Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier: 554i+SXVvu58BvbEmQGnK9H641fiwp+SKVRXlC1D80c=
Subject key identifier: 8F:85:FE:09:BB:34:28:F3:E5:12:42:9E:69:8C:93:5E:3E:A8:13:76
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial: 019921B2290481DA7EA84F0F58CF67407CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:02:27 +0000
Manifest this update: Sun 07 Sep 2025 01:02:27 +0000
Manifest next update: Mon 08 Sep 2025 01:02:27 +0000
Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: Iswjeesam7OOv354Uq5dD3BrVI/Jh3sCTs+YKcZ3gUM=)
2: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (hash: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:29:04:81:da:7e:a8:4f:0f:58:cf:67:40:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Validity
Not Before: Sep 7 01:02:27 2025 GMT
Not After : Sep 8 01:02:27 2025 GMT
Subject: CN=8f85fe09bb3428f3e512429e698c935e3ea81376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:59:9d:a9:47:1d:f3:b6:ae:e9:cf:ea:46:
3b:94:92:b3:9d:92:03:ee:e5:8c:bc:b3:2a:d0:14:
c1:8d:13:81:42:74:63:cc:ee:4e:c8:27:d1:d4:08:
26:5b:2a:43:61:26:28:49:ca:ab:31:85:52:2b:d8:
9a:6b:22:ec:9c:72:7a:7f:9e:97:5d:98:d1:03:78:
5b:87:db:5e:b9:14:d9:78:3e:3f:9a:59:52:1f:a5:
9c:bf:9f:8e:20:68:d4:3b:66:68:3b:32:f5:e6:1d:
76:28:4a:ca:6e:2e:61:86:d8:3a:02:2c:ce:a5:22:
8b:3e:60:38:de:e4:f5:61:44:24:85:d5:58:29:ce:
35:f9:6d:ad:e2:6a:49:2d:9d:ff:2c:04:91:e0:99:
b4:de:b8:42:4d:2c:59:f8:7d:3c:f7:5b:4e:23:30:
56:0c:08:9f:73:9f:a1:6e:d3:f1:80:86:d3:75:af:
b8:ff:bb:6d:28:9f:bb:8b:64:b9:50:dd:dd:48:89:
6c:32:eb:1e:04:34:a5:85:e5:a1:57:dd:79:ae:67:
87:dc:83:8f:3a:93:4f:db:6f:82:f5:f2:42:80:02:
56:20:7c:47:9a:09:a3:a9:45:36:88:2c:0f:ed:33:
82:f2:79:61:a2:67:15:05:5e:f1:1b:58:cb:0b:97:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:85:FE:09:BB:34:28:F3:E5:12:42:9E:69:8C:93:5E:3E:A8:13:76
X509v3 Authority Key Identifier:
keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:be:e9:c4:e8:46:85:f9:93:95:b2:8b:40:02:71:47:76:01:
57:55:ea:59:77:d3:89:9d:52:2a:86:34:7c:cc:31:a7:16:a0:
ea:95:ab:56:dc:74:ce:69:37:c3:27:05:b5:10:7b:6c:96:0d:
5d:43:79:02:52:2d:0e:a0:4d:8e:b2:4c:3e:22:94:a1:8d:e5:
39:10:ae:11:ee:4d:0b:ff:6c:53:b3:c0:48:81:0b:0e:b2:34:
95:ab:55:e2:c1:fb:91:6d:6a:b2:74:03:2b:d1:a4:2b:bb:0a:
b4:b2:78:37:6d:a8:77:d1:db:02:0e:8d:51:5c:ed:ec:a6:6b:
a9:44:bf:16:cb:6e:4e:59:32:70:6c:06:4c:30:b3:99:31:85:
6e:83:ba:68:6e:0f:79:74:0c:89:3d:f7:4e:4a:40:a2:52:1a:
58:f3:a6:e8:7d:85:9f:e2:53:f0:49:65:6d:0a:03:c3:95:b1:
34:43:14:cc:38:18:6b:e9:7f:10:73:89:85:11:0d:0e:37:33:
e4:26:e4:d8:f1:6a:56:20:35:f1:5a:89:78:a1:fc:ba:be:a2:
b9:d2:cb:56:25:b7:11:d9:66:c1:8a:63:24:ce:74:e3:85:fd:
79:72:dc:7e:aa:f5:33:d5:81:48:12:4b:92:a2:0b:12:b0:ec:
a2:e6:9a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsikEgdp+qE8PWM9nQHynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh
MDE4ZTEwHhcNMjUwOTA3MDEwMjI3WhcNMjUwOTA4MDEwMjI3WjAzMTEwLwYDVQQD
Eyg4Zjg1ZmUwOWJiMzQyOGYzZTUxMjQyOWU2OThjOTM1ZTNlYTgxMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mJZnalHHfO2runP6kY7lJKznZID
7uWMvLMq0BTBjROBQnRjzO5OyCfR1AgmWypDYSYoScqrMYVSK9iaayLsnHJ6f56X
XZjRA3hbh9teuRTZeD4/mllSH6Wcv5+OIGjUO2ZoOzL15h12KErKbi5hhtg6AizO
pSKLPmA43uT1YUQkhdVYKc41+W2t4mpJLZ3/LASR4Jm03rhCTSxZ+H0891tOIzBW
DAifc5+hbtPxgIbTda+4/7ttKJ+7i2S5UN3dSIlsMuseBDSlheWhV915rmeH3IOP
OpNP22+C9fJCgAJWIHxHmgmjqUU2iCwP7TOC8nlhomcVBV7xG1jLC5e1TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+F/gm7NCjz5RJCnmmMk14+qBN2MB8GA1UdIwQY
MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt
NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1
LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADL7pxOhG
hfmTlbKLQAJxR3YBV1XqWXfTiZ1SKoY0fMwxpxag6pWrVtx0zmk3wycFtRB7bJYN
XUN5AlItDqBNjrJMPiKUoY3lORCuEe5NC/9sU7PASIELDrI0latV4sH7kW1qsnQD
K9GkK7sKtLJ4N22od9HbAg6NUVzt7KZrqUS/FstuTlkycGwGTDCzmTGFboO6aG4P
eXQMiT33TkpAolIaWPOm6H2Fn+JT8EllbQoDw5WxNEMUzDgYa+l/EHOJhRENDjcz
5Cbk2PFqViA18VqJeKH8ur6iudLLViW3EdlmwYpjJM5044X9eXLcfqr1M9WBSBJL
kqILErDsouaawA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:06 2025 by rpki-client