Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: R3AjXb33JqioaFdOyl6MBf1lT1hCghFmeWkR6KLBzX0=
Subject key identifier: 7A:1C:86:5B:5E:AA:AB:D2:EA:7E:96:90:94:FF:DF:AF:FA:99:AA:53
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 0198D4E09517136A3189363B8900EEBA6CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0D3F
Signing time: Sat 23 Aug 2025 03:02:24 +0000
Manifest this update: Sat 23 Aug 2025 03:02:24 +0000
Manifest next update: Sun 24 Aug 2025 03:02:24 +0000
Files and hashes: 1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: jam5dY0ke6izJ8xn48qFVNJ/5id3AhZm1x54K/cAKz0=)
2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:95:17:13:6a:31:89:36:3b:89:00:ee:ba:6c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Aug 23 03:02:24 2025 GMT
Not After : Aug 24 03:02:24 2025 GMT
Subject: CN=7a1c865b5eaaabd2ea7e969094ffdfaffa99aa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:f8:5d:cd:66:1c:8f:fa:4f:de:4d:26:40:
ae:f7:4f:e3:06:ad:a9:cd:1a:d0:ee:d2:02:43:0f:
3e:82:2e:a4:47:1d:9a:e5:0f:30:a8:81:86:26:60:
07:02:15:a6:8b:5f:2b:de:2e:2d:7a:21:f6:39:94:
e6:e5:27:81:0d:71:7c:bb:d0:e4:c4:dc:45:35:31:
f7:13:7c:29:c1:2f:28:e2:ec:d1:fd:fa:be:43:d7:
2c:df:23:8f:94:13:63:0e:a8:52:14:57:c0:84:d2:
cd:e8:cb:ed:95:25:c9:18:02:29:ef:7a:40:b6:45:
b2:ef:fe:10:ca:42:de:f5:f7:93:44:c2:cb:bb:78:
a9:23:db:36:ec:c3:3a:74:57:f2:a3:27:bf:ef:4f:
94:9e:02:e4:88:7c:cc:15:81:27:e4:81:b7:cf:f0:
49:2d:95:58:38:1a:9e:74:9f:0a:e2:50:5e:11:71:
36:a8:0b:34:de:2f:97:a4:87:9e:84:83:1c:15:99:
2e:b5:7c:f1:dc:d1:87:b4:c3:9f:cd:8e:78:93:89:
4b:7a:5f:76:45:b8:1b:ec:f8:4b:b8:5f:9f:17:ca:
92:b9:47:6a:53:5f:e0:c6:16:00:b8:3e:d7:80:3c:
63:76:e3:5e:d5:bd:16:70:80:2a:a8:fb:df:a8:06:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:86:5B:5E:AA:AB:D2:EA:7E:96:90:94:FF:DF:AF:FA:99:AA:53
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:09:bf:74:9f:ff:d1:79:7d:cc:8c:21:51:69:47:72:d8:9c:
fc:09:3d:b9:03:9e:f2:05:37:98:f7:1d:2a:eb:52:96:43:01:
5d:e2:35:4f:47:83:eb:31:4b:06:91:86:8c:41:be:a1:86:50:
3f:a8:52:da:0c:f5:39:46:3c:05:45:00:8d:a0:1a:c2:6a:a1:
c2:f1:e7:04:4e:47:e0:eb:59:f8:ed:57:b8:5f:23:bd:d4:71:
82:19:c7:1b:3d:f4:42:04:81:d8:50:c0:ba:6c:a2:7c:b1:93:
98:06:b7:ea:b4:71:b4:04:a4:1b:2b:f3:3d:47:89:76:66:5a:
cf:5e:12:aa:8d:c8:b4:ea:e8:0d:1a:9b:b4:b3:e2:09:c2:49:
26:82:2a:c9:d9:de:c0:28:89:38:95:42:50:50:f1:29:49:e1:
e3:f7:36:a7:00:48:02:84:e5:36:82:a5:0c:b2:3e:75:ed:19:
87:72:09:16:83:61:a9:2c:ab:f1:0e:17:5a:79:fe:cc:6b:37:
5e:77:0e:4d:f6:ee:f1:88:e4:70:21:1d:a0:6c:d0:6e:0d:15:
cf:7e:34:2e:d4:ec:00:c1:d7:7b:fb:1c:63:c6:8e:c2:e1:ce:
47:8f:54:bb:cc:98:dc:25:c1:c2:84:14:36:fd:0e:59:37:41:
49:bc:31:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4JUXE2oxiTY7iQDuumzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk
ZWM2YWEwHhcNMjUwODIzMDMwMjI0WhcNMjUwODI0MDMwMjI0WjAzMTEwLwYDVQQD
Eyg3YTFjODY1YjVlYWFhYmQyZWE3ZTk2OTA5NGZmZGZhZmZhOTlhYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f74Xc1mHI/6T95NJkCu90/jBq2p
zRrQ7tICQw8+gi6kRx2a5Q8wqIGGJmAHAhWmi18r3i4teiH2OZTm5SeBDXF8u9Dk
xNxFNTH3E3wpwS8o4uzR/fq+Q9cs3yOPlBNjDqhSFFfAhNLN6MvtlSXJGAIp73pA
tkWy7/4QykLe9feTRMLLu3ipI9s27MM6dFfyoye/70+UngLkiHzMFYEn5IG3z/BJ
LZVYOBqedJ8K4lBeEXE2qAs03i+XpIeehIMcFZkutXzx3NGHtMOfzY54k4lLel92
Rbgb7PhLuF+fF8qSuUdqU1/gxhYAuD7XgDxjduNe1b0WcIAqqPvfqAYvlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHochlteqqvS6n6WkJT/36/6mapTMB8GA1UdIwQY
MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt
NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj
LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAm/dJ//
0Xl9zIwhUWlHctic/Ak9uQOe8gU3mPcdKutSlkMBXeI1T0eD6zFLBpGGjEG+oYZQ
P6hS2gz1OUY8BUUAjaAawmqhwvHnBE5H4OtZ+O1XuF8jvdRxghnHGz30QgSB2FDA
umyifLGTmAa36rRxtASkGyvzPUeJdmZaz14Sqo3ItOroDRqbtLPiCcJJJoIqydne
wCiJOJVCUFDxKUnh4/c2pwBIAoTlNoKlDLI+de0Zh3IJFoNhqSyr8Q4XWnn+zGs3
XncOTfbu8YjkcCEdoGzQbg0Vz340LtTsAMHXe/scY8aOwuHOR49Uu8yY3CXBwoQU
Nv0OWTdBSbwxoA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:41 2025 by rpki-client