Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: qCWyChO0K7H326YYSec9OXueejar/Ztft0l9OOLAFaE=
Subject key identifier: 5C:FA:31:63:3E:DF:EE:A3:3C:06:14:F4:F2:D4:33:F3:64:2E:50:2D
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 0197B6D729A93216FA1CEBB54A85563D4DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 02BF
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: urmwp6Bfp+Q8mw2su8o5EpEWYtXvAKbOXJmD1FWQrPE=)
2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=)
3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=)
4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:29:a9:32:16:fa:1c:eb:b5:4a:85:56:3d:4d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=5cfa31633edfeea33c0614f4f2d433f3642e502d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:c5:4d:8b:dc:50:58:fc:eb:ba:2b:f5:a1:
a2:a0:70:06:13:bb:94:47:6c:ef:af:6e:89:52:69:
72:9c:5f:20:1e:42:f5:61:d0:f6:a0:17:19:0f:28:
ab:cf:18:14:26:b4:18:12:60:97:66:09:54:6c:0b:
cf:95:5b:46:af:49:f5:65:73:e0:16:8f:24:e9:05:
15:57:26:94:a1:ff:a1:06:8e:be:d1:a2:dd:19:d1:
8b:37:52:7f:07:38:dc:cd:00:cb:d0:44:81:ad:ad:
56:c4:ab:6a:bd:11:e7:0b:ef:bc:6e:e8:85:c9:8b:
f3:59:24:14:73:81:f1:d1:06:46:e0:44:86:c8:7f:
6e:2d:ee:87:fb:d5:f9:d4:2f:68:7c:3c:bd:13:57:
99:41:0b:f9:f2:66:47:5e:59:af:4d:5f:55:45:b4:
0f:b1:aa:e9:7c:e9:95:15:1f:57:08:98:b5:b4:28:
bf:b7:b0:b6:7f:eb:27:54:16:be:d0:df:37:45:b1:
21:66:ee:8c:d9:35:22:6d:1f:03:d0:91:ef:ef:6f:
42:42:ae:2a:2e:57:2f:80:a6:74:1e:8a:8f:b0:83:
13:f9:74:78:a8:72:d3:2c:d5:0b:2c:11:c8:f4:fc:
2b:c2:da:fd:fe:87:07:7f:b0:ed:cb:66:7e:af:38:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:31:63:3E:DF:EE:A3:3C:06:14:F4:F2:D4:33:F3:64:2E:50:2D
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bd:3a:11:ba:99:5b:7b:95:43:c6:2d:be:83:bf:db:98:9c:
05:a2:76:91:ed:01:5e:6a:4b:62:91:36:c7:57:33:f2:e1:a5:
a7:62:29:71:34:43:65:8a:4a:a4:1b:75:6e:05:89:6a:9b:1c:
a8:a6:90:d7:c6:d9:7f:93:7c:c0:35:ca:cd:ce:77:51:9a:6d:
c6:dc:bc:a2:4a:52:4e:1f:97:37:e0:99:ea:ca:3e:8d:f5:d1:
e7:d4:18:1e:c7:71:6b:7b:81:82:27:fb:be:ac:0a:76:e1:d8:
b1:0f:ab:0b:17:7f:97:01:85:3d:8f:ec:ce:0e:35:f3:f1:4e:
3a:bd:db:4c:18:98:aa:67:60:b0:fe:56:68:83:c4:7a:6b:71:
03:8f:95:87:4c:51:a3:f8:38:c0:ec:e1:cd:a8:73:52:4d:78:
fe:31:90:36:50:50:92:89:00:ef:b4:70:f4:bc:8c:cd:fa:e3:
df:ba:4c:11:d7:e1:4d:82:af:22:38:06:11:79:d9:35:44:7b:
49:41:4b:42:36:f6:83:37:ad:58:64:9f:8a:7e:04:14:4a:88:
57:59:b8:09:4f:06:64:cd:f6:ab:61:99:7f:ff:3e:37:b7:27:
c1:b0:4d:05:97:0d:f0:a2:f9:a5:1a:fe:2d:b9:19:94:c6:a7:
68:c8:5a:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21ympMhb6HOu1SoVWPU3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMGEyMjRkZTZkYWQxYTFlZDEzMWI1Zjk1YjgzMjMxYTJh
YmNhZjEwHhcNMjUwNjI4MTQwMDQzWhcNMjUwNjI5MTQwMDQzWjAzMTEwLwYDVQQD
Eyg1Y2ZhMzE2MzNlZGZlZWEzM2MwNjE0ZjRmMmQ0MzNmMzY0MmU1MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoHFTYvcUFj867or9aGioHAGE7uU
R2zvr26JUmlynF8gHkL1YdD2oBcZDyirzxgUJrQYEmCXZglUbAvPlVtGr0n1ZXPg
Fo8k6QUVVyaUof+hBo6+0aLdGdGLN1J/BzjczQDL0ESBra1WxKtqvRHnC++8buiF
yYvzWSQUc4Hx0QZG4ESGyH9uLe6H+9X51C9ofDy9E1eZQQv58mZHXlmvTV9VRbQP
sarpfOmVFR9XCJi1tCi/t7C2f+snVBa+0N83RbEhZu6M2TUibR8D0JHv729CQq4q
LlcvgKZ0HoqPsIMT+XR4qHLTLNULLBHI9Pwrwtr9/ocHf7Dty2Z+rzgX8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz6MWM+3+6jPAYU9PLUM/NkLlAtMB8GA1UdIwQY
MBaAFPAKIk3m2tGh7RMbX5W4MjGiq8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgt
NzUxOWUxMDVhZWRhLzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgtNzUxOWUxMDVhZWRh
LzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN706EbqZ
W3uVQ8YtvoO/25icBaJ2ke0BXmpLYpE2x1cz8uGlp2IpcTRDZYpKpBt1bgWJapsc
qKaQ18bZf5N8wDXKzc53UZptxty8okpSTh+XN+CZ6so+jfXR59QYHsdxa3uBgif7
vqwKduHYsQ+rCxd/lwGFPY/szg418/FOOr3bTBiYqmdgsP5WaIPEemtxA4+Vh0xR
o/g4wOzhzahzUk14/jGQNlBQkokA77Rw9LyMzfrj37pMEdfhTYKvIjgGEXnZNUR7
SUFLQjb2gzetWGSfin4EFEqIV1m4CU8GZM32q2GZf/8+N7cnwbBNBZcN8KL5pRr+
LbkZlManaMhaFg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:39 2025 by rpki-client