Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: 1COFgDUk2iMi6TETHLnoDZrW5z2VboALHd+s5Ju/dCc=
Subject key identifier: BA:7E:14:37:E7:3F:8D:02:0C:1B:AC:F0:5A:79:9F:19:D5:93:97:A2
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 0198D99950FF4CFFBD00FBA212D8EC095CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 10CD
Signing time: Sun 24 Aug 2025 01:02:40 +0000
Manifest this update: Sun 24 Aug 2025 01:02:40 +0000
Manifest next update: Mon 25 Aug 2025 01:02:40 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: QCPQs+ztDt5GgrmjpGApMvHu1+sT/TTb7r3vnfqNo3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:50:ff:4c:ff:bd:00:fb:a2:12:d8:ec:09:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Aug 24 01:02:40 2025 GMT
Not After : Aug 25 01:02:40 2025 GMT
Subject: CN=ba7e1437e73f8d020c1bacf05a799f19d59397a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:51:dd:f3:35:20:ee:56:02:4a:a3:55:6e:
d1:f2:d0:e5:ff:30:90:1f:ef:23:4d:7b:27:81:aa:
98:70:58:92:79:23:5f:35:6d:33:13:96:f0:dd:8d:
e9:e9:a0:34:56:68:55:de:50:39:1d:f0:e6:a1:5d:
2c:ba:29:10:b6:ab:88:53:dc:a3:dd:10:c3:44:48:
bc:88:04:c9:e5:b7:f6:51:7f:e5:9a:54:10:28:9a:
cb:d0:1f:d4:59:39:66:9e:85:7f:23:70:be:a7:5f:
1a:98:e2:3e:6a:80:71:bb:c2:f9:0b:c0:39:87:cb:
3d:f2:a4:cc:9c:96:56:de:c5:56:97:9d:9e:53:98:
96:97:a4:6c:db:d2:0e:ae:4c:22:54:ab:0c:60:c5:
13:07:66:ed:94:dc:2c:6e:87:9d:5e:bd:5d:cd:2d:
1d:1f:ea:3a:88:5a:06:ac:ba:fd:0b:58:9f:89:c9:
b1:8c:1a:b2:23:ba:94:5c:a4:49:e3:d8:31:b7:68:
40:ff:f8:bb:9d:5c:98:54:7a:36:05:ea:aa:bd:04:
07:b1:bf:2f:ae:b7:ca:20:81:fd:7b:a1:bf:ae:47:
e4:90:f9:17:0a:d4:82:05:b5:5a:60:fe:0a:ef:61:
51:b9:09:9c:96:31:f5:20:f3:97:57:40:99:dc:17:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:14:37:E7:3F:8D:02:0C:1B:AC:F0:5A:79:9F:19:D5:93:97:A2
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f8:ff:d9:05:7b:27:1e:73:6d:96:81:9b:25:97:b3:31:60:
23:cf:e5:ec:29:97:64:40:2a:92:7b:9f:10:b6:6e:c3:b4:ef:
81:8e:9f:e2:d0:23:b9:41:7f:4a:b6:21:64:68:c8:9e:68:d5:
22:20:c9:0a:33:88:7c:b9:b6:1a:52:0a:32:58:cd:00:00:f1:
5a:66:35:e9:b0:32:7b:31:d8:39:9b:95:04:7d:a0:8c:29:99:
a7:b5:24:c0:12:92:c2:cc:89:7c:06:0f:23:6e:09:a1:63:be:
08:54:23:70:c9:97:6d:8c:41:44:cb:59:ab:29:0d:69:0d:37:
8b:2d:55:2c:59:2c:c1:2e:4b:25:2a:74:8c:57:f5:72:7c:a7:
7d:dd:ee:f1:6a:a0:ec:54:a1:3f:ec:f3:60:23:aa:13:16:89:
d3:de:29:2e:9d:d6:fd:c4:6c:24:52:ae:fd:0f:27:f7:df:4e:
ae:6a:9c:f9:95:a1:a2:20:ec:3a:bb:ce:71:70:16:c3:87:63:
88:47:ed:91:1b:9c:19:1e:e8:61:d5:bd:06:d6:4b:b9:1f:f4:
2c:fe:c3:7e:b4:72:e8:85:d7:7e:39:91:e7:af:7d:c8:97:59:
f5:bc:6a:a7:8b:c7:7b:32:9b:5e:19:dd:2a:7c:e1:e3:ff:ba:
88:b4:e7:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZmVD/TP+9APuiEtjsCVykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTg1MTY3MDRmNTc0OTI4MzViOTRkMDA3MDI3MzI4YzIy
ZmE0MGUwHhcNMjUwODI0MDEwMjQwWhcNMjUwODI1MDEwMjQwWjAzMTEwLwYDVQQD
EyhiYTdlMTQzN2U3M2Y4ZDAyMGMxYmFjZjA1YTc5OWYxOWQ1OTM5N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQJR3fM1IO5WAkqjVW7R8tDl/zCQ
H+8jTXsngaqYcFiSeSNfNW0zE5bw3Y3p6aA0VmhV3lA5HfDmoV0suikQtquIU9yj
3RDDREi8iATJ5bf2UX/lmlQQKJrL0B/UWTlmnoV/I3C+p18amOI+aoBxu8L5C8A5
h8s98qTMnJZW3sVWl52eU5iWl6Rs29IOrkwiVKsMYMUTB2btlNwsboedXr1dzS0d
H+o6iFoGrLr9C1ificmxjBqyI7qUXKRJ49gxt2hA//i7nVyYVHo2BeqqvQQHsb8v
rrfKIIH9e6G/rkfkkPkXCtSCBbVaYP4K72FRuQmcljH1IPOXV0CZ3BcIawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp+FDfnP40CDBus8Fp5nxnVk5eiMB8GA1UdIwQY
MBaAFPKoUWcE9XSSg1uU0AcCcyjCL6QOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODkt
N2Q0ZDk0MWEzN2QxLzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODktN2Q0ZDk0MWEzN2Qx
LzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfj/2QV7
Jx5zbZaBmyWXszFgI8/l7CmXZEAqknufELZuw7TvgY6f4tAjuUF/SrYhZGjInmjV
IiDJCjOIfLm2GlIKMljNAADxWmY16bAyezHYOZuVBH2gjCmZp7UkwBKSwsyJfAYP
I24JoWO+CFQjcMmXbYxBRMtZqykNaQ03iy1VLFkswS5LJSp0jFf1cnynfd3u8Wqg
7FShP+zzYCOqExaJ094pLp3W/cRsJFKu/Q8n999Ormqc+ZWhoiDsOrvOcXAWw4dj
iEftkRucGR7oYdW9BtZLuR/0LP7DfrRy6IXXfjmR5699yJdZ9bxqp4vHezKbXhnd
Knzh4/+6iLTnHQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:42 2025 by rpki-client