Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: Uq1vQx0rA15KyyGEWsUkDgcxZj51Nxpp7Jkoudk/Ick=
Subject key identifier: 5D:04:3F:13:9A:77:45:DF:FF:99:C6:11:27:54:6A:35:74:65:93:42
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 019922C34E2A3ACEFA666744AAB7067ECFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: F8
Signing time: Sun 07 Sep 2025 06:00:48 +0000
Manifest this update: Sun 07 Sep 2025 06:00:48 +0000
Manifest next update: Mon 08 Sep 2025 06:00:48 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: FwZTFjb5IhgykX11uRBuKPZq7JMNYKJKBHWMzG0b4aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:4e:2a:3a:ce:fa:66:67:44:aa:b7:06:7e:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Sep 7 06:00:48 2025 GMT
Not After : Sep 8 06:00:48 2025 GMT
Subject: CN=5d043f139a7745dfff99c61127546a3574659342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2d:30:d6:63:f1:11:8d:cd:91:46:ba:61:5a:
a9:1f:6b:89:7e:fc:14:c5:30:fa:63:cf:61:d7:a4:
54:e2:97:56:67:ce:a5:01:68:d6:84:e1:8b:8f:63:
cb:cc:d7:6a:ce:f4:9c:18:4a:40:bf:19:e3:0a:27:
38:25:e9:d1:16:06:5e:ed:b9:41:46:db:95:ea:c6:
b2:48:98:e3:cc:30:9b:e3:f6:90:36:8c:6e:8c:9d:
44:02:e5:d7:0e:1a:81:67:cf:cf:73:ac:7c:c8:90:
c1:40:61:d0:68:8e:62:4a:ae:84:fc:18:ec:2f:fc:
e8:a4:2d:c1:22:9a:f3:ad:1a:0e:c2:1a:8b:a6:9f:
ae:8d:d7:8e:18:6d:e6:16:4e:7c:a7:38:7d:3d:b0:
de:e7:1b:47:13:38:56:0c:b2:e7:34:1e:6e:dd:03:
c2:61:62:7d:01:6f:a8:3d:7b:5b:96:10:4d:73:91:
4b:77:3d:ed:55:da:c6:aa:89:dd:3b:0b:03:74:59:
67:ae:60:37:1e:cc:81:78:b8:23:c5:b2:81:cf:e6:
eb:c1:ac:4b:63:c6:46:27:e3:a7:0f:05:7c:5a:08:
b5:0d:55:7c:34:d8:71:63:44:91:18:5e:70:89:4a:
a6:b7:f8:e3:70:15:2e:2c:ae:53:5d:46:af:10:6d:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:04:3F:13:9A:77:45:DF:FF:99:C6:11:27:54:6A:35:74:65:93:42
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:45:bd:02:ea:c0:77:42:bc:a1:90:38:8e:04:c5:28:a8:dc:
4c:3e:5f:b4:da:be:e0:5f:bb:ac:63:27:18:32:87:6a:08:cc:
30:ca:fc:c5:e9:6d:37:25:e2:d9:4c:fb:d2:3b:66:3a:8c:81:
19:e2:2b:d0:98:f1:ed:cb:c8:c0:09:f7:51:7d:35:5c:bd:ba:
60:d9:05:8d:a4:41:6d:6e:1b:40:eb:cf:91:4d:bc:20:d3:cf:
b1:c0:cb:d5:4b:7b:7d:7c:b3:8f:1d:cf:09:50:3e:cf:89:e9:
b2:42:26:ca:0a:03:8d:30:38:1a:a7:5c:c5:95:62:b7:8a:26:
fb:91:28:e3:d7:89:5b:f4:28:b2:e4:62:f8:ef:54:ca:0d:a8:
fd:a7:ae:81:ea:bc:32:38:f1:33:aa:36:ef:f4:cf:2c:d0:5b:
21:27:60:fc:9f:04:23:3e:5c:78:83:7b:14:74:1f:fb:0b:cf:
bb:b7:9a:7c:88:4a:18:18:d7:1d:41:7d:99:96:02:1a:b8:d0:
4f:64:ce:a1:a5:e6:e0:43:9d:b6:11:c8:1b:2b:6d:23:0e:38:
3c:c1:b0:f5:3d:22:c8:9f:70:28:18:1b:17:36:bd:03:a8:5a:
61:24:8c:bb:d8:30:a6:eb:13:d9:36:c9:7f:56:31:16:23:cc:
fc:51:39:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw04qOs76ZmdEqrcGfs/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTY5OGM5ZjgwMzAzMjU3OTIwMTA0OGI4N2MxOWM2M2M4
ZTExOTcwHhcNMjUwOTA3MDYwMDQ4WhcNMjUwOTA4MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZDA0M2YxMzlhNzc0NWRmZmY5OWM2MTEyNzU0NmEzNTc0NjU5MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S0w1mPxEY3NkUa6YVqpH2uJfvwU
xTD6Y89h16RU4pdWZ86lAWjWhOGLj2PLzNdqzvScGEpAvxnjCic4JenRFgZe7blB
RtuV6saySJjjzDCb4/aQNoxujJ1EAuXXDhqBZ8/Pc6x8yJDBQGHQaI5iSq6E/Bjs
L/zopC3BIprzrRoOwhqLpp+ujdeOGG3mFk58pzh9PbDe5xtHEzhWDLLnNB5u3QPC
YWJ9AW+oPXtblhBNc5FLdz3tVdrGqondOwsDdFlnrmA3HsyBeLgjxbKBz+brwaxL
Y8ZGJ+OnDwV8Wgi1DVV8NNhxY0SRGF5wiUqmt/jjcBUuLK5TXUavEG3w/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0EPxOad0Xf/5nGESdUajV0ZZNCMB8GA1UdIwQY
MBaAFI+mmMn4AwMleSAQSLh8GcY8jhGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMt
ZjQ0ODA5NTc4Y2NhLzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMtZjQ0ODA5NTc4Y2Nh
LzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukW9AurA
d0K8oZA4jgTFKKjcTD5ftNq+4F+7rGMnGDKHagjMMMr8xeltNyXi2Uz70jtmOoyB
GeIr0Jjx7cvIwAn3UX01XL26YNkFjaRBbW4bQOvPkU28INPPscDL1Ut7fXyzjx3P
CVA+z4npskImygoDjTA4GqdcxZVit4om+5Eo49eJW/QosuRi+O9Uyg2o/aeugeq8
MjjxM6o27/TPLNBbISdg/J8EIz5ceIN7FHQf+wvPu7eafIhKGBjXHUF9mZYCGrjQ
T2TOoaXm4EOdthHIGyttIw44PMGw9T0iyJ9wKBgbFza9A6haYSSMu9gwpusT2TbJ
f1YxFiPM/FE5ow==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:35 2025 by rpki-client