Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: L/kdQT8pUSdUC1Q/lgqWlMCZvJwgynS94rtU9LMQnXU=
Subject key identifier: 2D:C7:13:15:7D:F7:71:CC:A0:4A:8D:62:4E:40:EB:B6:06:15:8B:A5
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019882B0EEB02D165062888D26C3CFD2447E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 0EB0
Signing time: Thu 07 Aug 2025 04:01:30 +0000
Manifest this update: Thu 07 Aug 2025 04:01:30 +0000
Manifest next update: Fri 08 Aug 2025 04:01:30 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: z4MZVHWp2a/4gQwX7VVtzei0twcY2S2jiVTn5MVgogE=)
2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=)
3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:ee:b0:2d:16:50:62:88:8d:26:c3:cf:d2:44:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Aug 7 04:01:30 2025 GMT
Not After : Aug 8 04:01:30 2025 GMT
Subject: CN=2dc713157df771cca04a8d624e40ebb606158ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:cd:b9:5d:4f:63:e0:30:9d:21:52:d4:c2:
d5:09:a6:02:44:39:ac:6f:81:e7:5a:df:73:f8:96:
ea:03:67:6e:28:71:33:62:bb:be:71:78:4d:47:20:
d3:7c:65:4c:6d:fd:7e:45:40:1d:b3:cf:67:7a:b1:
b8:c7:78:c4:7d:f9:33:ab:67:8a:fa:b5:de:0c:3f:
92:6b:36:0f:0d:c6:70:4e:4d:81:d8:bc:cd:e3:d9:
df:cb:8d:9a:d7:45:76:ea:06:11:85:e7:a1:8f:18:
a0:a9:ae:3c:4f:0e:33:8b:83:7d:92:3c:69:3a:36:
c6:cd:02:b0:c7:b5:57:e4:de:98:a1:70:f5:c0:42:
cf:29:dd:a6:b3:e4:40:3e:50:5a:be:03:0b:2d:47:
a2:eb:f3:5e:1e:e6:b3:d4:6c:ed:aa:42:39:e8:ae:
8f:df:c7:04:c4:77:71:60:4c:6d:5a:b4:df:bf:6c:
e2:b7:42:21:9c:6d:76:6f:87:74:ef:6d:49:04:10:
f5:2f:66:13:4d:5c:78:45:ce:77:87:b1:e3:7e:53:
05:0c:44:f6:d8:1a:e3:b6:bc:cd:07:f1:ef:3c:c1:
da:ef:19:7e:01:48:b4:96:61:4a:71:aa:96:5c:00:
39:2e:64:a5:03:4a:73:e7:fe:1f:55:0f:b3:81:33:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:13:15:7D:F7:71:CC:A0:4A:8D:62:4E:40:EB:B6:06:15:8B:A5
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:73:ab:07:c6:f2:f7:74:65:9a:f7:73:40:28:8f:7e:a4:4f:
f5:9f:22:c2:7d:92:ff:dd:db:d4:a0:33:30:62:72:0d:97:ca:
48:1d:8d:b5:a1:47:ca:da:4d:f5:2b:4d:b3:dc:5a:c1:c5:6c:
49:2e:c8:c2:c0:cb:00:f9:64:84:f4:ca:11:e6:f4:21:33:e2:
35:ec:87:83:39:75:0c:6e:cd:af:b5:b5:00:7b:22:96:88:84:
b1:62:4a:d5:5c:06:12:25:b9:59:1e:bc:14:be:19:6c:91:aa:
fc:4f:22:bd:7f:75:12:dd:c0:98:47:be:c4:54:16:cd:d4:1b:
dc:6c:e8:89:a4:32:07:54:e0:80:6f:7e:71:c0:35:56:c1:a2:
51:6a:54:ca:ba:1d:f8:59:af:d3:3a:35:fe:b1:07:f2:4f:2a:
bf:c8:38:8d:62:b4:f6:12:39:0b:49:ee:c3:3f:a2:4f:b3:4e:
d5:d1:1c:c0:f1:a3:95:0c:85:98:c3:da:87:44:0a:d8:2a:72:
45:2f:55:35:ff:2d:45:38:cb:3c:cd:6e:cf:48:cc:68:98:c0:
0a:99:ae:28:94:84:39:6f:40:77:19:ef:42:bb:71:e6:5c:29:
4c:ef:fc:b4:e8:ee:bc:c7:ab:90:4a:8b:a2:ed:2a:48:ff:fe:
a1:cf:59:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCsO6wLRZQYoiNJsPP0kR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk
ZGU4YTUwHhcNMjUwODA3MDQwMTMwWhcNMjUwODA4MDQwMTMwWjAzMTEwLwYDVQQD
EygyZGM3MTMxNTdkZjc3MWNjYTA0YThkNjI0ZTQwZWJiNjA2MTU4YmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt//NuV1PY+AwnSFS1MLVCaYCRDms
b4HnWt9z+JbqA2duKHEzYru+cXhNRyDTfGVMbf1+RUAds89nerG4x3jEffkzq2eK
+rXeDD+SazYPDcZwTk2B2LzN49nfy42a10V26gYRheehjxigqa48Tw4zi4N9kjxp
OjbGzQKwx7VX5N6YoXD1wELPKd2ms+RAPlBavgMLLUei6/NeHuaz1GztqkI56K6P
38cExHdxYExtWrTfv2zit0IhnG12b4d0721JBBD1L2YTTVx4Rc53h7HjflMFDET2
2BrjtrzNB/HvPMHa7xl+AUi0lmFKcaqWXAA5LmSlA0pz5/4fVQ+zgTNdCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3HExV993HMoEqNYk5A67YGFYulMB8GA1UdIwQY
MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt
YWVhNzE0ZWM1MTEzLzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz
LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHOrB8by
93RlmvdzQCiPfqRP9Z8iwn2S/93b1KAzMGJyDZfKSB2NtaFHytpN9StNs9xawcVs
SS7IwsDLAPlkhPTKEeb0ITPiNeyHgzl1DG7Nr7W1AHsiloiEsWJK1VwGEiW5WR68
FL4ZbJGq/E8ivX91Et3AmEe+xFQWzdQb3GzoiaQyB1TggG9+ccA1VsGiUWpUyrod
+Fmv0zo1/rEH8k8qv8g4jWK09hI5C0nuwz+iT7NO1dEcwPGjlQyFmMPah0QK2Cpy
RS9VNf8tRTjLPM1uz0jMaJjACpmuKJSEOW9AdxnvQrtx5lwpTO/8tOjuvMerkEqL
ou0qSP/+oc9Z3Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:27:44 2025 by rpki-client