
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: G+hFGFqRqRUKk6j3/N1NfEtrB4tKDyIJo8jg3G4ya80=
Subject key identifier: 1E:85:5E:C9:43:E7:63:AF:A5:4D:37:43:35:87:10:47:3F:EC:C7:A8
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 019889575016015FC50AFF026AF2E000B3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 11:00:57 +0000
Manifest this update: Fri 08 Aug 2025 11:00:57 +0000
Manifest next update: Sat 09 Aug 2025 11:00:57 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: 4HUOq0k2dBGdHd0DP+1/mvQOJzC9h1VV1HSShJk9S/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:50:16:01:5f:c5:0a:ff:02:6a:f2:e0:00:b3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Aug 8 11:00:57 2025 GMT
Not After : Aug 9 11:00:57 2025 GMT
Subject: CN=1e855ec943e763afa54d3743358710473fecc7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:03:6e:ff:65:68:49:9d:3d:d7:9f:48:8d:
f8:ce:d4:ff:2a:01:1e:db:4e:aa:d4:ff:d8:43:a9:
85:b0:e3:0f:37:09:74:5a:88:79:60:d1:29:13:b2:
b1:ad:a2:ac:de:6f:cf:e7:b1:ff:36:d1:c8:03:f6:
cc:31:3f:07:59:75:52:9d:25:af:1f:6c:99:61:1b:
70:66:25:5e:c5:a9:70:5d:e8:3c:9d:90:22:85:38:
00:4d:24:1a:62:9e:57:70:e3:85:c4:73:f5:78:a6:
25:f4:d8:bf:07:af:d9:3b:aa:97:c8:83:eb:e6:9a:
59:30:b8:5a:61:11:8c:fe:5f:2c:aa:50:7c:e4:99:
be:e3:08:ab:c0:69:f2:0e:87:60:79:02:98:81:c0:
13:51:af:25:60:7a:1d:67:9a:15:95:60:d4:a2:d3:
a7:42:88:47:5f:38:ec:54:01:15:de:38:55:57:a5:
ac:dd:c7:9c:fc:2f:ff:93:16:93:c6:1a:83:cf:df:
e9:94:27:f6:00:75:c9:61:60:db:cc:3e:cd:0e:d8:
9f:45:11:c1:35:f5:f0:8f:16:c7:df:ab:bd:22:73:
c6:93:ee:8e:f8:a5:35:6d:d8:3f:54:08:93:d8:d1:
00:fd:dc:86:4a:93:3f:fb:e3:4d:b0:c0:e4:3d:60:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:5E:C9:43:E7:63:AF:A5:4D:37:43:35:87:10:47:3F:EC:C7:A8
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e6:44:54:d8:a4:fe:2e:cf:3d:d2:d4:b3:7c:33:16:0f:a7:
43:38:7b:e9:64:ed:31:52:7b:6b:b2:03:4c:e7:a9:aa:91:3e:
c8:72:ee:b0:86:1c:a3:54:fd:c7:a9:e1:d0:6b:b6:0d:25:22:
fc:8f:11:7b:f2:28:0a:e1:32:80:01:10:74:97:9c:16:c2:72:
9c:39:c7:69:ec:11:0f:f7:1f:38:99:f0:94:7d:c9:51:07:b1:
b9:52:47:df:f0:94:f7:07:ac:d0:e5:6a:8e:77:3c:29:a3:8f:
f5:50:a0:40:8d:a4:d7:cf:44:cf:17:b5:d0:25:4e:33:53:b3:
8e:d8:28:b9:e4:af:ed:28:60:48:55:95:63:4a:40:5c:cc:84:
5c:92:c0:ab:4f:04:1f:6c:5c:4a:6a:3d:81:8c:60:ea:6e:13:
85:64:6e:8b:3b:20:53:da:27:ca:4d:e4:39:5c:33:1f:51:1e:
7a:d9:c4:9a:7d:36:4e:a3:51:10:34:47:51:84:3e:60:00:28:
b0:e2:99:92:9f:a3:17:51:a8:c7:a1:8a:c3:44:6f:c4:1d:15:
ce:81:3c:7f:af:a7:47:71:b3:d7:ac:0c:01:7b:6f:02:c5:63:
e3:7d:8c:51:e4:ac:e1:ef:70:4c:a5:e6:11:db:3c:b8:22:b7:
fa:2d:13:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJV1AWAV/FCv8CavLgALPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzFmZGJhZjlhYzBlNWFkZWVjNjBhMDkyM2M0ZGQ0YTAx
ZTkyZGMwHhcNMjUwODA4MTEwMDU3WhcNMjUwODA5MTEwMDU3WjAzMTEwLwYDVQQD
EygxZTg1NWVjOTQzZTc2M2FmYTU0ZDM3NDMzNTg3MTA0NzNmZWNjN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAEDbv9laEmdPdefSI34ztT/KgEe
206q1P/YQ6mFsOMPNwl0Woh5YNEpE7KxraKs3m/P57H/NtHIA/bMMT8HWXVSnSWv
H2yZYRtwZiVexalwXeg8nZAihTgATSQaYp5XcOOFxHP1eKYl9Ni/B6/ZO6qXyIPr
5ppZMLhaYRGM/l8sqlB85Jm+4wirwGnyDodgeQKYgcATUa8lYHodZ5oVlWDUotOn
QohHXzjsVAEV3jhVV6Ws3cec/C//kxaTxhqDz9/plCf2AHXJYWDbzD7NDtifRRHB
NfXwjxbH36u9InPGk+6O+KU1bdg/VAiT2NEA/dyGSpM/++NNsMDkPWAeCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6FXslD52OvpU03QzWHEEc/7MeoMB8GA1UdIwQY
MBaAFMfB/br5rA5a3uxgoJI8TdSgHpLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjkt
ZjAwMjk4MTYwOTdlLzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjktZjAwMjk4MTYwOTdl
LzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeZEVNik
/i7PPdLUs3wzFg+nQzh76WTtMVJ7a7IDTOepqpE+yHLusIYco1T9x6nh0Gu2DSUi
/I8Re/IoCuEygAEQdJecFsJynDnHaewRD/cfOJnwlH3JUQexuVJH3/CU9wes0OVq
jnc8KaOP9VCgQI2k189Ezxe10CVOM1OzjtgoueSv7ShgSFWVY0pAXMyEXJLAq08E
H2xcSmo9gYxg6m4ThWRuizsgU9onyk3kOVwzH1EeetnEmn02TqNREDRHUYQ+YAAo
sOKZkp+jF1Gox6GKw0RvxB0VzoE8f6+nR3Gz16wMAXtvAsVj432MUeSs4e9wTKXm
Eds8uCK3+i0TZQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:41 2025 by rpki-client