Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: +1Mn5JSvlit4YxGqvipzCEFp8iUv34fZx1rCujesPUg=
Subject key identifier: 75:C3:3B:0C:9F:83:97:C7:67:69:EA:00:A1:CA:10:8A:AC:70:ED:74
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 0198D5F16EEB63F84303D3D553A2D0C97EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 05CA
Signing time: Sat 23 Aug 2025 08:00:26 +0000
Manifest this update: Sat 23 Aug 2025 08:00:26 +0000
Manifest next update: Sun 24 Aug 2025 08:00:26 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: dTanHGq1itBu7LAtrBtH5QrnUnhwjjU7xOmG3e1Nwqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6e:eb:63:f8:43:03:d3:d5:53:a2:d0:c9:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Aug 23 08:00:26 2025 GMT
Not After : Aug 24 08:00:26 2025 GMT
Subject: CN=75c33b0c9f8397c76769ea00a1ca108aac70ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:bc:e3:cf:18:29:9d:42:21:b0:b8:ad:95:
43:19:2e:f2:a3:e8:19:1f:d4:9f:17:75:02:b8:4f:
31:a0:48:e6:89:b1:e2:a3:89:03:6b:cd:3e:15:56:
a3:9c:6b:e3:dd:8e:3e:fa:88:40:c7:8a:43:62:90:
33:fb:4b:29:a2:f8:cf:3c:fd:94:29:b0:e7:c4:ab:
83:f7:49:75:7d:02:fd:5f:64:49:33:bc:90:f8:71:
38:d3:96:46:4a:3e:df:37:c4:fb:d8:37:ae:64:e0:
da:3d:fd:f0:c6:27:8a:89:92:46:13:8f:ee:38:50:
05:35:0b:11:f6:0a:dc:29:57:a7:16:fb:ef:b2:dc:
26:1b:71:bd:28:00:bb:36:b8:c8:6a:7c:da:d1:9e:
74:a4:d0:8e:5c:5a:24:4b:c6:72:7f:18:7d:1e:cb:
db:5e:9d:96:78:e0:2c:6f:31:ff:7c:a8:a2:e1:52:
6f:e3:4f:a5:79:67:bb:4b:21:eb:da:df:f7:5b:d2:
f6:59:df:30:33:fb:c0:f3:cc:a0:83:73:34:d8:31:
e4:ba:40:05:cb:c6:f3:e0:eb:00:ff:06:06:2c:6a:
2d:98:64:7a:70:6e:ce:b1:31:cf:0d:18:f3:9d:b7:
db:6d:cf:a1:24:81:93:03:27:5a:fe:53:a6:b1:58:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:3B:0C:9F:83:97:C7:67:69:EA:00:A1:CA:10:8A:AC:70:ED:74
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cd:30:d1:03:be:6b:77:7f:9d:d2:3d:3b:c9:61:7a:ae:55:
05:2f:42:16:5a:b2:0f:c2:f8:6b:ec:53:9b:b8:22:ad:74:16:
95:2a:3b:cb:ed:13:bb:76:7f:6c:d2:3d:08:37:00:fa:be:e2:
d3:56:1d:73:58:78:4e:65:ca:0e:95:77:af:e5:c6:df:cd:c7:
58:ad:3b:41:dc:ff:e2:93:a6:00:a2:71:e8:fe:4b:ad:fc:7a:
6c:32:a7:e0:5e:60:68:fc:df:a9:da:20:42:ec:e0:4a:a3:3b:
71:d1:f5:85:ef:24:e9:2f:d6:f6:62:c7:fc:78:6c:fa:e4:09:
db:8e:75:de:22:cb:43:15:64:43:cb:06:ae:4b:89:2f:e7:dc:
38:bf:f7:58:29:2a:d1:e3:46:5e:32:9e:69:a0:2b:6c:fb:46:
6b:42:d3:1e:b5:12:65:bd:cf:f0:a8:e5:3d:66:5c:df:87:4e:
60:15:19:45:65:5c:4a:48:d9:1e:13:23:14:37:f3:2b:f7:d4:
b9:40:0a:d5:21:4c:7c:4e:a9:00:2f:44:63:07:11:0e:20:fc:
27:6f:52:39:77:b7:49:28:78:78:bd:d4:6a:3b:00:7c:f1:93:
63:b3:f8:eb:00:c5:5b:8c:08:cb:79:68:8b:7d:c9:f7:68:b8:
ed:9d:ea:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8W7rY/hDA9PVU6LQyX7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDJiYThhMmE5NmEwN2I1YjY0Y2FmODczMjkwZTIwNzhk
OTY0YTYwHhcNMjUwODIzMDgwMDI2WhcNMjUwODI0MDgwMDI2WjAzMTEwLwYDVQQD
Eyg3NWMzM2IwYzlmODM5N2M3Njc2OWVhMDBhMWNhMTA4YWFjNzBlZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrC8488YKZ1CIbC4rZVDGS7yo+gZ
H9SfF3UCuE8xoEjmibHio4kDa80+FVajnGvj3Y4++ohAx4pDYpAz+0spovjPPP2U
KbDnxKuD90l1fQL9X2RJM7yQ+HE405ZGSj7fN8T72DeuZODaPf3wxieKiZJGE4/u
OFAFNQsR9grcKVenFvvvstwmG3G9KAC7NrjIanza0Z50pNCOXFokS8Zyfxh9Hsvb
Xp2WeOAsbzH/fKii4VJv40+leWe7SyHr2t/3W9L2Wd8wM/vA88ygg3M02DHkukAF
y8bz4OsA/wYGLGotmGR6cG7OsTHPDRjznbfbbc+hJIGTAyda/lOmsVi3CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXDOwyfg5fHZ2nqAKHKEIqscO10MB8GA1UdIwQY
MBaAFPHSuooqlqB7W2TK+HMpDiB42WSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEt
ZDE2ODk4MDE2Y2ZlLzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEtZDE2ODk4MDE2Y2Zl
LzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXM0w0QO+
a3d/ndI9O8lheq5VBS9CFlqyD8L4a+xTm7girXQWlSo7y+0Tu3Z/bNI9CDcA+r7i
01Ydc1h4TmXKDpV3r+XG383HWK07Qdz/4pOmAKJx6P5Lrfx6bDKn4F5gaPzfqdog
QuzgSqM7cdH1he8k6S/W9mLH/Hhs+uQJ24513iLLQxVkQ8sGrkuJL+fcOL/3WCkq
0eNGXjKeaaArbPtGa0LTHrUSZb3P8KjlPWZc34dOYBUZRWVcSkjZHhMjFDfzK/fU
uUAK1SFMfE6pAC9EYwcRDiD8J29SOXe3SSh4eL3UajsAfPGTY7P46wDFW4wIy3lo
i33J92i47Z3qYw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:24 2025 by rpki-client