Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: M5Zd8GwWN47KiU41ZWs771n7kNvVrPSXcmRJPzziwXg=
Subject key identifier: A9:44:3E:D5:38:65:D2:45:CE:66:14:4D:20:55:47:76:40:FD:4C:74
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 019933B6FF4ECFCF882A403EC856F2BED9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 13:00:54 +0000
Manifest this update: Wed 10 Sep 2025 13:00:54 +0000
Manifest next update: Thu 11 Sep 2025 13:00:54 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: QFt6tY7qevo1dS1Q+VhZTtUJK08lY3bUFpmxqjfAjKQ=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:ff:4e:cf:cf:88:2a:40:3e:c8:56:f2:be:d9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Sep 10 13:00:54 2025 GMT
Not After : Sep 11 13:00:54 2025 GMT
Subject: CN=a9443ed53865d245ce66144d2055477640fd4c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:97:41:a9:f1:0b:24:1d:f4:14:ac:c7:92:
5a:07:ff:cf:2d:af:6f:b2:09:32:c6:7c:42:d1:13:
9c:62:7a:cb:b5:7d:82:a6:5b:73:b8:62:22:3a:aa:
5d:77:c9:ed:a2:cf:7f:e6:0f:12:a7:a8:f0:59:a8:
27:5b:37:80:c6:2a:f5:7c:d4:e4:e9:b6:15:a6:df:
1b:06:77:4a:ce:f4:cc:e5:b6:80:e6:3d:98:c4:90:
f3:3c:1d:1a:71:b9:e1:d9:d9:ea:ba:11:84:e9:e7:
29:d9:e0:db:99:de:4c:40:42:4a:84:21:c0:64:64:
67:de:ac:c8:18:21:c2:6f:15:6c:8f:a7:2f:f8:d8:
7a:2f:38:1d:b5:96:c1:26:38:9b:de:f8:f7:7d:f0:
f7:04:cf:11:fa:1d:6c:a8:29:05:fe:cc:88:c8:e7:
19:b4:e4:99:33:d4:3b:2a:51:68:05:f0:3d:b8:af:
73:23:9a:1a:c1:4e:7c:e3:2a:8b:28:be:7f:3d:75:
d2:0d:b1:f2:8a:bd:bf:7e:62:29:bf:04:e7:c4:5f:
04:ee:30:a4:5d:d1:84:e7:c2:2a:cf:65:fb:26:5c:
9a:99:77:b1:5b:a1:e6:a8:1c:06:ed:86:29:f7:a6:
22:90:37:3d:54:5b:49:3f:43:10:41:bc:50:b9:41:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:3E:D5:38:65:D2:45:CE:66:14:4D:20:55:47:76:40:FD:4C:74
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:14:df:5e:d9:fb:ff:10:5e:eb:7c:b9:57:82:1f:66:b1:13:
bc:01:13:94:51:39:1e:fc:24:30:5f:1d:cc:82:6e:8d:79:fa:
5a:d1:7c:41:79:37:a9:c1:41:41:03:cd:dd:f1:08:fb:d7:fb:
2c:c6:f4:b2:1d:1a:a2:e3:be:b9:2c:6a:11:5c:5e:9f:1f:18:
74:85:b3:4b:84:6c:51:24:0a:6f:d4:e7:2f:b3:89:69:04:00:
fe:e2:80:1a:da:f2:fd:ae:62:05:53:15:b8:3f:aa:ba:0d:3e:
ba:50:db:ad:7a:df:c9:19:08:8a:16:16:86:7d:d7:7e:16:18:
dd:5d:33:12:e0:d2:95:cd:69:27:e8:74:26:b9:3f:13:83:c3:
01:a8:25:72:b5:b3:0a:f9:b4:f5:5b:89:3a:01:76:6e:70:80:
b3:3f:af:16:0e:d0:8e:8b:56:9d:18:88:79:45:c3:2d:56:e2:
30:4c:55:02:12:3a:32:de:13:5a:5f:9c:cf:48:c9:cb:78:df:
26:a4:76:39:70:0a:4b:b3:82:f7:e9:9c:2e:5c:6d:cd:94:6d:
79:4d:f0:30:0c:cb:61:f9:be:36:fe:63:7d:4e:a8:52:ad:92:
27:98:e4:42:23:d1:0b:5e:4d:cb:58:47:52:b4:75:34:ac:23:
8c:f5:df:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkztv9Oz8+IKkA+yFbyvtmoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh
YWI2OWEwHhcNMjUwOTEwMTMwMDU0WhcNMjUwOTExMTMwMDU0WjAzMTEwLwYDVQQD
EyhhOTQ0M2VkNTM4NjVkMjQ1Y2U2NjE0NGQyMDU1NDc3NjQwZmQ0Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwriXQanxCyQd9BSsx5JaB//PLa9v
sgkyxnxC0ROcYnrLtX2CpltzuGIiOqpdd8ntos9/5g8Sp6jwWagnWzeAxir1fNTk
6bYVpt8bBndKzvTM5baA5j2YxJDzPB0acbnh2dnquhGE6ecp2eDbmd5MQEJKhCHA
ZGRn3qzIGCHCbxVsj6cv+Nh6LzgdtZbBJjib3vj3ffD3BM8R+h1sqCkF/syIyOcZ
tOSZM9Q7KlFoBfA9uK9zI5oawU584yqLKL5/PXXSDbHyir2/fmIpvwTnxF8E7jCk
XdGE58Iqz2X7JlyamXexW6HmqBwG7YYp96YikDc9VFtJP0MQQbxQuUGJowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlEPtU4ZdJFzmYUTSBVR3ZA/Ux0MB8GA1UdIwQY
MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt
OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm
LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhTfXtn7
/xBe63y5V4IfZrETvAETlFE5HvwkMF8dzIJujXn6WtF8QXk3qcFBQQPN3fEI+9f7
LMb0sh0aouO+uSxqEVxenx8YdIWzS4RsUSQKb9TnL7OJaQQA/uKAGtry/a5iBVMV
uD+qug0+ulDbrXrfyRkIihYWhn3XfhYY3V0zEuDSlc1pJ+h0Jrk/E4PDAaglcrWz
Cvm09VuJOgF2bnCAsz+vFg7QjotWnRiIeUXDLVbiMExVAhI6Mt4TWl+cz0jJy3jf
JqR2OXAKS7OC9+mcLlxtzZRteU3wMAzLYfm+Nv5jfU6oUq2SJ5jkQiPRC15Ny1hH
UrR1NKwjjPXf6Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:21:00 2025 by rpki-client