Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: yBF1LuLweYFRhXxi9W9Tm5NXJxEm8ASypiTBC8d/QRE=
Subject key identifier: F5:0A:2B:FB:DA:71:24:63:3D:3E:E7:C5:85:A7:77:A5:A1:5D:27:E4
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 0199228CE63128DB23C3670790E2BAF75BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 11EA
Signing time: Sun 07 Sep 2025 05:01:23 +0000
Manifest this update: Sun 07 Sep 2025 05:01:23 +0000
Manifest next update: Mon 08 Sep 2025 05:01:23 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: mSMxaed6CYbHjSGvwYFHvWcAZTqaVovW+7LhLRVEhzg=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e6:31:28:db:23:c3:67:07:90:e2:ba:f7:5b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Sep 7 05:01:23 2025 GMT
Not After : Sep 8 05:01:23 2025 GMT
Subject: CN=f50a2bfbda7124633d3ee7c585a777a5a15d27e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:4b:8b:8a:c7:23:4d:d3:a8:b3:89:e2:18:
d2:3e:01:2b:c0:51:e1:a8:cb:6e:a7:9f:20:a2:93:
5c:37:f8:2a:70:07:0e:1d:3c:2f:60:0f:c9:70:a6:
7e:8d:4b:f9:16:b8:1f:da:c6:8e:0c:12:37:2a:d0:
49:18:7c:2b:74:94:da:f8:d7:53:37:ca:59:36:9c:
f9:11:a5:e0:e9:b5:e6:fa:06:0c:45:0a:60:fa:02:
91:9d:64:d0:3d:ff:c0:ef:38:c9:c4:50:6b:ce:da:
96:35:0c:4f:66:63:28:fe:b8:48:21:2f:58:20:da:
c8:8c:c9:93:08:7f:45:8b:95:7f:8e:a9:e0:a5:df:
b7:2f:60:4d:e9:0e:03:d0:af:ac:a5:c2:e3:03:6e:
7c:05:39:90:51:66:0e:ae:74:d2:aa:09:9d:96:d3:
63:d8:0c:72:50:fa:be:b2:01:46:60:ef:1a:24:7c:
ad:76:39:c6:d2:c0:68:d6:ff:fe:80:91:5a:a4:e3:
e4:b2:54:01:9e:cd:39:c8:16:1e:8e:07:4f:24:b9:
2a:d7:c6:03:02:48:6b:57:02:90:ff:96:f2:0b:2a:
3a:ea:4e:58:bb:41:79:28:f0:fe:ec:c1:23:46:91:
d5:92:02:b2:ed:23:c6:f4:66:72:86:57:b9:21:79:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0A:2B:FB:DA:71:24:63:3D:3E:E7:C5:85:A7:77:A5:A1:5D:27:E4
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:63:fa:52:34:b1:f6:f6:89:4e:69:e3:ff:15:52:51:98:53:
ca:19:ce:b6:de:12:cf:85:bf:3a:49:a3:06:57:5b:0e:e8:f3:
4d:20:f7:a6:11:88:51:84:7f:60:17:40:7e:70:23:4e:0c:d0:
6e:b4:4b:06:65:ba:5f:cb:87:67:3e:6d:6e:24:ea:57:7a:3c:
19:5a:99:d8:48:44:11:91:cd:2f:67:57:02:f3:cd:be:e6:1b:
b6:e1:63:dc:c0:3f:c5:1e:4d:75:cc:ee:0f:e9:9f:0e:a3:02:
c7:d7:1a:6f:18:9a:e2:87:16:c8:b8:50:fc:c7:3e:e3:4f:e9:
a4:f0:0d:15:33:0d:c4:d7:ec:dc:4b:82:9d:19:6e:aa:0e:2f:
53:2a:dd:58:d0:74:10:aa:a5:d8:da:fe:dc:fb:6d:bf:3f:48:
71:c1:1c:bb:27:fd:85:60:b8:74:77:7b:9b:b0:35:40:b2:f5:
29:fa:7c:cd:b1:91:8b:d4:40:ef:83:00:51:f6:5d:94:35:72:
5f:e5:26:55:50:37:10:e2:87:3e:be:cb:d3:e6:35:44:9b:18:
33:ff:a1:01:06:82:1f:3e:5a:3d:10:38:0c:64:c3:95:7c:7d:
4a:eb:a2:cf:f1:92:7d:41:5b:20:d8:f5:40:36:f3:54:a5:3f:
09:d9:e1:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijOYxKNsjw2cHkOK691v/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzY2ZiZmJmMmVjY2QzOTNhYTMwYzIyMTM2OTk2NWI4NDcx
OTJkYTgwHhcNMjUwOTA3MDUwMTIzWhcNMjUwOTA4MDUwMTIzWjAzMTEwLwYDVQQD
EyhmNTBhMmJmYmRhNzEyNDYzM2QzZWU3YzU4NWE3NzdhNWExNWQyN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYNLi4rHI03TqLOJ4hjSPgErwFHh
qMtup58gopNcN/gqcAcOHTwvYA/JcKZ+jUv5Frgf2saODBI3KtBJGHwrdJTa+NdT
N8pZNpz5EaXg6bXm+gYMRQpg+gKRnWTQPf/A7zjJxFBrztqWNQxPZmMo/rhIIS9Y
INrIjMmTCH9Fi5V/jqngpd+3L2BN6Q4D0K+spcLjA258BTmQUWYOrnTSqgmdltNj
2AxyUPq+sgFGYO8aJHytdjnG0sBo1v/+gJFapOPkslQBns05yBYejgdPJLkq18YD
AkhrVwKQ/5byCyo66k5Yu0F5KPD+7MEjRpHVkgKy7SPG9GZyhle5IXksPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUKK/vacSRjPT7nxYWnd6WhXSfkMB8GA1UdIwQY
MBaAFDPPv78uzNOTqjDCITaZZbhHGS2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMt
MzU3YTYxMzYxZGNiLzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMtMzU3YTYxMzYxZGNi
LzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2P6UjSx
9vaJTmnj/xVSUZhTyhnOtt4Sz4W/OkmjBldbDujzTSD3phGIUYR/YBdAfnAjTgzQ
brRLBmW6X8uHZz5tbiTqV3o8GVqZ2EhEEZHNL2dXAvPNvuYbtuFj3MA/xR5Ndczu
D+mfDqMCx9cabxia4ocWyLhQ/Mc+40/ppPANFTMNxNfs3EuCnRluqg4vUyrdWNB0
EKql2Nr+3Pttvz9IccEcuyf9hWC4dHd7m7A1QLL1Kfp8zbGRi9RA74MAUfZdlDVy
X+UmVVA3EOKHPr7L0+Y1RJsYM/+hAQaCHz5aPRA4DGTDlXx9Suuiz/GSfUFbINj1
QDbzVKU/Cdnhbw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client