Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: bdIZK8iL0iF/a/yEr1sA9QywbgOA9LHvMLXRvQaM1fQ=
Subject key identifier: 6F:AA:EE:57:CB:57:DA:D8:EA:CD:66:E1:3F:48:94:5D:47:9F:03:1E
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019A5074A49D2166CD3EA79585DBEC108CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 068E
Signing time: Tue 04 Nov 2025 20:00:12 +0000
Manifest this update: Tue 04 Nov 2025 20:00:12 +0000
Manifest next update: Wed 05 Nov 2025 20:00:12 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: YwEjn4BIh8BUCc5wZkqDUYVOKj36oCmk9K0fp5u8bFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a4:9d:21:66:cd:3e:a7:95:85:db:ec:10:8c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Nov 4 20:00:12 2025 GMT
Not After : Nov 5 20:00:12 2025 GMT
Subject: CN=6faaee57cb57dad8eacd66e13f48945d479f031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:9d:d5:cb:89:20:6a:ad:c1:c8:b5:04:6c:
2e:04:cf:c9:0c:01:be:9e:c3:e8:95:41:cd:f5:ce:
f1:36:e8:8a:46:78:2f:6c:0a:3c:61:27:d1:66:27:
d0:5f:38:a2:1b:6e:10:d2:0f:3b:67:9f:ea:47:aa:
09:7d:a3:8e:da:ca:54:29:25:e4:38:99:7b:e8:17:
00:76:e0:58:96:e1:38:a1:cf:2f:7f:6e:dd:ca:01:
54:be:09:70:b8:22:73:08:d0:15:4e:72:2c:92:09:
d9:36:9e:75:0f:f6:eb:47:cf:8c:e8:94:42:42:70:
ce:9e:ae:8a:5f:fe:71:2e:69:4f:8c:5a:48:1c:c3:
0a:30:58:c8:47:9f:84:c1:70:92:09:c0:e2:b2:67:
09:b6:c1:3a:79:30:de:73:20:40:fa:26:47:87:90:
9d:2d:46:d5:3c:05:07:0e:ed:66:26:8d:d4:1c:8f:
24:11:44:48:ea:fa:09:b3:c3:a7:ba:20:fb:e4:c4:
b6:f3:46:2b:c4:f9:24:ac:23:b8:12:68:0e:95:2e:
7a:8f:8f:39:44:20:05:ef:5b:d6:0e:d9:e3:c5:d2:
71:29:92:32:ba:5c:d5:b0:68:12:49:55:99:16:55:
b7:89:8c:20:18:04:ff:df:7d:4f:26:f3:a9:21:34:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:EE:57:CB:57:DA:D8:EA:CD:66:E1:3F:48:94:5D:47:9F:03:1E
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:94:f7:ba:f4:72:1f:82:4a:36:b5:a2:b6:5c:0f:6d:b1:c9:
38:43:2b:1e:f6:7a:12:e9:10:ad:4d:39:6b:d7:15:fa:50:ae:
a3:f3:38:18:ce:b0:19:e7:10:05:b9:00:cd:6d:97:4d:2b:0b:
b8:f5:78:4b:cd:d3:2b:12:85:51:38:55:9d:9a:d2:33:be:3e:
1e:b9:19:bb:0b:19:ce:85:7f:49:be:51:71:4a:ea:b4:d7:3e:
88:2a:04:4d:89:57:7c:f8:59:75:49:58:e1:59:5b:df:fa:6a:
03:f1:ad:64:88:0e:ed:2d:14:f9:2d:1b:2e:c2:ea:fb:bc:2f:
7a:97:a3:37:ed:b7:19:b9:47:8f:f4:8e:a7:f4:9f:76:67:a8:
88:d2:46:5b:25:40:7a:9d:fc:07:6a:bf:45:e6:f8:65:92:98:
02:1e:99:d6:b4:d2:f5:38:56:eb:9c:7d:3a:af:31:e5:2b:9d:
56:f6:ec:25:06:8a:d6:43:9d:ba:7f:3f:d6:3e:ee:e7:0d:be:
c5:2d:3f:35:69:87:38:93:97:93:3e:ce:1d:2f:5d:e8:6c:59:
e3:1a:8a:a7:ae:66:93:6c:6d:fd:35:bb:89:43:3b:85:17:a8:
ab:d1:81:6e:95:98:27:58:f5:b8:1b:76:20:d0:67:ff:0e:4c:
c0:62:a1:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdKSdIWbNPqeVhdvsEIzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDJiYThhMmE5NmEwN2I1YjY0Y2FmODczMjkwZTIwNzhk
OTY0YTYwHhcNMjUxMTA0MjAwMDEyWhcNMjUxMTA1MjAwMDEyWjAzMTEwLwYDVQQD
Eyg2ZmFhZWU1N2NiNTdkYWQ4ZWFjZDY2ZTEzZjQ4OTQ1ZDQ3OWYwMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Uad1cuJIGqtwci1BGwuBM/JDAG+
nsPolUHN9c7xNuiKRngvbAo8YSfRZifQXziiG24Q0g87Z5/qR6oJfaOO2spUKSXk
OJl76BcAduBYluE4oc8vf27dygFUvglwuCJzCNAVTnIskgnZNp51D/brR8+M6JRC
QnDOnq6KX/5xLmlPjFpIHMMKMFjIR5+EwXCSCcDismcJtsE6eTDecyBA+iZHh5Cd
LUbVPAUHDu1mJo3UHI8kEURI6voJs8OnuiD75MS280YrxPkkrCO4EmgOlS56j485
RCAF71vWDtnjxdJxKZIyulzVsGgSSVWZFlW3iYwgGAT/331PJvOpITRTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+q7lfLV9rY6s1m4T9IlF1HnwMeMB8GA1UdIwQY
MBaAFPHSuooqlqB7W2TK+HMpDiB42WSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEt
ZDE2ODk4MDE2Y2ZlLzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEtZDE2ODk4MDE2Y2Zl
LzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJT3uvRy
H4JKNrWitlwPbbHJOEMrHvZ6EukQrU05a9cV+lCuo/M4GM6wGecQBbkAzW2XTSsL
uPV4S83TKxKFUThVnZrSM74+HrkZuwsZzoV/Sb5RcUrqtNc+iCoETYlXfPhZdUlY
4Vlb3/pqA/GtZIgO7S0U+S0bLsLq+7wvepejN+23GblHj/SOp/SfdmeoiNJGWyVA
ep38B2q/Reb4ZZKYAh6Z1rTS9ThW65x9Oq8x5SudVvbsJQaK1kOdun8/1j7u5w2+
xS0/NWmHOJOXkz7OHS9d6GxZ4xqKp65mk2xt/TW7iUM7hReoq9GBbpWYJ1j1uBt2
INBn/w5MwGKhew==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:35:56 2025 by rpki-client