Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: yZEPQZrk7M4y6AXNfKb8EGoN06n9gOGVMh+55eH9dFE=
Subject key identifier: 76:99:73:69:13:77:52:98:6D:F7:BA:6E:4D:C7:25:AA:85:A4:67:6D
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 019769CF08AF3868D992A9759E6BE33EAEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0C86
Signing time: Fri 13 Jun 2025 15:01:05 +0000
Manifest this update: Fri 13 Jun 2025 15:01:05 +0000
Manifest next update: Sat 14 Jun 2025 15:01:05 +0000
Files and hashes: 1: 11v4ujiE85pODnajO4MIvDa-EEI.roa (hash: 899jJDpYjGC19E0C+sSPG4BflRjWNeXH81Y2tQUCHZ0=)
2: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: YarStqYp0Vnkihwc5gpbgP3hWL2pnjdyi3Eu9RYBxNQ=)
3: H5a6_PbqYpspvXprSKayoanO0T4.roa (hash: rh38nYvA7FwPR7BzdHUH02hvI8rv4wT+OqQOUSlde48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:08:af:38:68:d9:92:a9:75:9e:6b:e3:3e:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Jun 13 15:01:05 2025 GMT
Not After : Jun 14 15:01:05 2025 GMT
Subject: CN=76997369137752986df7ba6e4dc725aa85a4676d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cd:92:d4:14:46:e8:57:f0:c7:a8:d9:f3:fc:
6f:a6:a5:7d:07:4f:34:67:b5:31:84:2a:6a:78:7f:
7a:a8:77:16:39:a6:97:5b:68:9a:14:0a:e3:56:28:
ec:d9:64:c2:6b:ea:7a:b1:76:f6:2e:0d:8b:63:fd:
bb:da:a9:75:55:76:bb:2f:db:01:77:5f:60:81:a0:
cc:5f:fd:ce:c1:a7:e0:bc:8e:b5:51:70:92:c7:ae:
d4:fd:6a:80:ac:20:a6:df:94:9c:70:68:8b:b4:50:
ef:90:ba:19:e9:1e:ca:00:7b:cf:80:23:fa:6d:05:
cc:3d:89:5f:1a:ad:03:0f:5d:14:69:42:41:61:75:
64:3d:be:23:b5:9e:34:3d:1a:49:ab:77:67:05:b8:
27:5c:b5:8e:7d:ca:96:47:39:71:c5:39:14:b6:c5:
77:d8:67:72:72:5c:92:c2:d1:a7:63:81:c2:34:58:
23:48:7f:a7:4f:a7:40:69:69:64:8b:81:2c:e7:a6:
6a:c6:e7:23:32:d4:7b:58:85:0e:23:5d:47:73:40:
4d:70:e5:86:be:23:24:14:bb:9a:6f:54:76:a4:d2:
1c:5c:2b:c2:da:58:47:99:99:27:04:a8:bf:11:73:
3b:78:49:13:70:66:1a:e6:07:11:02:a1:c3:9a:86:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:73:69:13:77:52:98:6D:F7:BA:6E:4D:C7:25:AA:85:A4:67:6D
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:db:25:74:9d:4a:14:11:44:59:c8:6e:5d:14:cd:94:00:19:
4f:b7:1b:68:10:28:d2:04:59:6e:ce:dc:a6:93:71:15:8f:af:
50:1d:2d:9f:3f:7e:37:7d:ea:f4:0b:8f:59:88:2a:fa:b2:17:
41:01:24:b3:8d:45:c4:47:a6:bc:57:c1:11:af:15:ac:d3:c3:
e5:9a:5d:24:95:cb:97:5f:e2:a4:37:e9:55:ce:34:3a:a4:50:
49:5b:cb:ba:1d:0e:0a:00:1c:ef:16:27:2f:d4:02:29:b8:1c:
42:01:45:df:67:1b:9b:7f:f5:ca:5a:f6:fd:b8:c0:94:c0:e8:
77:f8:15:60:fa:ab:4c:12:53:71:30:b6:be:f1:ec:c5:6e:39:
2b:d0:59:37:8d:aa:46:de:70:63:b8:60:9d:d5:2b:82:f1:a6:
91:9a:0d:63:1b:f4:db:bd:72:85:33:b4:88:05:3b:a8:76:29:
04:54:30:77:92:34:bc:96:c7:96:ef:59:0b:07:34:d6:8f:05:
b6:ea:d2:17:44:c7:50:00:6e:ec:3a:cd:4a:e1:28:4c:7e:d7:
22:b3:19:0e:c1:42:b2:b1:87:d6:cc:22:0c:e3:d4:34:1b:5e:
89:83:72:79:a3:67:b0:78:ee:ea:6d:5a:8a:91:bc:bb:4a:b5:
5f:bf:9b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzwivOGjZkql1nmvjPq7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDg1ODc1Yzg0NzBlNmFhY2RjOTQ3NDIxMDVmMzBjNTk3
YWMyYmIwHhcNMjUwNjEzMTUwMTA1WhcNMjUwNjE0MTUwMTA1WjAzMTEwLwYDVQQD
Eyg3Njk5NzM2OTEzNzc1Mjk4NmRmN2JhNmU0ZGM3MjVhYTg1YTQ2NzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM2S1BRG6Ffwx6jZ8/xvpqV9B080
Z7UxhCpqeH96qHcWOaaXW2iaFArjVijs2WTCa+p6sXb2Lg2LY/272ql1VXa7L9sB
d19ggaDMX/3OwafgvI61UXCSx67U/WqArCCm35SccGiLtFDvkLoZ6R7KAHvPgCP6
bQXMPYlfGq0DD10UaUJBYXVkPb4jtZ40PRpJq3dnBbgnXLWOfcqWRzlxxTkUtsV3
2GdyclySwtGnY4HCNFgjSH+nT6dAaWlki4Es56ZqxucjMtR7WIUOI11Hc0BNcOWG
viMkFLuab1R2pNIcXCvC2lhHmZknBKi/EXM7eEkTcGYa5gcRAqHDmobzRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaZc2kTd1KYbfe6bk3HJaqFpGdtMB8GA1UdIwQY
MBaAFPJIWHXIRw5qrNyUdCEF8wxZesK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUt
OGZkNGMwMjQ0ODhlLzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUtOGZkNGMwMjQ0ODhl
LzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtsldJ1K
FBFEWchuXRTNlAAZT7cbaBAo0gRZbs7cppNxFY+vUB0tnz9+N33q9AuPWYgq+rIX
QQEks41FxEemvFfBEa8VrNPD5ZpdJJXLl1/ipDfpVc40OqRQSVvLuh0OCgAc7xYn
L9QCKbgcQgFF32cbm3/1ylr2/bjAlMDod/gVYPqrTBJTcTC2vvHsxW45K9BZN42q
Rt5wY7hgndUrgvGmkZoNYxv0271yhTO0iAU7qHYpBFQwd5I0vJbHlu9ZCwc01o8F
turSF0THUABu7DrNSuEoTH7XIrMZDsFCsrGH1swiDOPUNBteiYNyeaNnsHju6m1a
ipG8u0q1X7+bnw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:58 2025 by rpki-client