Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: Rpc/hLYv7VUiW316pnDiH3qQPbySefV7BaRO7b6Y8B4=
Subject key identifier: 9F:22:2A:26:1E:39:A6:DE:4E:A0:92:2A:0D:9B:1A:5E:91:27:8D:20
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 01976CCF90A63FB1B1C7D8DEDF42D49F7B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 0FA2
Signing time: Sat 14 Jun 2025 05:00:31 +0000
Manifest this update: Sat 14 Jun 2025 05:00:31 +0000
Manifest next update: Sun 15 Jun 2025 05:00:31 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: XPQwCUoVGY3vHai47k4Am7zSxxBtk0CgJ7lCg714MoY=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:90:a6:3f:b1:b1:c7:d8:de:df:42:d4:9f:7b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Jun 14 05:00:31 2025 GMT
Not After : Jun 15 05:00:31 2025 GMT
Subject: CN=9f222a261e39a6de4ea0922a0d9b1a5e91278d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:bf:55:67:87:e7:0f:a5:fe:99:e0:e9:ec:
e7:be:98:40:4e:df:30:ec:fc:1b:26:4c:fd:10:9d:
23:39:d5:d2:03:a8:e9:78:72:5c:f9:ae:2f:f6:a5:
4a:df:44:37:31:c3:b8:5f:fb:a3:aa:89:1f:43:95:
59:03:b1:c9:f4:18:b1:5e:5b:56:c9:21:c3:f2:02:
9e:78:5b:3b:97:e6:a2:ef:e0:31:33:ee:56:7b:51:
d5:8f:77:2c:0d:18:ab:10:70:9a:39:2d:88:59:15:
8a:ce:e5:50:dd:fe:82:a3:07:4c:0a:f1:e8:57:2f:
01:2d:70:19:1e:27:fb:d9:0c:a6:61:31:e8:2b:9a:
e9:18:93:b4:f4:51:4f:19:be:a7:20:72:a6:f9:51:
8f:b9:74:1e:06:92:89:e9:52:6f:0f:aa:ce:d2:01:
fe:04:fd:4d:b0:29:88:0f:58:23:5d:f6:ca:a6:02:
7a:3e:77:3a:27:be:06:54:e9:36:2e:a0:b7:5f:1c:
a2:0d:5a:aa:99:07:d1:26:ff:5e:29:b6:3a:ef:4b:
d0:35:a0:cb:23:87:19:27:43:53:77:cd:5a:28:2f:
cf:80:56:3b:10:c6:75:74:20:90:fa:5a:be:11:28:
64:dd:d5:c5:c8:5c:2c:a0:87:8a:5a:e5:6d:dd:e3:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:22:2A:26:1E:39:A6:DE:4E:A0:92:2A:0D:9B:1A:5E:91:27:8D:20
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:03:27:70:97:9b:4e:53:bc:5f:c2:3f:d5:c9:2b:39:84:
9f:db:dd:90:2f:6a:1b:67:7d:87:05:18:1b:a0:46:a9:f4:dc:
48:1f:d4:67:4c:d8:73:37:74:2f:dc:40:73:48:99:f8:fa:91:
37:46:b6:42:1e:a6:cc:53:24:44:80:80:a6:68:6b:d9:ad:c6:
86:da:fa:2e:41:4d:78:f4:3d:d0:e0:18:4e:f9:52:95:90:88:
c0:a7:c4:72:87:91:5c:b0:44:ab:75:f4:2d:52:56:43:69:86:
55:8a:29:ee:ff:1e:31:ae:d0:63:fa:3a:5a:59:93:ba:f4:89:
3c:57:5e:d4:1a:a5:96:7d:b2:da:3d:df:0c:65:7b:81:18:ff:
27:f2:20:56:ed:64:60:a2:77:7e:99:e8:1e:08:4b:d9:51:36:
f6:f6:ce:66:c8:f5:2e:57:d4:44:e6:1d:67:05:e2:c2:16:46:
ce:74:8f:f3:5f:36:93:21:c1:f9:83:01:60:06:22:84:e9:6f:
0b:1f:84:c7:3a:21:b6:a6:df:b2:2c:9d:2c:09:9b:be:8b:35:
42:7b:03:7a:9c:1e:c8:75:e8:97:b8:61:16:35:56:17:a6:0a:
e1:1a:16:e9:5f:ee:32:cb:42:41:e3:02:30:f4:44:be:19:06:
ed:9a:ec:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz5CmP7Gxx9je30LUn3tEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl
NTUwNmQwHhcNMjUwNjE0MDUwMDMxWhcNMjUwNjE1MDUwMDMxWjAzMTEwLwYDVQQD
Eyg5ZjIyMmEyNjFlMzlhNmRlNGVhMDkyMmEwZDliMWE1ZTkxMjc4ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG6/VWeH5w+l/png6eznvphATt8w
7PwbJkz9EJ0jOdXSA6jpeHJc+a4v9qVK30Q3McO4X/ujqokfQ5VZA7HJ9BixXltW
ySHD8gKeeFs7l+ai7+AxM+5We1HVj3csDRirEHCaOS2IWRWKzuVQ3f6CowdMCvHo
Vy8BLXAZHif72QymYTHoK5rpGJO09FFPGb6nIHKm+VGPuXQeBpKJ6VJvD6rO0gH+
BP1NsCmID1gjXfbKpgJ6Pnc6J74GVOk2LqC3XxyiDVqqmQfRJv9eKbY670vQNaDL
I4cZJ0NTd81aKC/PgFY7EMZ1dCCQ+lq+EShk3dXFyFwsoIeKWuVt3eOFsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8iKiYeOabeTqCSKg2bGl6RJ40gMB8GA1UdIwQY
MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt
MGE1MzIxNTZiMmE2LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2
LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJIDJ3CX
m05TvF/CP9XJKzmEn9vdkC9qG2d9hwUYG6BGqfTcSB/UZ0zYczd0L9xAc0iZ+PqR
N0a2Qh6mzFMkRICApmhr2a3Ghtr6LkFNePQ90OAYTvlSlZCIwKfEcoeRXLBEq3X0
LVJWQ2mGVYop7v8eMa7QY/o6WlmTuvSJPFde1Bqlln2y2j3fDGV7gRj/J/IgVu1k
YKJ3fpnoHghL2VE29vbOZsj1LlfUROYdZwXiwhZGznSP8182kyHB+YMBYAYihOlv
Cx+ExzohtqbfsiydLAmbvos1QnsDepweyHXol7hhFjVWF6YK4RoW6V/uMstCQeMC
MPREvhkG7ZrsaA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:57 2025 by rpki-client