Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: YtG0YmtJORRDk8h0iAwTjVdvxdENgUFtrO4E4mKtizI=
Subject key identifier: 74:62:F7:05:64:86:A1:6F:93:9D:FA:BE:DB:69:EC:B4:41:E4:E3:26
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019A71EE7B30F0FCBA0F24551C5762C572A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 04FA
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: T4y5qfgv3dG7Sr6AB9XflaNvgZSZRJPjPIJjOc3zrdI=)
2: ZEIkHOpAjx_99PsiN5R21UlMSKc.roa (hash: vTffovFaT4NCjWWk8Fwv+MgUP11pdffCPeTnPWoxFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7b:30:f0:fc:ba:0f:24:55:1c:57:62:c5:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=7462f7056486a16f939dfabedb69ecb441e4e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3e:be:71:15:89:3b:f7:1c:02:47:c0:61:b6:
2d:1b:ea:ec:42:87:4d:c3:9a:a8:00:91:c2:59:54:
c7:6a:15:d8:1b:56:68:c9:62:9b:cc:01:cc:ac:c8:
a2:34:3b:08:0d:17:f0:6a:03:49:e4:30:d6:fe:fc:
46:ef:ba:9a:5a:5e:61:63:e3:b2:85:60:7e:73:ea:
9b:2d:87:4c:f7:38:48:71:b2:4d:21:bc:83:9b:4c:
9c:16:14:34:5d:e3:28:c7:4a:4e:36:01:43:d6:4d:
3f:09:3d:e2:06:fd:55:20:ef:e3:47:be:66:bc:b6:
a2:16:92:01:25:32:6b:54:0a:99:26:6d:76:e0:1f:
d8:82:f7:9f:5d:29:3a:07:68:77:3a:62:35:c2:0a:
b9:88:9b:4c:ce:96:86:1b:9f:54:32:03:4a:49:ad:
00:07:95:98:56:4b:86:0f:a3:f4:41:8a:7c:4b:21:
47:6c:d2:94:e5:eb:43:49:34:7b:0e:1b:ac:23:fe:
8c:23:2e:98:e0:f8:99:43:c0:c3:5c:33:0d:89:f6:
81:4b:7d:28:d6:38:3a:36:ef:4b:5a:fa:5e:90:46:
0e:3c:2b:f3:21:c2:00:1d:fe:f5:c4:3f:51:99:5b:
f0:1c:e5:3d:75:37:12:b8:30:e9:79:db:c0:2b:90:
7f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:F7:05:64:86:A1:6F:93:9D:FA:BE:DB:69:EC:B4:41:E4:E3:26
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:35:57:08:a1:e6:4d:12:be:00:79:93:da:f6:f5:df:ae:2b:
da:4f:ca:00:98:51:0a:6f:78:e5:2b:e4:27:65:52:dc:56:fb:
00:a6:74:c9:64:83:61:32:f9:80:5e:f4:7f:81:cf:89:1c:22:
72:eb:22:21:ae:ce:d6:ba:1c:b5:0f:cd:d2:52:da:0c:e3:e0:
a2:35:91:ec:44:7e:15:1e:60:58:91:ba:4c:a7:31:e8:6b:e0:
30:92:51:0b:60:24:07:02:9f:4e:53:cf:58:96:37:8b:6b:7b:
f2:b0:48:4a:d3:91:3d:5a:02:19:a8:71:1c:98:d2:37:eb:bd:
b6:e6:6e:47:db:d2:c8:67:c3:ca:27:72:6f:d4:eb:b2:82:15:
91:97:94:17:82:e3:e9:b8:f6:35:6f:7a:81:e8:2e:fb:df:77:
9d:97:6b:e8:46:a0:e0:97:e2:b2:88:e1:42:67:f0:d3:06:4d:
43:10:9d:50:64:4a:d4:e9:b2:3f:66:ba:d2:45:db:a6:4e:fc:
05:d1:61:92:c3:0a:81:b8:98:d4:e6:b3:b0:9d:fe:ad:5c:f5:
de:d8:d1:ee:63:82:5a:4a:7f:f1:74:16:47:0d:e5:4d:85:4d:
25:7a:b5:e9:2a:88:77:5f:47:97:b1:cf:23:6b:d2:3a:3b:65:
0f:b1:9b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nsw8Py6DyRVHFdixXKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmIyZWZiNGVjMWU5YjZmNmM2ZDBiYTI2MDc0N2E5YzNl
MGFkY2EwHhcNMjUxMTExMDgwMDQ1WhcNMjUxMTEyMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg3NDYyZjcwNTY0ODZhMTZmOTM5ZGZhYmVkYjY5ZWNiNDQxZTRlMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij6+cRWJO/ccAkfAYbYtG+rsQodN
w5qoAJHCWVTHahXYG1ZoyWKbzAHMrMiiNDsIDRfwagNJ5DDW/vxG77qaWl5hY+Oy
hWB+c+qbLYdM9zhIcbJNIbyDm0ycFhQ0XeMox0pONgFD1k0/CT3iBv1VIO/jR75m
vLaiFpIBJTJrVAqZJm124B/YgvefXSk6B2h3OmI1wgq5iJtMzpaGG59UMgNKSa0A
B5WYVkuGD6P0QYp8SyFHbNKU5etDSTR7DhusI/6MIy6Y4PiZQ8DDXDMNifaBS30o
1jg6Nu9LWvpekEYOPCvzIcIAHf71xD9RmVvwHOU9dTcSuDDpedvAK5B/BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRi9wVkhqFvk536vttp7LRB5OMmMB8GA1UdIwQY
MBaAFPP7LvtOwem29sbQuiYHR6nD4K3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQt
NmU5MTJkYjAyZjVkLzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQtNmU5MTJkYjAyZjVk
LzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDVXCKHm
TRK+AHmT2vb1364r2k/KAJhRCm945SvkJ2VS3Fb7AKZ0yWSDYTL5gF70f4HPiRwi
cusiIa7O1roctQ/N0lLaDOPgojWR7ER+FR5gWJG6TKcx6GvgMJJRC2AkBwKfTlPP
WJY3i2t78rBIStORPVoCGahxHJjSN+u9tuZuR9vSyGfDyidyb9TrsoIVkZeUF4Lj
6bj2NW96gegu+993nZdr6Eag4JfisojhQmfw0wZNQxCdUGRK1OmyP2a60kXbpk78
BdFhksMKgbiY1OazsJ3+rVz13tjR7mOCWkp/8XQWRw3lTYVNJXq16SqId19Hl7HP
I2vSOjtlD7Gb6A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:14 2025 by rpki-client