
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: ICktpoyFV8dIkPyCPU1KXhRKL854n7pdlIRFEi5866g=
Subject key identifier: AC:A3:C4:FA:85:5B:BE:C5:9C:CA:DC:1C:C3:69:07:EC:8C:D5:72:F0
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 0197B6A1D521BB2CE547C9DA18DE81C5F789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: aHxzceSBfFawU2dFYS3N/XhNAmUBU3wsDZtgc/EpHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d5:21:bb:2c:e5:47:c9:da:18:de:81:c5:f7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=aca3c4fa855bbec59ccadc1cc36907ec8cd572f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:1f:4c:d7:65:19:16:38:27:1a:97:09:29:
c1:65:a4:51:71:07:82:f3:c0:23:da:ba:eb:39:8a:
5b:60:ed:36:f6:2b:0a:5f:f0:5f:4f:ae:bd:7a:a7:
e1:70:00:56:5d:89:87:30:df:32:25:28:ed:db:1f:
47:9a:f7:41:9f:3b:09:61:58:d0:86:da:a1:ad:9e:
e8:1f:42:34:54:1a:b3:9f:99:62:8e:bf:69:08:ae:
0e:1c:10:99:7a:a3:37:ed:08:d6:6c:ac:dc:de:15:
8c:91:eb:0a:e2:74:08:3e:8e:3c:07:02:f5:f0:f3:
50:08:fd:cc:88:8e:4d:61:d2:95:c7:3e:7b:bf:84:
9e:ca:aa:78:a9:63:1d:2f:2e:a7:a9:a1:cb:77:ac:
4b:35:75:82:dc:ec:60:ba:a9:18:39:e7:4f:fe:ac:
d4:d6:5a:7b:b8:82:dc:98:3f:06:c1:69:90:2e:fb:
78:af:c1:62:03:28:8d:6a:89:9d:05:c3:86:26:45:
88:09:17:16:6a:a0:bd:37:67:ed:46:dc:4e:c4:d0:
fc:bd:c1:ad:4b:56:5d:fc:44:e2:17:70:72:15:6b:
b8:45:dc:03:be:41:8a:a3:09:44:db:ff:10:9d:6c:
c8:40:f0:94:0a:c6:55:ad:e9:5d:f0:ab:47:89:a4:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:C4:FA:85:5B:BE:C5:9C:CA:DC:1C:C3:69:07:EC:8C:D5:72:F0
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5b:c1:98:dd:b0:8f:73:ed:32:b6:c4:6a:28:ea:47:e0:bb:
c4:84:d1:0a:3c:30:23:93:03:57:56:12:a1:e3:e6:18:23:7e:
e2:bd:33:c4:7b:c3:c9:6f:61:dc:e7:e2:ce:09:46:be:54:ed:
d6:15:f4:b6:3a:c9:16:82:f8:ec:94:f2:52:8b:9c:92:ac:6a:
8c:89:7b:85:b1:50:b7:d6:64:f0:13:70:92:40:ae:d5:bb:26:
cb:18:cd:5a:41:14:dd:91:b0:88:f7:ee:68:a9:fe:5f:97:65:
90:24:2e:b5:da:40:11:5d:16:50:2a:f9:3a:e1:99:f1:37:02:
1b:da:b4:e3:22:e6:a4:93:2f:5e:30:9a:2f:3c:be:0d:b0:c3:
0d:96:d5:de:2c:c5:af:30:d9:45:c2:da:51:4f:18:d1:a9:77:
69:60:4a:ec:55:1a:e2:84:a9:34:ca:25:d5:92:a8:e3:5a:58:
f7:d6:57:2d:53:ab:05:19:6b:52:60:59:b4:b4:34:13:8f:79:
2b:31:5a:c9:0a:a0:8b:59:36:71:6b:b0:94:93:a9:91:59:84:
a9:83:eb:02:41:c5:72:72:42:0a:98:55:93:07:6d:b9:65:a9:
26:f3:10:85:10:61:5a:df:63:86:e2:31:f1:98:9c:5c:ba:95:
4c:fa:91:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2odUhuyzlR8naGN6BxfeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzY4ZWQ1MGJiNTNkY2FlODU3ZTRjODViY2FmZDUxM2Yy
Nzc0ZGEwHhcNMjUwNjI4MTMwMjI4WhcNMjUwNjI5MTMwMjI4WjAzMTEwLwYDVQQD
EyhhY2EzYzRmYTg1NWJiZWM1OWNjYWRjMWNjMzY5MDdlYzhjZDU3MmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhkfTNdlGRY4JxqXCSnBZaRRcQeC
88Aj2rrrOYpbYO029isKX/BfT669eqfhcABWXYmHMN8yJSjt2x9HmvdBnzsJYVjQ
htqhrZ7oH0I0VBqzn5lijr9pCK4OHBCZeqM37QjWbKzc3hWMkesK4nQIPo48BwL1
8PNQCP3MiI5NYdKVxz57v4Seyqp4qWMdLy6nqaHLd6xLNXWC3OxguqkYOedP/qzU
1lp7uILcmD8GwWmQLvt4r8FiAyiNaomdBcOGJkWICRcWaqC9N2ftRtxOxND8vcGt
S1Zd/ETiF3ByFWu4RdwDvkGKowlE2/8QnWzIQPCUCsZVreld8KtHiaT7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyjxPqFW77FnMrcHMNpB+yM1XLwMB8GA1UdIwQY
MBaAFEfGjtULtT3K6FfkyFvK/VE/J3TaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhhTzFRdTFQY3JvVi1USVc4cjlVVDhuZE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mZmNhMTgtOWQ3Ni00MDljLWEwZWMt
N2M0NTA0OTgyMDMwLzEvUjhhTzFRdTFQY3JvVi1USVc4cjlVVDhuZE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mZmNhMTgtOWQ3Ni00MDljLWEwZWMtN2M0NTA0OTgyMDMw
LzEvUjhhTzFRdTFQY3JvVi1USVc4cjlVVDhuZE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflvBmN2w
j3PtMrbEaijqR+C7xITRCjwwI5MDV1YSoePmGCN+4r0zxHvDyW9h3OfizglGvlTt
1hX0tjrJFoL47JTyUouckqxqjIl7hbFQt9Zk8BNwkkCu1bsmyxjNWkEU3ZGwiPfu
aKn+X5dlkCQutdpAEV0WUCr5OuGZ8TcCG9q04yLmpJMvXjCaLzy+DbDDDZbV3izF
rzDZRcLaUU8Y0al3aWBK7FUa4oSpNMol1ZKo41pY99ZXLVOrBRlrUmBZtLQ0E495
KzFayQqgi1k2cWuwlJOpkVmEqYPrAkHFcnJCCphVkwdtuWWpJvMQhRBhWt9jhuIx
8ZicXLqVTPqRgg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:19 2025 by rpki-client