Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: J9Q22/8twGTcg4KvTqixLA78lKYUoc+DfWCqG064kY8=
Subject key identifier: 38:F1:AB:67:DC:23:C4:9B:04:65:7D:71:D0:DD:47:7F:64:A9:27:CD
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 0198D404F66D6A28F8405CC09624E94E6B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 23:02:31 +0000
Manifest this update: Fri 22 Aug 2025 23:02:31 +0000
Manifest next update: Sat 23 Aug 2025 23:02:31 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: AY9S40mIg9jDQL5nAK/neJh/8EIjyyrCWOAFR7eWAjA=)
2: yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa (hash: LgnuacZQDPP2J60/EcJiQNzEwvS+wm94uYSyH+Ocir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:f6:6d:6a:28:f8:40:5c:c0:96:24:e9:4e:6b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Aug 22 23:02:31 2025 GMT
Not After : Aug 23 23:02:31 2025 GMT
Subject: CN=38f1ab67dc23c49b04657d71d0dd477f64a927cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:9b:4f:07:b0:2a:5d:e0:ae:d0:79:e8:c8:
f1:a9:4a:c7:56:ac:bb:42:91:e0:53:02:b9:78:99:
be:a7:2b:fa:18:68:53:d7:92:5a:40:59:2c:62:44:
07:52:f1:83:c6:7c:72:99:f0:2c:16:e2:da:b4:38:
15:ff:a3:3b:f7:b4:72:92:f8:26:d4:af:16:9a:59:
d8:b1:b4:54:b1:96:3c:b1:52:84:a2:ff:95:f3:a6:
e4:68:59:a9:a0:a4:16:3a:e4:da:2b:ff:56:c7:a1:
c2:3e:0d:7e:fc:b0:65:11:30:af:f9:0e:03:30:f9:
b3:a6:15:65:3e:bd:65:f9:a8:75:9b:ad:23:60:0d:
9b:d6:e2:f0:f5:bf:49:d1:4d:5c:90:37:12:20:b3:
82:a2:20:31:9e:79:88:78:be:a2:b0:d5:2c:f7:59:
d7:4d:44:44:e6:5a:16:bb:29:e7:01:06:f0:33:49:
d9:ca:5c:86:7b:b5:32:c1:34:2a:82:f4:ea:bc:96:
bc:74:e2:80:3b:08:6c:2d:68:80:41:8c:2b:26:e5:
8e:53:4c:8d:31:fb:1d:02:d4:ae:c9:63:33:71:47:
12:fe:a5:fa:70:04:55:d2:fb:37:d0:2b:8f:8f:36:
b7:61:39:14:22:c5:94:68:36:2b:73:7b:8d:79:55:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:AB:67:DC:23:C4:9B:04:65:7D:71:D0:DD:47:7F:64:A9:27:CD
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:53:a9:e2:7e:9d:ff:3e:be:7a:ed:79:c9:20:78:6c:08:39:
d3:42:53:5b:fd:73:23:21:d9:c1:32:5a:bd:41:8d:a5:7e:0b:
a6:b7:ff:2b:6a:1f:4a:94:9a:f2:7c:f7:b0:6a:e9:2f:dc:d2:
79:a5:f5:61:9d:b8:ee:44:da:9e:14:46:4b:97:58:2c:2c:75:
09:b4:cb:a4:59:61:41:e4:12:68:70:81:35:06:73:3c:44:6e:
f9:2f:1b:57:69:39:ab:46:dd:5e:78:ae:5e:33:81:64:00:25:
48:74:3a:3f:1c:91:35:38:cf:dc:7d:03:54:5e:6d:75:91:82:
47:99:ed:7c:8c:15:29:e2:74:1f:d2:a2:b8:31:ad:ce:c7:cb:
ed:61:77:17:5e:87:86:41:4a:98:d1:10:b5:92:cb:d6:de:8d:
16:db:c1:6b:14:71:20:c6:73:40:83:22:9f:91:bf:a1:73:cc:
08:e1:bd:eb:af:ae:54:15:c9:3e:ef:9a:76:2e:7d:da:18:95:
79:bc:99:66:ef:20:25:8f:37:10:94:5a:3a:17:4c:31:6d:dc:
a1:97:98:76:bf:9a:c1:26:c5:a5:da:3c:c6:bc:c1:43:43:53:
12:c1:f2:40:2f:de:e4:57:30:06:c6:c1:87:41:b7:de:88:2c:
2d:71:35:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBPZtaij4QFzAliTpTms2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODA1M2VhN2YzYWI3OWE3NWU4Zjg3NTM4Njc3NTU1MWVm
NzU3MzkwHhcNMjUwODIyMjMwMjMxWhcNMjUwODIzMjMwMjMxWjAzMTEwLwYDVQQD
EygzOGYxYWI2N2RjMjNjNDliMDQ2NTdkNzFkMGRkNDc3ZjY0YTkyN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqSbTwewKl3grtB56MjxqUrHVqy7
QpHgUwK5eJm+pyv6GGhT15JaQFksYkQHUvGDxnxymfAsFuLatDgV/6M797Rykvgm
1K8WmlnYsbRUsZY8sVKEov+V86bkaFmpoKQWOuTaK/9Wx6HCPg1+/LBlETCv+Q4D
MPmzphVlPr1l+ah1m60jYA2b1uLw9b9J0U1ckDcSILOCoiAxnnmIeL6isNUs91nX
TURE5loWuynnAQbwM0nZylyGe7UywTQqgvTqvJa8dOKAOwhsLWiAQYwrJuWOU0yN
MfsdAtSuyWMzcUcS/qX6cARV0vs30CuPjza3YTkUIsWUaDYrc3uNeVWkSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjxq2fcI8SbBGV9cdDdR39kqSfNMB8GA1UdIwQY
MBaAFPGAU+p/Oreadej4dThndVUe91c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEt
NzQ3Y2VkMGI3NDg2LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEtNzQ3Y2VkMGI3NDg2
LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1Op4n6d
/z6+eu15ySB4bAg500JTW/1zIyHZwTJavUGNpX4Lprf/K2ofSpSa8nz3sGrpL9zS
eaX1YZ247kTanhRGS5dYLCx1CbTLpFlhQeQSaHCBNQZzPERu+S8bV2k5q0bdXniu
XjOBZAAlSHQ6PxyRNTjP3H0DVF5tdZGCR5ntfIwVKeJ0H9KiuDGtzsfL7WF3F16H
hkFKmNEQtZLL1t6NFtvBaxRxIMZzQIMin5G/oXPMCOG966+uVBXJPu+adi592hiV
ebyZZu8gJY83EJRaOhdMMW3coZeYdr+awSbFpdo8xrzBQ0NTEsHyQC/e5FcwBsbB
h0G33ogsLXE1/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:43 2025 by rpki-client