Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: TbB+V5HJ4v1wNEKAOgb+0pYx8bZc7eL7qHW8eN+LMfc=
Subject key identifier: 0A:BE:14:14:23:D7:7E:CF:3F:82:11:45:A5:B7:19:3D:CB:42:81:C4
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 0198D47341AA7805DD3116C70B9FD8EC85DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 0A9A
Signing time: Sat 23 Aug 2025 01:02:59 +0000
Manifest this update: Sat 23 Aug 2025 01:02:59 +0000
Manifest next update: Sun 24 Aug 2025 01:02:59 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: wQmJBmegKiy9qx0KkmNHCAKVvYIw1pzcuekMJPbmN/4=)
2: IAJBt24rgV_us-DgHGqft-brDOM.roa (hash: EYG4N8j/B/VmDjgrJQXF6wEvv1LkIhmvGFmYVI9Ke7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:41:aa:78:05:dd:31:16:c7:0b:9f:d8:ec:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Aug 23 01:02:59 2025 GMT
Not After : Aug 24 01:02:59 2025 GMT
Subject: CN=0abe141423d77ecf3f821145a5b7193dcb4281c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:85:27:66:cc:75:76:d4:ab:29:e9:e8:3d:
57:73:8c:d4:2e:3a:0d:50:6f:f5:95:f2:0e:24:1a:
a4:bd:db:41:3f:21:e4:46:16:da:5d:23:23:5d:77:
25:9e:1d:07:c9:83:71:d5:89:fe:50:3d:6e:24:31:
1f:1f:fe:08:c8:c3:60:a1:7a:e6:e2:35:93:ac:ef:
8a:a1:c9:7a:9c:df:a5:f3:9d:e8:db:30:12:35:7d:
37:72:d6:f3:9a:fa:f0:c9:ed:6b:dc:42:8f:10:4b:
2a:d9:3e:60:1c:8d:6e:90:6e:09:0c:2e:de:5a:a3:
70:1f:f9:36:6a:bc:d7:55:f2:3e:a0:94:d6:c6:a2:
42:3b:d4:9c:d1:e6:db:f5:1e:b7:15:3b:f3:f5:27:
cc:2e:e9:d6:fe:36:e2:60:5c:ce:c5:a5:8e:8b:2f:
98:51:14:cf:1b:a7:3d:ae:31:84:35:9c:33:fe:34:
ed:37:55:61:19:a1:6f:d9:00:12:26:9c:d3:1e:f8:
1f:7b:97:76:89:36:09:17:17:af:6b:59:dd:f1:43:
18:3e:79:0a:93:48:ee:4a:81:68:39:71:5b:e4:26:
bd:33:c9:ef:3d:06:58:9b:06:8c:3c:c0:67:ce:7d:
6b:80:da:d9:7b:b2:16:f8:a9:ac:3c:72:7b:25:d8:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BE:14:14:23:D7:7E:CF:3F:82:11:45:A5:B7:19:3D:CB:42:81:C4
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f1:dc:61:23:2e:d5:10:31:ac:45:75:22:24:2c:33:2a:34:
7e:b7:fa:54:db:5b:c7:26:89:46:3b:33:c5:88:0a:73:4a:c8:
3a:79:1c:0c:6e:b1:e5:e4:5e:6d:7a:b7:3c:d0:03:0c:ea:d4:
a8:f1:55:0a:31:0e:58:b3:99:a3:dd:6c:a0:56:dc:f8:06:20:
d8:39:61:35:4a:e6:a1:22:cb:c3:ff:28:4a:7a:c9:7c:f4:73:
48:4b:c7:64:18:e8:5e:bf:ce:ad:0d:27:9f:a4:92:b0:a8:09:
bb:85:7a:c0:37:47:37:d7:32:5b:e1:77:e5:4f:54:99:08:e0:
31:88:1c:be:49:0c:c1:f1:6a:bc:97:40:8a:de:a5:b7:59:7d:
55:98:c3:64:80:ec:3e:a1:7b:72:02:61:de:71:f4:8d:fb:cc:
58:b8:a5:a8:0f:94:9a:ed:92:08:19:84:45:37:c3:d9:6c:30:
a0:99:17:d9:76:8d:03:85:bc:79:16:13:62:25:b4:22:c7:e7:
d0:44:34:73:37:00:74:fc:a3:44:e2:1e:d5:16:a9:25:63:f2:
e7:5e:55:ff:cf:3e:9e:6d:56:c1:8a:2f:af:7d:95:53:75:4c:
18:57:57:0d:cb:56:b5:97:a6:e9:64:9c:fb:a5:58:30:fa:01:
65:1d:e3:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc0GqeAXdMRbHC5/Y7IXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGZhMWEyZTQ0OTE4OTFjMTliMGYxMGIwODZmNjU1OTg0
ZjU4NzkwHhcNMjUwODIzMDEwMjU5WhcNMjUwODI0MDEwMjU5WjAzMTEwLwYDVQQD
EygwYWJlMTQxNDIzZDc3ZWNmM2Y4MjExNDVhNWI3MTkzZGNiNDI4MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMmFJ2bMdXbUqynp6D1Xc4zULjoN
UG/1lfIOJBqkvdtBPyHkRhbaXSMjXXclnh0HyYNx1Yn+UD1uJDEfH/4IyMNgoXrm
4jWTrO+Kocl6nN+l853o2zASNX03ctbzmvrwye1r3EKPEEsq2T5gHI1ukG4JDC7e
WqNwH/k2arzXVfI+oJTWxqJCO9Sc0ebb9R63FTvz9SfMLunW/jbiYFzOxaWOiy+Y
URTPG6c9rjGENZwz/jTtN1VhGaFv2QASJpzTHvgfe5d2iTYJFxeva1nd8UMYPnkK
k0juSoFoOXFb5Ca9M8nvPQZYmwaMPMBnzn1rgNrZe7IW+KmsPHJ7JdgFBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAq+FBQj137PP4IRRaW3GT3LQoHEMB8GA1UdIwQY
MBaAFPKPoaLkSRiRwZsPELCG9lWYT1h5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTIt
MzRhMTRhMmJiNDAxLzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTItMzRhMTRhMmJiNDAx
LzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPHcYSMu
1RAxrEV1IiQsMyo0frf6VNtbxyaJRjszxYgKc0rIOnkcDG6x5eRebXq3PNADDOrU
qPFVCjEOWLOZo91soFbc+AYg2DlhNUrmoSLLw/8oSnrJfPRzSEvHZBjoXr/OrQ0n
n6SSsKgJu4V6wDdHN9cyW+F35U9UmQjgMYgcvkkMwfFqvJdAit6lt1l9VZjDZIDs
PqF7cgJh3nH0jfvMWLilqA+Umu2SCBmERTfD2WwwoJkX2XaNA4W8eRYTYiW0Isfn
0EQ0czcAdPyjROIe1RapJWPy515V/88+nm1WwYovr32VU3VMGFdXDctWtZem6WSc
+6VYMPoBZR3j9g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:57 2025 by rpki-client