Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: hinhd9VFPToL/Yx9m6FcIgDxhCFWEXRQcpB9nYG2T+E=
Subject key identifier: 01:61:47:29:E6:18:C4:FC:B2:EB:2E:0A:92:83:CE:97:12:C5:18:58
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019922C337A50F699E8B7314A683DFFBD0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 11F3
Signing time: Sun 07 Sep 2025 06:00:42 +0000
Manifest this update: Sun 07 Sep 2025 06:00:42 +0000
Manifest next update: Mon 08 Sep 2025 06:00:42 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: mdeGGLv4xVnm1Rjg3dKO/51qh5XKNHLGkpZ5W3N/QB4=)
2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:37:a5:0f:69:9e:8b:73:14:a6:83:df:fb:d0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Sep 7 06:00:42 2025 GMT
Not After : Sep 8 06:00:42 2025 GMT
Subject: CN=01614729e618c4fcb2eb2e0a9283ce9712c51858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:60:1b:ad:68:f4:5a:f7:8b:ef:85:e9:cf:
77:9b:75:82:20:7f:cc:84:80:51:a6:42:b3:7c:13:
51:a4:35:75:72:a3:59:86:d8:33:da:db:90:35:c5:
39:a1:ed:54:57:6c:ee:ec:b9:2e:b6:e1:f1:00:d1:
11:19:96:ff:30:00:24:fe:0c:3c:85:d4:a0:e7:c4:
32:6b:61:e0:7c:d2:05:87:66:9e:c1:e5:c7:90:25:
90:ae:4c:cd:1b:ce:2c:cd:75:82:53:e5:08:09:20:
56:d5:2a:8f:c9:76:1e:d8:d1:8b:0b:d8:de:68:c8:
f4:b6:4d:11:b4:6b:ed:ff:b7:b6:94:4a:01:c3:a9:
d7:6d:c6:1b:97:2c:ee:c9:6a:48:21:97:26:da:4a:
d4:b1:a2:f9:dc:01:bb:09:3c:e1:4d:61:fb:45:5d:
d0:cb:86:f7:e7:ea:07:ee:21:a7:40:b1:a4:67:fb:
9c:5d:6b:05:38:5d:a4:2b:46:d6:7e:3c:16:cc:10:
72:e0:b6:69:8c:38:aa:75:4c:0a:02:31:f3:18:f1:
f0:d9:d1:15:bb:a3:d0:58:f9:71:b1:44:db:65:33:
5f:31:0e:87:77:60:25:e5:7e:bc:67:dd:2b:74:1f:
42:82:a7:9e:37:4d:5d:6c:82:98:79:32:f3:b5:a3:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:47:29:E6:18:C4:FC:B2:EB:2E:0A:92:83:CE:97:12:C5:18:58
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5f:dc:96:08:72:df:00:a3:d7:4a:b4:70:b8:48:58:63:26:
08:f9:85:ff:3b:2d:fd:04:86:97:38:fe:01:45:cd:3a:2a:bd:
d8:a9:29:f4:ef:94:de:a4:9f:26:bd:33:d2:b8:dc:05:e3:e7:
e0:5a:8e:de:1b:f5:df:cf:77:fb:6f:9e:e6:06:1e:86:4e:6b:
ad:b1:08:31:b1:2c:fc:d7:d2:de:2e:f9:d1:40:e5:d1:ec:df:
2e:35:88:40:33:fc:bb:25:72:9d:03:b1:d6:fb:23:8b:ba:1c:
48:76:ff:b8:fb:dd:6a:cc:5f:4a:97:86:f4:6f:57:5f:50:c6:
80:f6:a2:70:ee:7a:3c:62:73:71:2d:dd:fd:ec:2c:2d:52:15:
dc:8c:57:0c:f2:da:12:91:b8:b5:a1:8b:78:02:34:ba:c4:aa:
87:05:75:61:0a:fe:7d:38:b4:2a:a6:63:88:9f:c9:84:c5:34:
ac:71:50:86:6e:9c:37:04:6c:34:66:7e:fc:87:bb:8f:de:0d:
b6:6e:db:5c:8f:99:ca:e0:9f:64:6a:4b:f5:77:77:7e:29:c6:
9e:89:63:4b:db:f5:c3:2e:5a:9b:74:a5:b5:32:8c:d9:7a:7d:
f5:5a:80:77:72:30:c9:a7:e1:8b:ef:f7:96:7f:f7:4b:3a:d1:
a1:8f:22:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwzelD2mei3MUpoPf+9D0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj
NDE0YzcwHhcNMjUwOTA3MDYwMDQyWhcNMjUwOTA4MDYwMDQyWjAzMTEwLwYDVQQD
EygwMTYxNDcyOWU2MThjNGZjYjJlYjJlMGE5MjgzY2U5NzEyYzUxODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2odgG61o9Fr3i++F6c93m3WCIH/M
hIBRpkKzfBNRpDV1cqNZhtgz2tuQNcU5oe1UV2zu7LkutuHxANERGZb/MAAk/gw8
hdSg58Qya2HgfNIFh2aeweXHkCWQrkzNG84szXWCU+UICSBW1SqPyXYe2NGLC9je
aMj0tk0RtGvt/7e2lEoBw6nXbcYblyzuyWpIIZcm2krUsaL53AG7CTzhTWH7RV3Q
y4b35+oH7iGnQLGkZ/ucXWsFOF2kK0bWfjwWzBBy4LZpjDiqdUwKAjHzGPHw2dEV
u6PQWPlxsUTbZTNfMQ6Hd2Al5X68Z90rdB9CgqeeN01dbIKYeTLztaMNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFhRynmGMT8susuCpKDzpcSxRhYMB8GA1UdIwQY
MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt
NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3
LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1/clghy
3wCj10q0cLhIWGMmCPmF/zst/QSGlzj+AUXNOiq92Kkp9O+U3qSfJr0z0rjcBePn
4FqO3hv13893+2+e5gYehk5rrbEIMbEs/NfS3i750UDl0ezfLjWIQDP8uyVynQOx
1vsji7ocSHb/uPvdasxfSpeG9G9XX1DGgPaicO56PGJzcS3d/ewsLVIV3IxXDPLa
EpG4taGLeAI0usSqhwV1YQr+fTi0KqZjiJ/JhMU0rHFQhm6cNwRsNGZ+/Ie7j94N
tm7bXI+ZyuCfZGpL9Xd3finGnoljS9v1wy5am3SltTKM2Xp99VqAd3Iwyafhi+/3
ln/3SzrRoY8iNQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:45 2025 by rpki-client