Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: HuBEur4jL3tfqBbzWhchzmXYx5pYRey0b+DbK9NdBDI=
Subject key identifier: ED:6F:A6:2F:76:B2:14:55:83:5D:6C:6C:5E:F6:1A:3D:7B:93:F0:94
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 01995F45B0DE17ECA2B778281BDB0925DB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1692
Signing time: Fri 19 Sep 2025 00:00:26 +0000
Manifest this update: Fri 19 Sep 2025 00:00:26 +0000
Manifest next update: Sat 20 Sep 2025 00:00:26 +0000
Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: gC+v0dcIxxaUIWIm1c937MJe8DuxYMh7qhIeKDBVGsE=)
3: Jt7bihKghc7zukL52uY8fgD1W-o.roa (hash: 2TGz2CMfaxj9aqkazkTK9wOsLvIeBADGDZnq6/Vnqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:45:b0:de:17:ec:a2:b7:78:28:1b:db:09:25:db:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Sep 19 00:00:26 2025 GMT
Not After : Sep 20 00:00:26 2025 GMT
Subject: CN=ed6fa62f76b21455835d6c6c5ef61a3d7b93f094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:df:be:78:18:69:95:ac:09:06:ba:62:fd:5e:
14:86:e9:64:4b:db:82:ea:72:80:c9:93:44:2c:e1:
7f:a8:80:5b:18:30:e8:71:ca:f6:16:69:91:29:33:
63:b1:a5:bd:d2:36:90:d9:71:1a:b5:04:4c:88:40:
b5:19:73:df:7f:db:67:25:18:69:38:b9:6c:59:a7:
2c:a4:16:9e:82:40:c5:c6:1f:b7:24:a1:d3:aa:1b:
5a:54:63:2e:d3:b6:1b:6c:fc:a3:37:57:ca:23:9e:
62:12:d4:82:37:fb:82:1c:38:0f:9f:79:07:fe:33:
00:d6:cf:48:60:8a:e1:07:9d:21:46:5a:c3:1b:f5:
cc:ce:45:d3:f3:15:bd:be:ad:1f:55:e9:99:26:ee:
ac:e5:2d:88:0f:72:e8:d5:0c:7b:0f:3f:08:a0:af:
0a:9e:8b:9e:fb:4f:b4:2e:fa:3a:56:c6:7b:88:b1:
4a:09:cf:b1:80:ac:ba:18:e6:5b:be:09:61:0d:15:
6e:13:91:4e:3e:3a:d5:31:b2:c3:7e:50:77:41:0b:
99:c4:20:10:de:a5:12:f8:d0:44:f0:84:31:fe:64:
8c:ef:11:7a:fc:dd:9d:26:cc:aa:63:70:6c:95:dc:
44:79:d7:84:75:a6:19:6e:46:db:e8:7c:81:b0:31:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:A6:2F:76:B2:14:55:83:5D:6C:6C:5E:F6:1A:3D:7B:93:F0:94
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:17:a4:6a:fa:08:e4:c9:39:c3:4b:52:63:62:2e:93:8c:d9:
83:a6:22:a6:38:64:da:04:a4:90:d9:a8:27:95:79:26:07:af:
f9:2d:cd:db:e7:73:92:62:1f:cf:cb:e1:54:f2:46:a5:91:52:
23:1b:b9:64:97:d1:72:fe:32:be:99:09:6c:9e:a2:8a:44:6f:
2a:d0:7b:5b:77:8b:c7:1d:c1:a7:e9:1d:42:c1:90:8d:7c:2c:
ae:53:49:f5:3e:60:2b:f9:05:16:98:30:fd:17:e0:76:0f:31:
2a:5d:59:5c:38:4d:f8:b0:79:fb:83:2a:87:bc:a9:d5:40:61:
0b:38:6a:57:de:c1:5c:13:23:b9:8a:52:c6:cc:5c:a4:73:83:
f3:2a:58:6a:70:52:a4:f7:b5:76:4e:22:63:d1:98:94:8f:f2:
cd:c5:38:b3:ce:f5:cc:05:1c:5e:a2:7e:e2:69:be:ec:55:2b:
28:22:00:95:14:01:15:12:69:46:6c:16:78:04:4b:63:92:1a:
7b:6c:d6:95:b2:83:9b:c7:5b:69:84:97:ac:cc:46:8e:b1:67:
31:32:d1:f4:c2:31:93:46:0f:f4:54:cc:31:49:ad:ae:7b:42:
a6:61:fa:bb:cb:37:59:e1:0e:f9:23:a4:e2:1e:72:8b:6d:a8:
4b:dd:63:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlfRbDeF+yit3goG9sJJds0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjUwOTE5MDAwMDI2WhcNMjUwOTIwMDAwMDI2WjAzMTEwLwYDVQQD
EyhlZDZmYTYyZjc2YjIxNDU1ODM1ZDZjNmM1ZWY2MWEzZDdiOTNmMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d++eBhplawJBrpi/V4UhulkS9uC
6nKAyZNELOF/qIBbGDDoccr2FmmRKTNjsaW90jaQ2XEatQRMiEC1GXPff9tnJRhp
OLlsWacspBaegkDFxh+3JKHTqhtaVGMu07YbbPyjN1fKI55iEtSCN/uCHDgPn3kH
/jMA1s9IYIrhB50hRlrDG/XMzkXT8xW9vq0fVemZJu6s5S2ID3Lo1Qx7Dz8IoK8K
noue+0+0Lvo6VsZ7iLFKCc+xgKy6GOZbvglhDRVuE5FOPjrVMbLDflB3QQuZxCAQ
3qUS+NBE8IQx/mSM7xF6/N2dJsyqY3BsldxEedeEdaYZbkbb6HyBsDELEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1vpi92shRVg11sbF72Gj17k/CUMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBekavoI
5Mk5w0tSY2Iuk4zZg6Yipjhk2gSkkNmoJ5V5Jgev+S3N2+dzkmIfz8vhVPJGpZFS
Ixu5ZJfRcv4yvpkJbJ6iikRvKtB7W3eLxx3Bp+kdQsGQjXwsrlNJ9T5gK/kFFpgw
/Rfgdg8xKl1ZXDhN+LB5+4Mqh7yp1UBhCzhqV97BXBMjuYpSxsxcpHOD8ypYanBS
pPe1dk4iY9GYlI/yzcU4s871zAUcXqJ+4mm+7FUrKCIAlRQBFRJpRmwWeARLY5Ia
e2zWlbKDm8dbaYSXrMxGjrFnMTLR9MIxk0YP9FTMMUmtrntCpmH6u8s3WeEO+SOk
4h5yi22oS91jqw==
-----END CERTIFICATE-----
Generated at Fri Sep 19 08:12:08 2025 by rpki-client