Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: JWvyU3Hys2B5rekInW5g56Ya6uscXvQFUQdM3+qOZMI=
Subject key identifier: EA:95:27:82:93:B7:62:C6:60:EB:ED:EC:F8:17:82:90:F2:0B:CF:F2
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 0197BAEB05A73115F420E69494C0191E6109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0CAD
Signing time: Sun 29 Jun 2025 09:00:53 +0000
Manifest this update: Sun 29 Jun 2025 09:00:53 +0000
Manifest next update: Mon 30 Jun 2025 09:00:53 +0000
Files and hashes: 1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: 4aiFV4zIX583gRqykz8i5QlJBbidV58odQFWtxzIN74=)
2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:05:a7:31:15:f4:20:e6:94:94:c0:19:1e:61:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Jun 29 09:00:53 2025 GMT
Not After : Jun 30 09:00:53 2025 GMT
Subject: CN=ea95278293b762c660ebedecf8178290f20bcff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:2c:4d:0c:7e:7f:19:b8:54:18:7f:9e:98:
a5:10:51:9d:96:c6:53:46:d8:95:5c:3f:fa:03:9c:
f7:ab:43:2d:13:23:61:36:96:c3:de:c9:33:54:00:
58:01:19:e1:19:a0:9a:17:61:ae:63:c4:1e:68:e0:
66:1b:6e:0c:7d:c7:72:d6:61:46:32:71:79:8e:b7:
a0:3d:bb:f7:a4:98:69:6b:35:d0:1a:5f:d2:e2:21:
c5:83:8c:dd:f6:08:60:91:91:b2:df:75:2e:2c:87:
78:ee:ae:e5:5c:c9:70:ed:b4:dc:b5:f8:38:56:b2:
39:2d:3c:d4:f9:cb:d6:ed:4c:5a:7c:0a:74:52:3e:
49:8b:03:14:97:0c:99:63:d4:8c:d4:72:f1:c5:1d:
c1:b3:4d:0a:6f:8d:35:52:cd:53:15:58:8e:cf:5f:
a4:47:ec:99:17:ae:77:51:b4:fc:3c:fa:14:83:ea:
ba:55:f5:fc:fc:d8:68:3e:a7:b0:77:f9:b3:78:f8:
3d:e4:f9:f8:3b:6b:c4:8c:f0:ab:58:c8:75:6d:b1:
c0:68:ca:11:11:35:24:ef:0f:ce:5f:06:b6:9d:e7:
be:48:8e:5c:c6:08:7e:40:9a:aa:45:e8:06:fc:23:
47:3c:cc:05:5f:d0:2e:b6:cd:bd:b4:db:f4:48:a4:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:95:27:82:93:B7:62:C6:60:EB:ED:EC:F8:17:82:90:F2:0B:CF:F2
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ff:73:f9:0c:0f:ba:2c:ce:ec:76:e5:ff:17:8a:c2:69:b7:
95:02:cf:43:94:b3:65:1b:33:64:6a:18:21:18:d1:88:dd:8c:
1d:fd:b5:a7:a8:b8:24:8b:52:23:80:5f:30:a2:6f:c8:11:ef:
61:8b:6a:89:f6:34:a9:02:37:6b:4d:74:1e:98:01:e6:c4:7b:
5c:d7:61:67:1f:ef:17:22:d7:89:7f:68:76:84:0e:11:d1:01:
01:46:a1:21:61:77:84:66:dc:84:78:13:9b:a6:04:17:8a:52:
7d:05:ca:73:66:c4:7f:6c:2b:87:ef:39:a7:5c:c7:f7:32:e1:
f2:2b:22:a4:f9:4c:4a:25:04:52:d2:2d:9e:8c:39:d8:f4:2c:
ca:f9:b2:99:2a:fc:90:5e:18:e6:fb:65:e4:0f:d1:9a:52:7e:
b4:3c:e5:f1:65:24:42:2e:78:c9:96:ba:28:62:ab:d3:9c:0e:
5c:4d:a7:c7:c6:f5:a1:4b:0a:a1:83:66:83:17:de:64:9c:1a:
9b:bc:a7:15:3f:68:f1:e1:75:8c:e1:d2:76:42:95:45:25:70:
c6:68:53:ff:a4:bc:fa:79:72:b5:ba:3b:41:ec:79:40:e2:1f:
e6:2e:a8:79:80:41:26:74:50:96:ef:27:26:cd:5e:f7:91:98:
c5:19:3d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe66wWnMRX0IOaUlMAZHmEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk
ZWM2YWEwHhcNMjUwNjI5MDkwMDUzWhcNMjUwNjMwMDkwMDUzWjAzMTEwLwYDVQQD
EyhlYTk1Mjc4MjkzYjc2MmM2NjBlYmVkZWNmODE3ODI5MGYyMGJjZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17csTQx+fxm4VBh/npilEFGdlsZT
RtiVXD/6A5z3q0MtEyNhNpbD3skzVABYARnhGaCaF2GuY8QeaOBmG24Mfcdy1mFG
MnF5jregPbv3pJhpazXQGl/S4iHFg4zd9ghgkZGy33UuLId47q7lXMlw7bTctfg4
VrI5LTzU+cvW7UxafAp0Uj5JiwMUlwyZY9SM1HLxxR3Bs00Kb401Us1TFViOz1+k
R+yZF653UbT8PPoUg+q6VfX8/NhoPqewd/mzePg95Pn4O2vEjPCrWMh1bbHAaMoR
ETUk7w/OXwa2nee+SI5cxgh+QJqqRegG/CNHPMwFX9Auts29tNv0SKTftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqVJ4KTt2LGYOvt7PgXgpDyC8/yMB8GA1UdIwQY
MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt
NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj
LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP9z+QwP
uizO7Hbl/xeKwmm3lQLPQ5SzZRszZGoYIRjRiN2MHf21p6i4JItSI4BfMKJvyBHv
YYtqifY0qQI3a010HpgB5sR7XNdhZx/vFyLXiX9odoQOEdEBAUahIWF3hGbchHgT
m6YEF4pSfQXKc2bEf2wrh+85p1zH9zLh8isipPlMSiUEUtItnow52PQsyvmymSr8
kF4Y5vtl5A/RmlJ+tDzl8WUkQi54yZa6KGKr05wOXE2nx8b1oUsKoYNmgxfeZJwa
m7ynFT9o8eF1jOHSdkKVRSVwxmhT/6S8+nlytbo7Qex5QOIf5i6oeYBBJnRQlu8n
Js1e95GYxRk9iw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:18:00 2025 by rpki-client