
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: a8O5m4A62GxXqEx2p1PorRes1tpwq8Lksw6JLUybUKc=
Subject key identifier: 84:AC:81:8C:C5:08:63:02:B5:B2:F7:FD:FA:DD:44:7E:70:67:7F:B0
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 01987D1C88A2FADA8D3CBB08AC3F0349423C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:01:18 +0000
Manifest this update: Wed 06 Aug 2025 02:01:18 +0000
Manifest next update: Thu 07 Aug 2025 02:01:18 +0000
Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: BFXfXzDX6acYG9eaYg0uH0ZR62Wp0Oqvod49fbJJq8Q=)
3: jMGhTNUb7i42fBQA0pNbTbsvC0w.roa (hash: 3rIrbzRKv4rGgOKlFAltJmUMNb9Mmay1gOYKugMTp+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:88:a2:fa:da:8d:3c:bb:08:ac:3f:03:49:42:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Aug 6 02:01:18 2025 GMT
Not After : Aug 7 02:01:18 2025 GMT
Subject: CN=84ac818cc5086302b5b2f7fdfadd447e70677fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:40:11:57:48:c6:83:05:fc:06:ec:71:a0:
03:29:42:e0:25:79:5a:3d:6a:8a:7f:1f:b3:24:0b:
25:82:12:5a:fb:db:9d:f8:15:aa:0c:db:49:49:a1:
1c:75:4c:ef:26:6f:a0:4d:cc:7b:5b:ca:15:e5:b9:
c4:ac:3a:29:08:bb:4f:b7:b6:87:84:fb:e4:76:b6:
c7:21:f2:09:ad:9a:01:fe:8a:3a:a3:14:cd:52:2b:
61:3c:a6:f6:56:d4:bc:23:5c:fe:04:de:b5:9f:bf:
ac:f4:47:4b:fd:7e:12:50:24:e8:ef:29:83:c7:f8:
06:ff:52:68:d7:11:f2:6f:48:b2:ca:c3:8f:44:9d:
e0:08:b3:be:0a:e6:48:1a:95:dc:9d:86:2f:67:b1:
b2:9d:19:f2:ae:af:cb:4e:f9:ec:ee:0a:fe:88:e6:
af:06:cb:30:24:6d:45:1c:59:a3:8f:9b:2d:8d:a6:
eb:4a:8c:ba:bd:61:73:ed:17:9e:f7:7f:38:f6:88:
66:9d:99:86:67:c3:d1:16:28:10:4b:9d:e0:ec:92:
ee:df:3f:22:b8:7d:c0:d6:fe:27:11:1d:22:6a:6c:
82:b0:e0:ea:8e:54:3a:c5:6f:8b:37:1a:b3:2a:b2:
2c:e1:0d:3e:af:a3:15:21:ba:e1:57:d9:26:0a:78:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:81:8C:C5:08:63:02:B5:B2:F7:FD:FA:DD:44:7E:70:67:7F:B0
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e8:37:21:ef:09:a0:b3:6e:e4:da:30:6b:f8:dc:be:f9:4a:
86:56:7f:0f:88:4c:e0:bb:c6:78:8a:15:83:14:36:36:1e:46:
e3:58:5d:36:f4:62:55:8c:6f:5f:42:d5:b3:42:91:72:23:7e:
6b:6d:05:86:98:1b:62:fa:16:e7:ba:d7:74:6c:4b:7c:79:50:
48:85:36:3d:de:ac:3d:b6:7c:6d:7f:5b:e6:b3:30:61:1f:6f:
22:8a:ca:b0:f7:8f:28:75:87:53:da:87:3d:d4:f3:2a:66:b7:
9a:55:ca:9c:11:aa:6c:83:d5:86:e0:62:b5:30:12:8f:ce:d9:
7d:05:e5:8f:92:c8:06:30:35:f5:d2:f7:0f:9e:a8:5c:e9:59:
3b:e0:d6:e4:fc:87:30:2c:ae:e3:1f:99:4b:a5:f1:d3:c4:b6:
bf:09:69:cd:24:11:7b:a0:fa:4e:56:83:fa:3c:c7:72:87:4b:
86:1e:41:34:fe:6a:58:74:19:2d:5d:23:73:40:b5:3d:a2:d9:
c3:d2:48:4e:d0:08:b8:35:53:d0:cb:21:6c:c8:3d:1a:bc:8a:
52:42:30:5f:7b:34:60:66:0e:90:7e:db:72:ed:8f:d5:f2:cd:
97:37:15:a4:93:73:b6:a7:f0:a1:c2:95:cd:6f:4e:cd:4d:53:
fb:c1:54:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HIii+tqNPLsIrD8DSUI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjUwODA2MDIwMTE4WhcNMjUwODA3MDIwMTE4WjAzMTEwLwYDVQQD
Eyg4NGFjODE4Y2M1MDg2MzAyYjViMmY3ZmRmYWRkNDQ3ZTcwNjc3ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ilAEVdIxoMF/AbscaADKULgJXla
PWqKfx+zJAslghJa+9ud+BWqDNtJSaEcdUzvJm+gTcx7W8oV5bnErDopCLtPt7aH
hPvkdrbHIfIJrZoB/oo6oxTNUithPKb2VtS8I1z+BN61n7+s9EdL/X4SUCTo7ymD
x/gG/1Jo1xHyb0iyysOPRJ3gCLO+CuZIGpXcnYYvZ7GynRnyrq/LTvns7gr+iOav
BsswJG1FHFmjj5stjabrSoy6vWFz7Ree93849ohmnZmGZ8PRFigQS53g7JLu3z8i
uH3A1v4nER0iamyCsODqjlQ6xW+LNxqzKrIs4Q0+r6MVIbrhV9kmCnh78QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISsgYzFCGMCtbL3/frdRH5wZ3+wMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOug3Ie8J
oLNu5Nowa/jcvvlKhlZ/D4hM4LvGeIoVgxQ2Nh5G41hdNvRiVYxvX0LVs0KRciN+
a20FhpgbYvoW57rXdGxLfHlQSIU2Pd6sPbZ8bX9b5rMwYR9vIorKsPePKHWHU9qH
PdTzKma3mlXKnBGqbIPVhuBitTASj87ZfQXlj5LIBjA19dL3D56oXOlZO+DW5PyH
MCyu4x+ZS6Xx08S2vwlpzSQRe6D6TlaD+jzHcodLhh5BNP5qWHQZLV0jc0C1PaLZ
w9JITtAIuDVT0MshbMg9GryKUkIwX3s0YGYOkH7bcu2P1fLNlzcVpJNztqfwocKV
zW9OzU1T+8FUrw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:58 2025 by rpki-client