Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: kPvbp1vO5YsnZrirdScd+fmykbtxyON8ZaRonvwgsAU=
Subject key identifier: 19:9C:C9:5A:1B:0D:02:F7:48:86:FB:CA:01:6F:F7:71:18:22:A1:3E
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 019874BDDD1F9CF85DB0AAE021D81D6D680A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 0677
Signing time: Mon 04 Aug 2025 11:00:56 +0000
Manifest this update: Mon 04 Aug 2025 11:00:56 +0000
Manifest next update: Tue 05 Aug 2025 11:00:56 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: zFHikrEXUUbStXmEGA0KwWZNK6YlvTbv0lQmjFmwSDY=)
2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:dd:1f:9c:f8:5d:b0:aa:e0:21:d8:1d:6d:68:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: Aug 4 11:00:56 2025 GMT
Not After : Aug 5 11:00:56 2025 GMT
Subject: CN=199cc95a1b0d02f74886fbca016ff7711822a13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:15:86:6b:a4:d0:a3:4c:ab:7b:65:9b:d8:
4a:4b:3d:c4:2d:b6:67:31:10:60:66:32:d7:5d:49:
5e:10:fe:5f:5a:27:60:80:da:e0:dd:20:32:69:16:
f0:8e:7d:c8:d6:d6:85:07:dd:48:35:7a:3c:f3:b4:
cd:82:4e:a1:75:5e:fb:62:ee:92:47:49:b4:63:3d:
91:ff:c4:36:68:11:6c:0a:f2:c3:1c:cf:47:e1:a9:
ba:ba:d2:de:98:4f:81:bc:10:e4:e4:1c:55:6c:fd:
ea:43:26:6c:01:ad:53:2b:1d:b1:42:42:51:bd:78:
2c:ac:e5:20:f9:d2:75:57:0f:5b:3a:95:77:4f:d9:
e1:4b:1a:1c:83:33:f2:a0:28:7c:27:a2:bc:33:a8:
ad:97:ab:fb:f1:55:25:40:9f:a4:de:27:1e:ab:9f:
55:e5:d5:b8:45:22:0e:62:21:8b:c2:bd:a9:7b:cb:
e7:98:a3:17:af:f5:f7:54:e4:1c:c8:d0:46:b8:51:
ab:0b:2d:d0:e7:15:6f:fb:d9:14:30:98:6a:56:38:
89:b0:14:ee:e4:fa:a4:91:ff:31:8b:22:ee:d0:d0:
66:e7:fd:b0:76:d4:9f:bb:64:37:6d:8d:04:40:90:
0e:f5:83:8d:79:de:be:18:2a:13:3f:e3:57:89:8d:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:C9:5A:1B:0D:02:F7:48:86:FB:CA:01:6F:F7:71:18:22:A1:3E
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:82:94:fd:bc:ad:c5:27:2e:e9:7b:8a:45:0f:2c:7f:6b:60:
44:c4:85:08:a4:ed:5e:01:21:8d:52:b9:00:95:24:7c:84:78:
48:f3:f2:7a:b3:aa:e1:26:7e:15:85:e2:43:fd:48:97:37:e8:
3c:82:4a:d7:c1:ba:a9:de:e9:20:14:33:70:74:d8:17:c3:fe:
19:cb:a1:5e:23:34:d5:b6:ac:e2:80:ef:f3:55:f0:06:9e:04:
0d:09:e0:7a:b4:cf:cd:c6:21:45:6b:58:3e:04:60:0f:eb:b6:
99:76:64:3f:03:dd:f4:53:35:2a:37:c8:a0:53:8d:65:f4:5e:
bd:8a:9d:d3:ac:13:87:2d:7c:c4:a3:4d:29:5c:21:63:cd:81:
39:ac:f5:dc:50:2d:68:4b:0c:d4:3b:17:fd:24:2f:4f:af:07:
6d:0a:33:59:a2:60:36:1e:cc:07:d3:d6:84:5f:d9:1b:f2:36:
ef:bf:56:0e:c9:b4:38:d9:ef:8b:71:cf:18:29:7e:f7:6a:00:
3c:45:93:02:69:ff:bd:65:92:22:21:20:d4:7e:24:4c:90:7b:
37:b8:3b:13:67:89:64:b1:26:f7:91:fc:52:b1:86:b6:5d:94:
0b:fc:49:26:28:3b:ae:e3:c1:74:68:57:e1:73:61:12:00:9f:
61:7f:81:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vd0fnPhdsKrgIdgdbWgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy
OTc4ZDIwHhcNMjUwODA0MTEwMDU2WhcNMjUwODA1MTEwMDU2WjAzMTEwLwYDVQQD
EygxOTljYzk1YTFiMGQwMmY3NDg4NmZiY2EwMTZmZjc3MTE4MjJhMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K4Vhmuk0KNMq3tlm9hKSz3ELbZn
MRBgZjLXXUleEP5fWidggNrg3SAyaRbwjn3I1taFB91INXo887TNgk6hdV77Yu6S
R0m0Yz2R/8Q2aBFsCvLDHM9H4am6utLemE+BvBDk5BxVbP3qQyZsAa1TKx2xQkJR
vXgsrOUg+dJ1Vw9bOpV3T9nhSxocgzPyoCh8J6K8M6itl6v78VUlQJ+k3iceq59V
5dW4RSIOYiGLwr2pe8vnmKMXr/X3VOQcyNBGuFGrCy3Q5xVv+9kUMJhqVjiJsBTu
5Pqkkf8xiyLu0NBm5/2wdtSfu2Q3bY0EQJAO9YONed6+GCoTP+NXiY2PHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmcyVobDQL3SIb7ygFv93EYIqE+MB8GA1UdIwQY
MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt
ZmYzNGE4YWU5MDFhLzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh
LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4KU/byt
xScu6XuKRQ8sf2tgRMSFCKTtXgEhjVK5AJUkfIR4SPPyerOq4SZ+FYXiQ/1Ilzfo
PIJK18G6qd7pIBQzcHTYF8P+GcuhXiM01bas4oDv81XwBp4EDQngerTPzcYhRWtY
PgRgD+u2mXZkPwPd9FM1KjfIoFONZfRevYqd06wThy18xKNNKVwhY82BOaz13FAt
aEsM1DsX/SQvT68HbQozWaJgNh7MB9PWhF/ZG/I2779WDsm0ONnvi3HPGCl+92oA
PEWTAmn/vWWSIiEg1H4kTJB7N7g7E2eJZLEm95H8UrGGtl2UC/xJJig7ruPBdGhX
4XNhEgCfYX+BTQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:30 2025 by rpki-client