Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: g02Xn6XCnmNZZi74NsnYKSZ/rf3K0j+vFw/gDTIpZwk=
Subject key identifier: 61:06:2E:3A:AF:15:66:3E:6C:BC:7E:87:03:F8:42:58:E0:D3:A0:8A
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019A71808B0752CC381CE0D8D610C726C413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: zQYWgWP0jzLj5A7wjRYBlwdytpS1ITxazVpHLxU786Y=)
3: Jt7bihKghc7zukL52uY8fgD1W-o.roa (hash: 2TGz2CMfaxj9aqkazkTK9wOsLvIeBADGDZnq6/Vnqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8b:07:52:cc:38:1c:e0:d8:d6:10:c7:26:c4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=61062e3aaf15663e6cbc7e8703f84258e0d3a08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:61:2a:eb:7c:2a:5b:57:7c:51:67:4c:7e:
aa:e3:f0:cc:da:84:78:0c:9c:50:8e:49:83:aa:5b:
ff:84:56:e4:9b:d4:10:a0:fb:c4:aa:f5:63:b8:22:
a9:fe:f0:a4:5c:3e:90:ee:b4:c3:2f:01:c0:74:ba:
34:7e:17:3f:2f:e3:b5:c6:3c:96:95:70:a5:d5:13:
70:79:4d:2f:d8:22:4b:49:48:49:09:6a:f8:be:90:
21:29:cf:12:7f:41:dd:9b:d0:44:fb:99:b9:6d:cf:
a4:b1:16:05:9a:a8:6e:cd:d2:21:53:38:30:d3:6f:
13:f2:87:33:7c:72:a1:91:8f:82:94:b2:d1:5c:a0:
86:16:e3:a9:7c:46:c7:c7:34:65:2d:7e:b5:c1:a1:
78:17:0a:ad:7c:ea:2a:38:6b:3a:53:b7:2b:34:12:
0f:2f:a8:84:fe:eb:bd:88:b7:b5:69:4d:b3:84:bc:
4f:e3:a2:f6:4a:21:62:4b:be:8f:cc:23:f1:3a:85:
0c:b3:f5:72:3f:70:75:0d:7f:34:40:b3:21:ed:8e:
c8:a2:56:6e:bb:b1:42:41:79:de:0e:d1:5c:73:d7:
b5:b6:69:44:33:c3:cd:49:5e:85:2e:ca:ea:c7:a9:
39:cc:75:ad:f8:a9:18:c2:5a:fb:1a:dd:e7:27:2c:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:2E:3A:AF:15:66:3E:6C:BC:7E:87:03:F8:42:58:E0:D3:A0:8A
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:44:5f:90:44:8d:3c:5c:b4:16:14:46:6a:41:a2:61:a9:
44:07:f0:bd:d2:44:74:c8:e9:5d:1c:eb:f2:bf:55:76:ea:5a:
df:9f:da:89:b3:09:ee:62:9a:ea:6f:4b:30:89:f5:ca:53:c1:
b0:7b:ec:f5:11:d8:1d:07:ef:47:e7:13:37:2a:41:ea:55:ca:
f6:6e:46:46:c7:c9:ed:b2:04:74:01:a8:31:f5:c6:c5:6b:c8:
20:39:92:68:d2:c2:b7:97:1c:83:0c:81:5d:a3:e2:5d:1a:dd:
46:73:15:9c:2b:95:82:ee:7f:b7:d4:72:73:19:ee:5e:e9:0d:
a0:d0:1d:5b:44:af:65:f7:f8:86:0d:2f:61:8f:55:89:fb:c6:
df:3d:83:3d:48:2e:15:9f:f6:ac:0a:c1:9e:e4:2a:e2:00:67:
78:cb:1d:ec:29:64:72:63:a4:f5:d0:36:04:91:e0:c0:6d:66:
c0:a7:d0:7a:c6:8b:b1:d0:02:e6:b7:80:f7:6d:6f:d9:06:ad:
70:4f:2d:8f:e9:e7:d2:57:50:0c:0a:53:87:45:bf:e8:25:20:
7b:85:ac:85:bc:f5:75:cf:15:a4:e0:aa:a2:74:c9:01:95:28:
34:3a:f1:cb:eb:00:e8:af:f5:9a:18:8c:d8:a7:9d:0b:33:88:
58:b4:5a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgIsHUsw4HODY1hDHJsQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjUxMTExMDYwMDQwWhcNMjUxMTEyMDYwMDQwWjAzMTEwLwYDVQQD
Eyg2MTA2MmUzYWFmMTU2NjNlNmNiYzdlODcwM2Y4NDI1OGUwZDNhMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pNhKut8KltXfFFnTH6q4/DM2oR4
DJxQjkmDqlv/hFbkm9QQoPvEqvVjuCKp/vCkXD6Q7rTDLwHAdLo0fhc/L+O1xjyW
lXCl1RNweU0v2CJLSUhJCWr4vpAhKc8Sf0Hdm9BE+5m5bc+ksRYFmqhuzdIhUzgw
028T8oczfHKhkY+ClLLRXKCGFuOpfEbHxzRlLX61waF4FwqtfOoqOGs6U7crNBIP
L6iE/uu9iLe1aU2zhLxP46L2SiFiS76PzCPxOoUMs/VyP3B1DX80QLMh7Y7IolZu
u7FCQXneDtFcc9e1tmlEM8PNSV6FLsrqx6k5zHWt+KkYwlr7Gt3nJyzsXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEGLjqvFWY+bLx+hwP4Qljg06CKMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBREX5BE
jTxctBYURmpBomGpRAfwvdJEdMjpXRzr8r9Vdupa35/aibMJ7mKa6m9LMIn1ylPB
sHvs9RHYHQfvR+cTNypB6lXK9m5GRsfJ7bIEdAGoMfXGxWvIIDmSaNLCt5ccgwyB
XaPiXRrdRnMVnCuVgu5/t9RycxnuXukNoNAdW0SvZff4hg0vYY9VifvG3z2DPUgu
FZ/2rArBnuQq4gBneMsd7ClkcmOk9dA2BJHgwG1mwKfQesaLsdAC5reA921v2Qat
cE8tj+nn0ldQDApTh0W/6CUge4Wshbz1dc8VpOCqonTJAZUoNDrxy+sA6K/1mhiM
2KedCzOIWLRabA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:39 2025 by rpki-client