d5:df:3b:7e:72:bc:21:8b:48:ba:c4:11:a9:
18:e6:96:d8:38:a3:31:f8:d7:a4:48:ef:2d:8d:c7:
04:28:44:b1:dc:ad:d2:50:9f:a2:d6:e3:01:e1:a3:
bd:66:9f:4a:99:ba:9b:1a:44:b0:71:f1:15:9f:a7:
1c:b3:86:0b:5c:2d:6b:20:fa:a3:8e:86:15:f9:f5:
ee:a4:bd:6d:f8:cb:65:4f:06:6b:42:1b:4e:98:23:
c6:af:38:98:4d:cf:09:2d:19:87:a6:55:a6:9e:22:
b8:9f:a1:54:9e:fc:4c:8f:52:97:d1:c8:a6:0a:c0:
05:f0:d0:1f:2c:9c:2a:62:3e:e0:88:e6:45:ae:6c:
1a:a5:b2:b7:fb:1e:a2:f3:e4:24:77:c7:84:04:a6:
85:24:f2:43:2d:75:48:57:61:7b:d6:a0:11:53:40:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3D:CE:3A:DA:8E:86:27:41:26:D3:9B:A3:89:16:2D:DE:1E:94:8E
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d5:d4:5e:5d:f0:be:d2:0e:fc:71:02:b3:76:14:dc:e9:be:
ba:ca:08:3f:78:e4:b4:dc:d3:f5:bc:d3:2d:09:34:7d:8e:6e:
32:ad:bb:f9:29:bd:44:6e:af:b7:37:54:52:03:50:83:e8:41:
e8:aa:44:51:ee:bf:ee:da:0d:7c:ac:42:d3:ac:12:d8:d5:c6:
d9:8f:f7:0d:27:f8:37:55:2b:5c:b0:2e:9f:36:1a:37:07:a2:
f4:f9:08:50:67:d8:99:28:77:db:69:1a:d5:ba:9b:91:5e:b4:
dd:65:64:3d:00:83:40:be:c4:9c:f3:67:d9:f7:3e:96:7d:80:
f8:f2:b6:4f:39:b0:89:5e:81:ed:65:b9:7e:97:ab:9d:c6:7f:
47:89:16:36:34:f9:c8:34:c5:c0:27:f9:a0:54:a4:0f:13:73:
a3:77:2b:53:dc:ab:f4:b1:49:c9:9c:4b:ef:05:29:a9:8d:1b:
77:e0:6a:64:c6:f0:16:da:41:5a:75:e2:1f:d3:12:4f:2d:b3:
1f:ce:7c:c2:87:83:3c:06:55:45:1c:d1:ed:82:3e:0e:6a:64:
d1:a9:c2:84:be:1f:af:d6:8f:24:80:d5:8f:b6:0e:72:36:79:
8f:85:8a:11:72:6f:a6:f2:85:54:d7:65:b2:58:9c:c7:4e:1c:
82:f7:2b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkmn8jYfPEdDqat0nZZu88eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjUwOTA4MDAwMDI5WhcNMjUwOTA5MDAwMDI5WjAzMTEwLwYDVQQD
Eyg0MzNkY2UzYWRhOGU4NjI3NDEyNmQzOWJhMzg5MTYyZGRlMWU5NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8RjsVX9SL5sdwT5W+9ynzQMvUKy
XO0spdoBlP8x2v6Uh2loXa+4xAWsVCEQuloYZ3dcTyI09iFHQ/UUFKYQJaQXYPCC
D4A06HikSl7yXx4z7kXlQ44N0MdRE9XfO35yvCGLSLrEEakY5pbYOKMx+NekSO8t
jccEKESx3K3SUJ+i1uMB4aO9Zp9KmbqbGkSwcfEVn6ccs4YLXC1rIPqjjoYV+fXu
pL1t+MtlTwZrQhtOmCPGrziYTc8JLRmHplWmniK4n6FUnvxMj1KX0cimCsAF8NAf
LJwqYj7giOZFrmwapbK3+x6i8+Qkd8eEBKaFJPJDLXVIV2F71qARU0BvVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEM9zjrajoYnQSbTm6OJFi3eHpSOMB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNXUXl3w
vtIO/HECs3YU3Om+usoIP3jktNzT9bzTLQk0fY5uMq27+Sm9RG6vtzdUUgNQg+hB
6KpEUe6/7toNfKxC06wS2NXG2Y/3DSf4N1UrXLAunzYaNwei9PkIUGfYmSh322ka
1bqbkV603WVkPQCDQL7EnPNn2fc+ln2A+PK2TzmwiV6B7WW5fperncZ/R4kWNjT5
yDTFwCf5oFSkDxNzo3crU9yr9LFJyZxL7wUpqY0bd+BqZMbwFtpBWnXiH9MSTy2z
H858woeDPAZVRRzR7YI+Dmpk0anChL4fr9aPJIDVj7YOcjZ5j4WKEXJvpvKFVNdl
slicx04cgvcr1Q==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:40 2025 by rpki-client