Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier: RXuoagpZ3S8x1DybA8Mjgpn1L+29CqdtK1yF/t0vSrU=
Subject key identifier: 8E:B4:DF:C1:37:AD:62:3F:17:A4:AB:31:4E:17:58:C7:AB:62:14:9F
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial: 0198D4732BAD01F11B51EDB3694D4B4F4499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number: 0843
Signing time: Sat 23 Aug 2025 01:02:54 +0000
Manifest this update: Sat 23 Aug 2025 01:02:54 +0000
Manifest next update: Sun 24 Aug 2025 01:02:54 +0000
Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: JEjCTBiWNbZRfzMxDDfEb2fxHbyZFTbOFr92tEfz3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:2b:ad:01:f1:1b:51:ed:b3:69:4d:4b:4f:44:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Validity
Not Before: Aug 23 01:02:54 2025 GMT
Not After : Aug 24 01:02:54 2025 GMT
Subject: CN=8eb4dfc137ad623f17a4ab314e1758c7ab62149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:bb:ae:ca:64:4c:c0:28:4a:19:10:3e:91:
a7:46:47:80:4a:e5:eb:a0:07:7e:43:7a:6c:81:aa:
a5:78:ff:31:02:53:f9:5e:79:5c:7d:a7:10:17:17:
31:87:67:e5:40:66:e9:78:ab:59:93:d3:b9:dc:25:
e8:55:e7:e9:a9:55:a9:90:81:94:27:1a:0b:7c:8f:
22:65:4c:f2:f6:47:a4:07:0c:0a:10:31:a4:eb:dc:
d6:87:4f:b1:3c:4f:68:20:7d:ce:87:24:63:76:c1:
b4:2f:de:bb:d3:8a:cf:98:2f:93:09:74:89:d3:78:
eb:72:da:f7:59:35:02:04:54:1c:20:ed:2b:c0:06:
38:03:30:91:47:92:e0:2e:92:62:47:06:62:b4:9d:
af:b3:04:80:c6:80:ab:f9:e6:5c:53:75:1a:be:3f:
bc:61:e2:e0:de:26:c3:fb:cd:48:23:5c:56:a3:e2:
e9:11:04:40:66:33:e5:a4:05:05:aa:66:19:b5:bb:
68:f6:50:f4:a4:ee:e4:fa:0f:94:94:6d:86:b9:89:
40:38:2c:5f:91:34:da:b5:1b:3f:e0:34:cf:fc:16:
c8:30:f4:1e:75:74:ac:62:db:3a:96:79:9d:a8:16:
c9:9d:7b:17:f0:f8:b9:fd:30:10:fa:85:80:95:81:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:DF:C1:37:AD:62:3F:17:A4:AB:31:4E:17:58:C7:AB:62:14:9F
X509v3 Authority Key Identifier:
keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:24:0e:39:cf:5e:2a:b8:7c:ca:17:cf:6c:74:4e:47:c2:
3e:28:cf:f6:7b:a5:c7:64:b7:a3:19:d0:7e:00:01:a7:cd:e8:
7d:18:65:f6:b0:f7:b0:0a:cd:6c:27:9a:ca:8e:ba:0e:5f:9c:
fc:d8:8f:9f:72:d7:5c:5b:1a:c4:6b:29:66:9b:f7:13:95:40:
f4:e5:78:e8:40:f0:94:40:1c:97:10:31:59:d0:53:bc:36:5c:
d2:d5:f0:a5:21:a9:3d:88:88:eb:6b:08:63:1a:17:7a:6a:a2:
92:6a:6b:aa:80:99:e3:32:de:fb:49:ac:dc:05:0f:ca:4a:d6:
e2:e7:0d:65:a3:22:68:a0:0e:90:32:d6:4f:f8:ea:95:b4:15:
a5:e3:43:93:27:8c:55:a5:c9:7b:1f:2e:13:32:99:6a:f7:26:
0f:77:11:26:63:bf:f8:7e:e4:78:93:2b:6c:c5:f6:09:69:59:
46:a9:8b:42:14:c8:b1:72:ca:dd:b2:85:c7:a9:58:dd:7c:79:
71:ac:2b:31:07:51:75:24:e3:68:3d:82:e4:d2:ac:44:2e:06:
63:99:60:18:cc:a2:ff:47:59:c9:a9:3d:0b:ff:16:6d:a9:76:
3e:34:d6:c6:bb:9e:9a:6b:57:51:fa:8c:0e:47:fc:6f:b8:ae:
7f:ea:0b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcyutAfEbUe2zaU1LT0SZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYmYyNzIxYTVkNzgzMzViN2I5N2RiNjNhZWM0MzVjOWNh
MzhiYzcwHhcNMjUwODIzMDEwMjU0WhcNMjUwODI0MDEwMjU0WjAzMTEwLwYDVQQD
Eyg4ZWI0ZGZjMTM3YWQ2MjNmMTdhNGFiMzE0ZTE3NThjN2FiNjIxNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTO7rspkTMAoShkQPpGnRkeASuXr
oAd+Q3psgaqleP8xAlP5XnlcfacQFxcxh2flQGbpeKtZk9O53CXoVefpqVWpkIGU
JxoLfI8iZUzy9kekBwwKEDGk69zWh0+xPE9oIH3OhyRjdsG0L96704rPmC+TCXSJ
03jrctr3WTUCBFQcIO0rwAY4AzCRR5LgLpJiRwZitJ2vswSAxoCr+eZcU3Uavj+8
YeLg3ibD+81II1xWo+LpEQRAZjPlpAUFqmYZtbto9lD0pO7k+g+UlG2GuYlAOCxf
kTTatRs/4DTP/BbIMPQedXSsYts6lnmdqBbJnXsX8Pi5/TAQ+oWAlYEuCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6038E3rWI/F6SrMU4XWMerYhSfMB8GA1UdIwQY
MBaAFLq/JyGl14M1t7l9tjrsQ1yco4vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jZmQ3YTMtNDYyNC00MGJlLWJiMjMt
ZDdiZmYxMTlmZDVkLzEvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jZmQ3YTMtNDYyNC00MGJlLWJiMjMtZDdiZmYxMTlmZDVk
LzEvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM4kDjnP
Xiq4fMoXz2x0TkfCPijP9nulx2S3oxnQfgABp83ofRhl9rD3sArNbCeayo66Dl+c
/NiPn3LXXFsaxGspZpv3E5VA9OV46EDwlEAclxAxWdBTvDZc0tXwpSGpPYiI62sI
YxoXemqikmprqoCZ4zLe+0ms3AUPykrW4ucNZaMiaKAOkDLWT/jqlbQVpeNDkyeM
VaXJex8uEzKZavcmD3cRJmO/+H7keJMrbMX2CWlZRqmLQhTIsXLK3bKFx6lY3Xx5
cawrMQdRdSTjaD2C5NKsRC4GY5lgGMyi/0dZyak9C/8Wbal2PjTWxruemmtXUfqM
Dkf8b7iuf+oLTw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:16 2025 by rpki-client