Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: 6y9XFi63+IO0k/AK4gWFezB7jl1RKttIoz4VYZriDHE=
Subject key identifier: AC:CB:E6:0A:96:1F:B2:0D:0E:7E:79:FC:86:69:94:4D:C2:45:EF:51
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 01993500D32E516227AA4962D7452D70DEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 035C
Signing time: Wed 10 Sep 2025 19:01:10 +0000
Manifest this update: Wed 10 Sep 2025 19:01:10 +0000
Manifest next update: Thu 11 Sep 2025 19:01:10 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: 1brsX8WoU1qdZaZ8VCYzfjRTI74SzAF2g4ELFOp3XJI=)
2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=)
3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=)
4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:d3:2e:51:62:27:aa:49:62:d7:45:2d:70:de:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Sep 10 19:01:10 2025 GMT
Not After : Sep 11 19:01:10 2025 GMT
Subject: CN=accbe60a961fb20d0e7e79fc8669944dc245ef51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:f0:48:0e:50:a3:b4:91:84:e9:06:aa:63:
40:6d:ff:61:d5:bc:54:36:c0:49:a6:02:23:d1:69:
cb:60:7c:e4:8c:9b:4b:36:d4:a8:0b:41:4d:ff:a9:
a9:7e:18:bb:b7:28:6b:ca:bd:8d:53:e8:54:f2:bd:
6b:77:3e:8a:9c:80:7a:60:e7:4c:08:87:a3:76:de:
2d:88:71:d0:ca:80:f0:93:cb:cc:82:9f:4b:d3:ea:
1b:ef:ac:4b:20:92:18:73:dd:23:dc:ce:73:b1:5d:
aa:4f:8b:5c:d6:81:e6:97:33:0a:04:dc:6b:d8:5d:
d0:19:37:a7:f9:6f:07:7b:1b:ed:cf:c4:08:fe:a0:
cf:27:ad:60:46:bd:ea:72:8f:af:30:84:37:47:a3:
e0:0e:62:1d:ab:0b:0b:04:c9:29:07:87:31:c6:d4:
24:18:ff:fe:f4:38:c9:f7:a7:f4:e3:57:a2:79:8a:
b9:71:67:42:02:5a:3f:5a:71:91:70:0a:8b:d3:c5:
7f:0e:08:99:70:ac:27:f8:1b:36:18:f5:db:e2:e5:
6d:96:13:4e:b2:c9:52:dc:f8:5a:c7:eb:32:5c:7e:
10:7a:67:6b:5c:8b:66:ce:5a:96:e1:70:9c:81:d9:
ca:8a:60:65:d6:6f:83:e9:73:c4:fb:c4:5e:28:74:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:E6:0A:96:1F:B2:0D:0E:7E:79:FC:86:69:94:4D:C2:45:EF:51
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:b2:00:72:3b:bc:ec:07:9f:43:07:6c:36:99:43:a7:e5:
23:8d:95:f7:30:7e:74:f2:fc:c1:31:19:26:63:cd:38:1c:ba:
d3:75:b1:43:eb:7d:19:ec:f6:fb:f7:b8:30:ee:1d:26:1c:4e:
27:83:94:77:0a:68:2a:0b:78:84:d0:96:72:19:cc:88:f0:c1:
d1:3b:05:58:b1:e5:ce:f8:89:db:8f:7d:11:b1:a1:84:d3:05:
0d:47:25:0c:f7:de:de:cd:0a:91:73:56:91:86:97:14:67:a8:
e4:3f:1c:66:ea:f9:4f:42:2c:7e:13:d8:10:e2:99:42:e9:0f:
11:4f:04:38:b9:9b:40:aa:d7:68:10:6e:75:9b:c7:64:af:94:
bf:0a:18:4d:fb:fc:9d:6b:e8:76:4d:e3:c0:de:d4:31:03:a3:
7c:17:0a:47:f2:ac:f9:02:d9:23:f3:92:17:0c:68:10:af:9e:
f6:31:e1:d7:c2:4b:bb:22:06:81:9b:f9:ac:0e:ab:66:89:bf:
61:74:95:b1:6a:ad:63:33:28:7d:d6:8b:c6:17:49:d4:3a:84:
94:3e:4c:cc:a1:06:a2:98:c9:8e:d4:5f:b9:9c:17:16:f7:6c:
15:b3:d5:b0:5e:41:b8:12:83:d7:da:7b:90:ae:df:69:4f:a8:
76:35:a4:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1ANMuUWInqkli10UtcN73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0
ZWE3YTUwHhcNMjUwOTEwMTkwMTEwWhcNMjUwOTExMTkwMTEwWjAzMTEwLwYDVQQD
EyhhY2NiZTYwYTk2MWZiMjBkMGU3ZTc5ZmM4NjY5OTQ0ZGMyNDVlZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8LwSA5Qo7SRhOkGqmNAbf9h1bxU
NsBJpgIj0WnLYHzkjJtLNtSoC0FN/6mpfhi7tyhryr2NU+hU8r1rdz6KnIB6YOdM
CIejdt4tiHHQyoDwk8vMgp9L0+ob76xLIJIYc90j3M5zsV2qT4tc1oHmlzMKBNxr
2F3QGTen+W8Hexvtz8QI/qDPJ61gRr3qco+vMIQ3R6PgDmIdqwsLBMkpB4cxxtQk
GP/+9DjJ96f041eieYq5cWdCAlo/WnGRcAqL08V/DgiZcKwn+Bs2GPXb4uVtlhNO
sslS3Phax+syXH4QemdrXItmzlqW4XCcgdnKimBl1m+D6XPE+8ReKHQmcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzL5gqWH7INDn55/IZplE3CRe9RMB8GA1UdIwQY
MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt
YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm
LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiSyAHI7
vOwHn0MHbDaZQ6flI42V9zB+dPL8wTEZJmPNOBy603WxQ+t9Gez2+/e4MO4dJhxO
J4OUdwpoKgt4hNCWchnMiPDB0TsFWLHlzviJ2499EbGhhNMFDUclDPfe3s0KkXNW
kYaXFGeo5D8cZur5T0IsfhPYEOKZQukPEU8EOLmbQKrXaBBudZvHZK+UvwoYTfv8
nWvodk3jwN7UMQOjfBcKR/Ks+QLZI/OSFwxoEK+e9jHh18JLuyIGgZv5rA6rZom/
YXSVsWqtYzMofdaLxhdJ1DqElD5MzKEGopjJjtRfuZwXFvdsFbPVsF5BuBKD19p7
kK7faU+odjWkTg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:39:26 2025 by rpki-client