Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: vyi2YeIJGGqzt1My2EsPoix23qCgCEmi668uw9Yf7xg=
Subject key identifier: 7F:F3:BF:9E:F5:53:98:E7:BA:39:76:68:A2:FD:43:76:19:A7:D6:EC
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 01987ABFEBAE4FA8310180043E58CACF658F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 0BE3
Signing time: Tue 05 Aug 2025 15:00:54 +0000
Manifest this update: Tue 05 Aug 2025 15:00:54 +0000
Manifest next update: Wed 06 Aug 2025 15:00:54 +0000
Files and hashes: 1: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (hash: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=)
2: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
3: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: ON5qcbmCr9gaRNWetg8llWBKzy4aQiHvSx0b5TYi3QQ=)
4: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
5: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
6: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
7: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
8: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:eb:ae:4f:a8:31:01:80:04:3e:58:ca:cf:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Aug 5 15:00:54 2025 GMT
Not After : Aug 6 15:00:54 2025 GMT
Subject: CN=7ff3bf9ef55398e7ba397668a2fd437619a7d6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:a2:3c:3a:38:da:66:37:8d:86:5e:4e:64:
bb:44:ac:a6:33:ee:3d:67:15:88:a0:5c:93:0a:50:
35:95:83:75:4a:cc:0b:74:40:5d:7f:bd:e5:f3:67:
cd:7a:97:e5:3d:9c:2a:f9:6a:45:0f:8a:7c:6f:39:
42:17:48:77:56:d6:09:8b:65:a4:5a:f7:00:50:44:
ad:83:e2:aa:f4:88:99:96:5c:a0:6a:7a:89:2d:a8:
8a:ef:d2:9f:3c:b9:ef:c6:43:44:30:f6:01:b6:bc:
91:81:32:2e:bb:34:5d:02:e3:43:57:1e:6a:79:98:
1c:65:7c:f5:17:87:7e:78:2b:d6:e2:3f:12:4f:16:
4f:29:c4:e1:60:27:57:dc:cd:93:bb:19:4d:2c:7f:
04:d7:39:6d:5d:f9:da:2e:0c:dd:e6:98:c3:9c:25:
12:60:ba:26:0e:55:82:5c:3f:f5:9f:8e:20:31:fd:
47:9d:8f:ef:7f:39:aa:0f:0d:e3:71:fd:31:eb:c4:
83:c4:22:0b:96:d7:30:a6:e7:c8:b7:72:65:db:37:
c4:c9:e0:a6:8c:9a:de:07:e7:e7:bf:69:30:1c:78:
16:c6:6c:e6:b9:b9:6a:31:e6:b9:f4:8d:ed:eb:63:
93:b2:e7:94:63:23:5c:be:aa:cc:52:12:5d:83:c9:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:BF:9E:F5:53:98:E7:BA:39:76:68:A2:FD:43:76:19:A7:D6:EC
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ac:c8:fc:7b:7e:26:48:29:49:ef:f4:65:4a:80:24:c3:46:
72:37:ad:a8:54:a2:82:7c:92:af:49:48:37:1e:5f:ac:ee:2e:
ed:11:4b:2a:68:ec:6a:d9:32:60:92:57:74:43:8e:9d:d6:03:
7e:8f:b2:5d:fa:2d:b3:93:f6:c9:c8:4b:f9:34:9e:49:c3:d2:
32:85:46:c8:48:6f:62:a4:b9:38:7d:1e:12:b9:99:c6:e6:69:
87:ea:82:49:85:4e:d4:57:39:f2:50:83:81:92:8a:f7:f8:b7:
6a:10:86:97:a7:98:39:60:b3:bf:78:42:a2:a4:eb:cb:e6:f0:
90:a7:0f:91:bb:7a:94:8a:78:49:95:43:83:85:d1:d1:80:9e:
30:ef:f3:f7:26:73:2d:d3:2b:ef:3d:f1:b5:ad:60:6e:31:e9:
e9:62:99:08:bc:b5:05:5e:72:ff:ea:f7:cd:6a:58:76:fb:cc:
51:95:b2:d9:82:16:2f:82:ee:fe:78:3d:13:18:53:4b:95:62:
8e:2a:b5:69:9b:18:b3:de:a6:ff:d6:07:aa:68:ce:49:b0:7c:
39:34:a8:69:16:83:51:57:c5:70:28:d1:45:80:64:20:1d:54:
20:9e:d4:a4:d4:8c:47:1b:ec:7d:84:3f:73:47:fe:9a:ad:7f:
9b:f2:02:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6v+uuT6gxAYAEPljKz2WPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjUwODA1MTUwMDU0WhcNMjUwODA2MTUwMDU0WjAzMTEwLwYDVQQD
Eyg3ZmYzYmY5ZWY1NTM5OGU3YmEzOTc2NjhhMmZkNDM3NjE5YTdkNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29uiPDo42mY3jYZeTmS7RKymM+49
ZxWIoFyTClA1lYN1SswLdEBdf73l82fNepflPZwq+WpFD4p8bzlCF0h3VtYJi2Wk
WvcAUEStg+Kq9IiZllyganqJLaiK79KfPLnvxkNEMPYBtryRgTIuuzRdAuNDVx5q
eZgcZXz1F4d+eCvW4j8STxZPKcThYCdX3M2TuxlNLH8E1zltXfnaLgzd5pjDnCUS
YLomDlWCXD/1n44gMf1HnY/vfzmqDw3jcf0x68SDxCILltcwpufIt3Jl2zfEyeCm
jJreB+fnv2kwHHgWxmzmublqMea59I3t62OTsueUYyNcvqrMUhJdg8lDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/zv571U5jnujl2aKL9Q3YZp9bsMB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqzI/Ht+
JkgpSe/0ZUqAJMNGcjetqFSignySr0lINx5frO4u7RFLKmjsatkyYJJXdEOOndYD
fo+yXfots5P2ychL+TSeScPSMoVGyEhvYqS5OH0eErmZxuZph+qCSYVO1Fc58lCD
gZKK9/i3ahCGl6eYOWCzv3hCoqTry+bwkKcPkbt6lIp4SZVDg4XR0YCeMO/z9yZz
LdMr7z3xta1gbjHp6WKZCLy1BV5y/+r3zWpYdvvMUZWy2YIWL4Lu/ng9ExhTS5Vi
jiq1aZsYs96m/9YHqmjOSbB8OTSoaRaDUVfFcCjRRYBkIB1UIJ7UpNSMRxvsfYQ/
c0f+mq1/m/ICgQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:49 2025 by rpki-client