Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: P+qWLDI9mGy+L22EpbLtdf2spTYpWXiivrsZUOgvipU=
Subject key identifier: 25:23:A5:54:44:73:38:C9:D0:64:21:B7:CB:06:C9:94:B3:7E:99:A2
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 019889FBE93001E1C955C352BBED8E483BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 0A45
Signing time: Fri 08 Aug 2025 14:00:44 +0000
Manifest this update: Fri 08 Aug 2025 14:00:44 +0000
Manifest next update: Sat 09 Aug 2025 14:00:44 +0000
Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: O02jNfgsbki3Qd5AiiiNEcSPUeKXyGR0MXd+pouEFIw=)
2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:e9:30:01:e1:c9:55:c3:52:bb:ed:8e:48:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Aug 8 14:00:44 2025 GMT
Not After : Aug 9 14:00:44 2025 GMT
Subject: CN=2523a554447338c9d06421b7cb06c994b37e99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:52:9e:8b:f2:3e:db:a0:1e:9a:db:73:96:
bf:f0:f5:1e:2c:3a:86:c2:f7:a4:b6:af:df:3e:c7:
d4:d5:83:9d:1a:39:db:63:ff:b5:80:ea:5c:67:10:
81:3f:e3:94:35:d0:dd:e8:c0:9c:f7:03:0a:a5:eb:
7a:db:0b:49:fb:63:ed:f7:11:01:ab:b0:3e:49:04:
6a:80:4d:14:ab:48:02:d0:44:97:d7:ee:ae:aa:48:
f5:1b:d7:64:dc:4a:1f:9a:e9:c2:30:5d:b3:31:51:
34:04:e8:af:de:67:9d:fb:e4:a6:04:44:1b:2c:a1:
1e:b4:46:8e:e6:5b:e7:c1:5b:cc:36:7a:fe:1d:e9:
51:f8:ba:71:1c:8e:13:81:60:70:87:33:cc:c7:1d:
94:c4:d0:6d:67:53:ca:db:02:0f:cc:8a:7c:5a:f1:
3a:d3:e3:80:ca:73:23:9a:55:6c:65:56:c2:85:80:
7a:6a:3c:8f:16:61:4d:b7:5d:79:55:5b:98:d9:7a:
47:7e:79:b1:e5:07:36:21:44:c3:e6:84:bb:e2:d9:
db:65:53:d6:ed:b9:a0:a0:5d:98:7e:b1:d5:c4:7d:
ab:69:b6:15:d9:2f:31:c4:d4:37:d8:b2:e1:d2:1a:
aa:ff:15:65:8e:58:a4:44:e4:44:0e:a6:63:89:a7:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:A5:54:44:73:38:C9:D0:64:21:B7:CB:06:C9:94:B3:7E:99:A2
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:86:e5:86:de:9a:a3:85:46:f5:d4:8d:23:8e:e8:2b:72:56:
3f:3b:2a:ff:d3:5d:b7:32:98:0f:2c:64:46:ff:cf:04:9d:e8:
cb:66:39:06:28:f1:95:5e:43:a3:21:ee:74:f6:e8:eb:1f:f0:
19:34:e9:7d:b9:57:b7:9e:78:d6:72:fd:a1:61:8a:67:d9:11:
51:3d:8a:1a:f9:01:6e:f5:d8:44:fa:7b:7a:76:13:29:55:02:
28:ed:78:c8:f1:e8:5c:31:09:99:0a:c0:d8:35:cc:8e:32:8e:
94:89:de:aa:e1:6e:a2:e5:63:c2:02:6e:e7:ba:76:66:4d:64:
71:62:06:32:8e:b5:a7:87:15:0c:49:4d:f9:46:a6:56:fa:25:
70:9e:0a:25:68:62:c4:e6:73:60:ba:cc:5a:0b:95:bc:23:30:
9e:23:25:0b:06:72:13:34:e0:45:b0:a6:6b:79:06:49:1f:6f:
72:71:8d:ae:1c:59:f7:f4:ae:08:60:91:e3:5d:0e:dc:80:14:
fb:5d:73:5f:f6:cd:24:ef:e3:71:fa:29:04:28:83:04:28:72:
b7:22:0a:b8:8e:2e:4f:7c:fd:54:30:f6:6f:5d:97:c0:66:36:
11:47:a0:13:00:52:70:dc:07:bb:a0:78:52:c8:1a:20:87:9d:
7b:aa:13:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJ++kwAeHJVcNSu+2OSDugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzVmMTBhZjhiY2I1ZmM2ZTM0YTQ3M2I0YTZjYWU3YWQw
MmQ5MDIwHhcNMjUwODA4MTQwMDQ0WhcNMjUwODA5MTQwMDQ0WjAzMTEwLwYDVQQD
EygyNTIzYTU1NDQ0NzMzOGM5ZDA2NDIxYjdjYjA2Yzk5NGIzN2U5OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jlSnovyPtugHprbc5a/8PUeLDqG
wvektq/fPsfU1YOdGjnbY/+1gOpcZxCBP+OUNdDd6MCc9wMKpet62wtJ+2Pt9xEB
q7A+SQRqgE0Uq0gC0ESX1+6uqkj1G9dk3EofmunCMF2zMVE0BOiv3med++SmBEQb
LKEetEaO5lvnwVvMNnr+HelR+LpxHI4TgWBwhzPMxx2UxNBtZ1PK2wIPzIp8WvE6
0+OAynMjmlVsZVbChYB6ajyPFmFNt115VVuY2XpHfnmx5Qc2IUTD5oS74tnbZVPW
7bmgoF2YfrHVxH2rabYV2S8xxNQ32LLh0hqq/xVljlikROREDqZjiac1hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUjpVREczjJ0GQht8sGyZSzfpmiMB8GA1UdIwQY
MBaAFJPF8Qr4vLX8bjSkc7SmyuetAtkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMt
OGVhYWQwYjA0OWE3LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMtOGVhYWQwYjA0OWE3
LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIblht6a
o4VG9dSNI47oK3JWPzsq/9NdtzKYDyxkRv/PBJ3oy2Y5BijxlV5DoyHudPbo6x/w
GTTpfblXt5541nL9oWGKZ9kRUT2KGvkBbvXYRPp7enYTKVUCKO14yPHoXDEJmQrA
2DXMjjKOlInequFuouVjwgJu57p2Zk1kcWIGMo61p4cVDElN+UamVvolcJ4KJWhi
xOZzYLrMWguVvCMwniMlCwZyEzTgRbCma3kGSR9vcnGNrhxZ9/SuCGCR410O3IAU
+11zX/bNJO/jcfopBCiDBChytyIKuI4uT3z9VDD2b12XwGY2EUegEwBScNwHu6B4
UsgaIIede6oTBw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:47:58 2025 by rpki-client