Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
File: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json)
Hash identifier: 4OoEM2A8EGy58ZM+FSRF5jmHAkJ1W4AWxbdfQNg6eLQ=
Subject key identifier: 1D:58:EB:CA:35:02:1B:72:EF:CC:63:CE:ED:B4:65:C3:52:F4:AF:1C
Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
Certificate issuer: /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Certificate serial: 0198D84FA056FDFE587E91571E5353446920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
Manifest number: 0131
Signing time: Sat 23 Aug 2025 19:02:33 +0000
Manifest this update: Sat 23 Aug 2025 19:02:33 +0000
Manifest next update: Sun 24 Aug 2025 19:02:33 +0000
Files and hashes: 1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: nZL12fz4JJ3Cf1Am5oIgczMd20v7hYIiziBmzDJGv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:a0:56:fd:fe:58:7e:91:57:1e:53:53:44:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Validity
Not Before: Aug 23 19:02:33 2025 GMT
Not After : Aug 24 19:02:33 2025 GMT
Subject: CN=1d58ebca35021b72efcc63ceedb465c352f4af1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:7c:b6:22:ed:25:a7:88:ab:7f:c2:48:76:
46:ea:b6:cf:ab:29:80:2e:7e:80:00:48:f9:74:be:
e6:91:dd:e7:03:90:46:06:c1:1e:30:63:72:5c:9c:
aa:a9:19:a6:40:7d:df:ca:6b:66:33:d1:92:85:50:
23:db:90:ab:a5:29:2d:65:1e:6a:46:93:28:80:8c:
8a:6d:99:79:6f:2f:9d:2d:88:3d:9f:d5:aa:16:5a:
f7:4a:06:cc:83:23:c6:ae:33:57:66:25:4b:9b:d5:
0c:58:42:ec:8d:e0:0f:7c:76:f7:34:66:a3:f3:71:
c3:c2:6d:5b:37:e8:6b:52:09:a6:c8:28:7e:2d:2b:
5f:ea:62:f2:6f:35:bc:a6:85:ee:e4:d8:02:fd:c7:
cb:d1:0f:46:1c:74:af:01:fa:87:68:04:ac:60:04:
b1:09:e4:9d:38:f1:25:07:b0:0c:09:93:68:05:bd:
9b:a5:6b:47:93:20:f5:21:0f:0f:d3:d4:02:b8:c9:
1e:e2:ec:ad:61:4c:dc:ef:b1:83:27:32:4a:a6:0c:
f4:d6:10:bd:48:d2:ea:b6:82:85:94:7d:f4:c7:df:
0c:ea:8c:8e:6a:cd:aa:a1:5e:03:d3:ef:2e:6e:33:
14:f4:9e:16:67:21:91:c9:a8:fc:b7:ed:41:33:e2:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:EB:CA:35:02:1B:72:EF:CC:63:CE:ED:B4:65:C3:52:F4:AF:1C
X509v3 Authority Key Identifier:
keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2a:d0:3d:85:67:2f:ee:3d:0d:90:3d:2f:c5:11:bc:98:3e:
8d:88:01:da:10:15:9e:56:45:dd:13:16:a7:c9:26:80:c0:3a:
de:c4:93:82:b5:21:9e:53:67:c1:10:19:2e:90:f4:41:30:d0:
e6:a1:88:ca:98:3b:8a:ad:6c:23:e3:68:52:ec:40:14:e4:f8:
08:20:21:fb:30:24:30:b5:91:0f:cc:7c:c5:69:26:54:06:34:
5d:e1:4e:c3:6a:66:c9:79:3e:ef:d0:b0:61:6d:f4:6b:c2:5f:
0c:c1:e5:6c:d8:d4:5a:18:97:b6:67:87:dc:2e:b3:ca:72:1b:
7e:f3:ab:a6:da:6c:5a:7e:82:d8:65:43:98:50:1d:88:f8:ce:
b4:3d:9f:82:f8:5d:d8:f8:02:14:13:c6:97:ec:0b:72:91:ca:
86:3b:69:b7:8e:da:fe:08:13:df:08:3c:6a:9f:3b:01:ba:15:
fe:aa:c9:34:52:2e:f7:26:36:17:4f:a2:7d:25:40:8b:dd:cf:
3f:4a:ed:ca:d2:ba:a1:0a:79:0d:a5:13:e5:7c:ed:42:f7:a0:
c6:5a:c6:94:e4:d9:13:fd:2e:24:37:29:65:7d:4c:ae:6c:af:
42:31:fe:6b:1d:e7:a2:77:c7:d2:1c:db:28:fe:2a:81:ba:6f:
98:3b:11:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT6BW/f5YfpFXHlNTRGkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWY1MmVkODE2Y2Y0YmY3ZDAyOWZmYjBhYmMxMDFhZmQy
YzY0YjUwHhcNMjUwODIzMTkwMjMzWhcNMjUwODI0MTkwMjMzWjAzMTEwLwYDVQQD
EygxZDU4ZWJjYTM1MDIxYjcyZWZjYzYzY2VlZGI0NjVjMzUyZjRhZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqZ8tiLtJaeIq3/CSHZG6rbPqymA
Ln6AAEj5dL7mkd3nA5BGBsEeMGNyXJyqqRmmQH3fymtmM9GShVAj25CrpSktZR5q
RpMogIyKbZl5by+dLYg9n9WqFlr3SgbMgyPGrjNXZiVLm9UMWELsjeAPfHb3NGaj
83HDwm1bN+hrUgmmyCh+LStf6mLybzW8poXu5NgC/cfL0Q9GHHSvAfqHaASsYASx
CeSdOPElB7AMCZNoBb2bpWtHkyD1IQ8P09QCuMke4uytYUzc77GDJzJKpgz01hC9
SNLqtoKFlH30x98M6oyOas2qoV4D0+8ubjMU9J4WZyGRyaj8t+1BM+ISCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1Y68o1Ahty78xjzu20ZcNS9K8cMB8GA1UdIwQY
MBaAFPPvUu2BbPS/fQKf+wq8EBr9LGS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC05UzdZRnM5TDk5QXBfN0Nyd1FHdjBzWkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83NjY2NGMtMWUwNS00MDQ0LWEwYzUt
ZWIyYzJlODY4MDdmLzEvOC05UzdZRnM5TDk5QXBfN0Nyd1FHdjBzWkxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83NjY2NGMtMWUwNS00MDQ0LWEwYzUtZWIyYzJlODY4MDdm
LzEvOC05UzdZRnM5TDk5QXBfN0Nyd1FHdjBzWkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyrQPYVn
L+49DZA9L8URvJg+jYgB2hAVnlZF3RMWp8kmgMA63sSTgrUhnlNnwRAZLpD0QTDQ
5qGIypg7iq1sI+NoUuxAFOT4CCAh+zAkMLWRD8x8xWkmVAY0XeFOw2pmyXk+79Cw
YW30a8JfDMHlbNjUWhiXtmeH3C6zynIbfvOrptpsWn6C2GVDmFAdiPjOtD2fgvhd
2PgCFBPGl+wLcpHKhjtpt47a/ggT3wg8ap87AboV/qrJNFIu9yY2F0+ifSVAi93P
P0rtytK6oQp5DaUT5XztQvegxlrGlOTZE/0uJDcpZX1MrmyvQjH+ax3nonfH0hzb
KP4qgbpvmDsRNA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:11 2025 by rpki-client