Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: uJJ8mG6AGeLf/l5FiFRtAavAQ+x2Yfw9Uka1KA0UZPs=
Subject key identifier: C7:99:AE:BB:73:5C:67:DC:55:D0:A4:A7:BE:D0:97:28:E6:FB:65:2B
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 0198D54E6B13FC5CE2DB9B6CB5F6D14A6C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 05:02:22 +0000
Manifest this update: Sat 23 Aug 2025 05:02:22 +0000
Manifest next update: Sun 24 Aug 2025 05:02:22 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: CojNHnfWxk8FTxKd0AU6MPQEFQ1b9fNXuji3WB7bcB4=)
2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=)
3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6b:13:fc:5c:e2:db:9b:6c:b5:f6:d1:4a:6c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Aug 23 05:02:22 2025 GMT
Not After : Aug 24 05:02:22 2025 GMT
Subject: CN=c799aebb735c67dc55d0a4a7bed09728e6fb652b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:d8:05:b2:b7:98:37:dc:72:61:29:16:85:
91:20:9d:17:fc:b1:dd:0d:92:b7:f9:1a:72:fe:93:
46:81:02:25:06:ec:a2:f7:46:6c:11:e4:40:39:a3:
52:e6:3c:01:9d:80:61:0e:80:88:87:8b:d4:d8:6e:
76:a2:9e:ba:a9:c4:d1:2e:18:d8:3d:4d:be:b6:f1:
27:32:b9:f6:17:a1:ba:3b:49:2c:b6:29:8e:8f:b7:
0a:0d:28:1b:ce:fa:ed:5c:a1:88:1f:ff:e9:35:93:
7c:fe:e4:88:f8:53:2f:f8:b1:70:6f:bc:3e:ff:e4:
80:78:40:83:e9:de:0b:78:d0:51:2b:85:6c:e0:78:
1d:97:4c:28:7a:2a:84:fb:3a:f3:11:f2:19:f4:21:
9f:3a:a9:74:d8:83:84:4e:47:01:86:ce:85:fa:2e:
46:79:23:69:a7:f2:87:4f:56:0b:a3:e3:66:58:11:
81:54:56:a7:3a:27:2d:77:7c:5e:98:03:95:68:f5:
8d:af:6e:c6:37:9f:7a:07:5c:d9:fd:9f:e1:49:d3:
8d:68:d9:f3:85:e0:fd:cb:21:39:b4:81:ff:e3:3d:
8e:fa:ef:a9:62:77:d4:3a:3d:ee:1d:c2:9b:ae:39:
7b:cd:7e:bb:88:c1:63:a7:7e:67:b5:b7:72:c1:8e:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:AE:BB:73:5C:67:DC:55:D0:A4:A7:BE:D0:97:28:E6:FB:65:2B
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:b8:96:01:85:76:62:fb:e8:07:ea:8a:03:06:b1:e9:c0:
44:6c:a2:be:4d:d6:c5:f2:03:09:8a:f3:8f:21:a6:68:f6:17:
83:f1:12:ca:28:fd:a6:3b:14:d0:1a:33:fc:3c:55:92:a0:65:
2b:69:07:43:68:ae:67:66:c2:13:dc:3c:ea:25:bb:9e:3e:53:
66:01:fb:82:d8:04:55:40:5d:b1:db:16:38:1e:be:f6:88:62:
72:fa:ad:a2:ad:34:38:23:a9:50:28:72:53:e8:f5:ef:30:7c:
15:cd:0d:6e:7f:b8:93:33:74:cc:e4:4c:3e:0f:4e:e4:13:ff:
4d:05:58:9c:b0:79:4e:e7:26:6c:08:4a:d1:0e:65:73:42:75:
d2:e0:1f:86:41:d3:7e:4f:0a:4b:b5:e7:b8:4d:6d:85:94:1f:
50:54:03:ee:ea:ea:22:77:99:1a:ea:fd:6b:d0:76:c3:49:7f:
61:7c:39:1c:13:a2:f1:01:9d:8e:4f:14:d6:13:7c:ef:e5:55:
c9:21:c6:22:f8:9a:c5:db:a8:41:ac:6f:82:fb:32:8c:e0:0b:
a4:a4:03:68:8d:7b:85:2b:36:70:88:9f:a5:95:cc:25:c6:14:
6d:31:c0:53:6f:5b:09:c4:8c:dd:93:2e:53:b2:a6:e5:3a:b1:
39:f2:e2:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmsT/Fzi25tstfbRSmwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmJlOTgyMDYwYTQzNzM0ZDBhZDEyNmFkNDZkYTJmMzk1
YzlkZWYwHhcNMjUwODIzMDUwMjIyWhcNMjUwODI0MDUwMjIyWjAzMTEwLwYDVQQD
EyhjNzk5YWViYjczNWM2N2RjNTVkMGE0YTdiZWQwOTcyOGU2ZmI2NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAHYBbK3mDfccmEpFoWRIJ0X/LHd
DZK3+Rpy/pNGgQIlBuyi90ZsEeRAOaNS5jwBnYBhDoCIh4vU2G52op66qcTRLhjY
PU2+tvEnMrn2F6G6O0kstimOj7cKDSgbzvrtXKGIH//pNZN8/uSI+FMv+LFwb7w+
/+SAeECD6d4LeNBRK4Vs4Hgdl0woeiqE+zrzEfIZ9CGfOql02IOETkcBhs6F+i5G
eSNpp/KHT1YLo+NmWBGBVFanOictd3xemAOVaPWNr27GN596B1zZ/Z/hSdONaNnz
heD9yyE5tIH/4z2O+u+pYnfUOj3uHcKbrjl7zX67iMFjp35ntbdywY6QVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeZrrtzXGfcVdCkp77Qlyjm+2UrMB8GA1UdIwQY
MBaAFPMr6YIGCkNzTQrRJq1G2i85XJ3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGIt
OTliY2JlNmQ3ZjYzLzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGItOTliY2JlNmQ3ZjYz
LzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9+4lgGF
dmL76AfqigMGsenARGyivk3WxfIDCYrzjyGmaPYXg/ESyij9pjsU0Boz/DxVkqBl
K2kHQ2iuZ2bCE9w86iW7nj5TZgH7gtgEVUBdsdsWOB6+9ohicvqtoq00OCOpUChy
U+j17zB8Fc0Nbn+4kzN0zORMPg9O5BP/TQVYnLB5TucmbAhK0Q5lc0J10uAfhkHT
fk8KS7XnuE1thZQfUFQD7urqIneZGur9a9B2w0l/YXw5HBOi8QGdjk8U1hN87+VV
ySHGIviaxduoQaxvgvsyjOALpKQDaI17hSs2cIifpZXMJcYUbTHAU29bCcSM3ZMu
U7Km5TqxOfLi0g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:06:28 2025 by rpki-client