Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: aVUzNyxsp4Ghexo2wM0Vq0tM2KlAEzoDJ+hoWZv5N6Y=
Subject key identifier: 2E:64:DE:71:5C:8C:A7:7F:29:68:A6:CE:2D:67:5F:20:48:E9:14:CD
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 0198D65F802B72DCBF438736A01710A054F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 1380
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: xR7iudCot5C8aqijXIbciIpSdsUhmhm9F7cto68pbxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:80:2b:72:dc:bf:43:87:36:a0:17:10:a0:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=2e64de715c8ca77f2968a6ce2d675f2048e914cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:e5:6a:c0:54:78:32:28:a2:92:b7:a2:ab:
90:7e:69:76:21:24:96:da:5c:95:7e:f0:df:8f:36:
8f:70:0c:91:61:02:6f:df:2d:ab:d5:69:42:1d:24:
80:c7:32:bf:41:bc:49:01:3a:15:0b:ae:3b:b5:70:
76:97:41:76:e3:e8:bd:6c:35:45:00:79:5d:cd:02:
38:66:23:6f:1e:95:cf:59:6f:2b:6a:5d:34:c1:2b:
5a:d1:f0:92:24:3a:30:d4:49:a5:fe:26:ee:de:85:
e5:c3:13:4c:01:85:6f:a6:d6:8c:d7:2d:f7:37:5f:
04:3d:09:de:bd:dd:e4:12:86:6f:34:d3:46:c0:b8:
92:8b:3b:d9:16:6c:13:25:89:94:95:42:fc:7c:4b:
06:03:4f:fa:92:81:59:e1:c9:5c:b0:8a:93:48:ed:
33:39:7f:82:50:25:c8:e8:7a:01:28:45:df:90:66:
71:0f:96:80:a5:83:a4:c5:b7:af:7a:e7:b3:40:2a:
13:20:23:63:4d:8f:de:ea:a2:2c:a1:69:7f:fb:84:
2d:10:40:76:ea:21:a6:8a:bd:19:fb:1d:c1:a0:d4:
16:fb:72:2b:9d:8c:46:3c:76:d1:3e:15:a5:b6:87:
7c:54:d8:aa:ef:de:ef:1d:6d:0f:9e:14:bf:04:df:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:DE:71:5C:8C:A7:7F:29:68:A6:CE:2D:67:5F:20:48:E9:14:CD
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ad:34:f8:4f:18:62:08:05:49:2a:75:3b:1e:fb:de:34:90:
cf:f4:6f:24:1c:e6:b2:c2:84:76:ad:43:4f:65:ad:60:e0:85:
c3:c1:ec:76:ac:52:5a:f2:ee:4e:94:5e:63:6f:00:aa:0c:2a:
51:a3:f1:fe:aa:be:a3:69:23:ce:c2:90:f8:30:79:7c:37:2f:
f9:ee:fb:a6:47:62:95:1d:e2:2d:31:8e:a1:6e:ef:25:74:5a:
a9:ad:98:ad:cc:24:3d:57:d7:1d:0a:dd:f9:18:c3:f4:57:e6:
17:10:1c:52:c3:3b:02:d2:42:2d:80:fa:14:74:62:bf:4b:cb:
0b:53:c9:e2:2d:28:9e:70:c7:7f:cc:aa:60:c5:9a:6b:7a:93:
71:82:3a:4d:a3:1d:23:ba:ef:68:05:11:25:0f:92:5c:6b:09:
8b:8e:fe:5e:e9:7f:b5:dd:7c:61:73:ea:e8:c8:99:88:12:eb:
39:3e:2b:b3:d2:62:7b:a1:ed:62:e6:f1:9f:a0:0e:48:79:6c:
10:50:03:bc:68:d4:71:43:ff:84:01:b3:77:ce:40:6a:95:2c:
39:26:23:23:4d:99:c3:ea:4c:64:f6:7e:84:44:26:24:ba:2e:
14:be:23:87:a8:fa:3b:44:da:0b:d7:d4:15:4e:7a:22:8e:21:
d9:e7:00:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX4Arcty/Q4c2oBcQoFTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMDliMjE5ODk3YmM1YzJhZGI0ODcwMmFjMmRhMzBkZTU2
M2QzY2IwHhcNMjUwODIzMTAwMDM5WhcNMjUwODI0MTAwMDM5WjAzMTEwLwYDVQQD
EygyZTY0ZGU3MTVjOGNhNzdmMjk2OGE2Y2UyZDY3NWYyMDQ4ZTkxNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eDlasBUeDIoopK3oquQfml2ISSW
2lyVfvDfjzaPcAyRYQJv3y2r1WlCHSSAxzK/QbxJAToVC647tXB2l0F24+i9bDVF
AHldzQI4ZiNvHpXPWW8ral00wSta0fCSJDow1Eml/ibu3oXlwxNMAYVvptaM1y33
N18EPQnevd3kEoZvNNNGwLiSizvZFmwTJYmUlUL8fEsGA0/6koFZ4clcsIqTSO0z
OX+CUCXI6HoBKEXfkGZxD5aApYOkxbeveuezQCoTICNjTY/e6qIsoWl/+4QtEEB2
6iGmir0Z+x3BoNQW+3IrnYxGPHbRPhWltod8VNiq797vHW0PnhS/BN+suwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5k3nFcjKd/KWimzi1nXyBI6RTNMB8GA1UdIwQY
MBaAFPMJshmJe8XCrbSHAqwtow3lY9PLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMt
ODBhMzliYTQ4ODc1LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMtODBhMzliYTQ4ODc1
LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIK00+E8Y
YggFSSp1Ox773jSQz/RvJBzmssKEdq1DT2WtYOCFw8HsdqxSWvLuTpReY28Aqgwq
UaPx/qq+o2kjzsKQ+DB5fDcv+e77pkdilR3iLTGOoW7vJXRaqa2YrcwkPVfXHQrd
+RjD9FfmFxAcUsM7AtJCLYD6FHRiv0vLC1PJ4i0onnDHf8yqYMWaa3qTcYI6TaMd
I7rvaAURJQ+SXGsJi47+Xul/td18YXPq6MiZiBLrOT4rs9Jie6HtYubxn6AOSHls
EFADvGjUcUP/hAGzd85AapUsOSYjI02Zw+pMZPZ+hEQmJLouFL4jh6j6O0TaC9fU
FU56Io4h2ecAZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:35 2025 by rpki-client