Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: zoTNe0l+vrAp0UbGrR6qw7I5ruBUdQs19TDdY9kDDOA=
Subject key identifier: 43:76:AC:85:6B:AD:57:A2:71:ED:81:49:FC:B5:53:F5:67:22:E2:96
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 0197B6A047F6C32FDDB2980407080033C0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0734
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: 5owSOR3cxSrij1jXY8apCcyZoPyMb5000GiRRvvQhyQ=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:47:f6:c3:2f:dd:b2:98:04:07:08:00:33:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=4376ac856bad57a271ed8149fcb553f56722e296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:5d:ab:36:35:62:ac:98:52:2a:d0:d4:39:
e8:80:e2:41:1c:0c:41:9c:f5:ff:70:10:b8:79:d7:
e6:dd:a0:a7:4b:eb:68:0c:6b:dc:af:96:9e:ae:15:
3a:77:e4:ed:2d:16:4b:76:39:ee:ae:ef:d7:0a:53:
47:04:ac:d1:9c:22:93:96:99:1f:87:ce:5e:ab:31:
26:f8:01:c9:e2:b8:e7:bd:4e:9f:83:f4:ac:82:e9:
b4:a9:43:e4:7a:e8:df:e7:b5:a0:d6:e5:8b:4f:05:
c0:31:9b:9e:ec:d9:ea:e5:e8:ef:8b:5e:01:6c:55:
e5:4d:2f:68:68:52:2b:f5:e0:4d:a8:5a:a0:25:99:
4d:fd:a0:40:d5:d8:6c:30:1e:b0:30:13:1f:23:e1:
38:58:bd:ca:67:72:11:c5:b3:cb:32:fc:13:15:27:
ec:53:42:3a:df:b7:7d:fd:ff:e2:fb:e2:48:fc:21:
a6:90:50:ff:ec:01:ee:82:fe:bb:6d:91:3d:3c:ee:
b0:c5:96:80:9b:d2:4f:ce:b2:a3:56:3e:16:c0:b1:
2a:bd:6b:12:38:19:f3:0b:8f:15:dc:18:0e:ae:60:
a7:e8:15:63:92:0f:1f:b5:1c:55:c9:38:00:d8:ed:
44:94:a8:3f:ff:a6:6c:b8:87:d9:7d:75:55:c7:db:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:AC:85:6B:AD:57:A2:71:ED:81:49:FC:B5:53:F5:67:22:E2:96
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bb:c7:9f:35:10:fd:68:41:6a:e9:34:45:4f:cd:97:94:63:
5d:25:aa:c1:66:58:21:93:f3:9b:2d:6a:b6:b2:e4:4e:e8:57:
ad:5f:5d:e4:57:21:11:a2:57:8a:f4:58:fb:5d:ef:1d:1b:fc:
d0:86:9a:e6:51:ce:d5:0a:87:8a:c0:c8:44:5c:f0:c2:f6:d1:
d3:16:49:40:22:dd:f0:db:0a:c6:86:c4:4d:5c:b5:14:d3:d2:
af:c9:35:64:b1:e8:7c:0c:de:b3:41:07:93:82:13:f5:c6:c8:
31:94:99:b1:77:2f:45:dc:b0:51:93:7e:66:dd:c0:4e:51:18:
ca:fa:ad:03:12:cb:65:19:3b:54:9b:08:76:45:ec:0e:c8:a4:
59:3b:01:99:5d:98:f8:06:bd:36:dc:5b:99:d2:c0:2b:df:8c:
ea:37:1d:6b:ab:e6:c4:cb:85:f6:d1:71:af:31:4c:00:61:e2:
0e:c5:69:e3:4d:10:37:98:b2:31:e3:53:f0:77:5b:41:70:17:
1c:76:4d:f4:90:59:0b:44:88:e3:35:19:98:86:da:79:37:0d:
af:24:03:d5:53:0b:92:d6:b4:a2:5a:2b:3f:c3:32:dc:20:f7:
a0:dd:cb:87:f8:67:73:ef:4e:24:af:36:05:74:d8:23:63:41:
dd:59:ac:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oEf2wy/dspgEBwgAM8CjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy
NTQ0MjkwHhcNMjUwNjI4MTMwMDQ2WhcNMjUwNjI5MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg0Mzc2YWM4NTZiYWQ1N2EyNzFlZDgxNDlmY2I1NTNmNTY3MjJlMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N9dqzY1YqyYUirQ1DnogOJBHAxB
nPX/cBC4edfm3aCnS+toDGvcr5aerhU6d+TtLRZLdjnuru/XClNHBKzRnCKTlpkf
h85eqzEm+AHJ4rjnvU6fg/Ssgum0qUPkeujf57Wg1uWLTwXAMZue7Nnq5ejvi14B
bFXlTS9oaFIr9eBNqFqgJZlN/aBA1dhsMB6wMBMfI+E4WL3KZ3IRxbPLMvwTFSfs
U0I637d9/f/i++JI/CGmkFD/7AHugv67bZE9PO6wxZaAm9JPzrKjVj4WwLEqvWsS
OBnzC48V3BgOrmCn6BVjkg8ftRxVyTgA2O1ElKg//6ZsuIfZfXVVx9s9UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN2rIVrrVeice2BSfy1U/VnIuKWMB8GA1UdIwQY
MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt
NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw
LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7vHnzUQ
/WhBauk0RU/Nl5RjXSWqwWZYIZPzmy1qtrLkTuhXrV9d5FchEaJXivRY+13vHRv8
0Iaa5lHO1QqHisDIRFzwwvbR0xZJQCLd8NsKxobETVy1FNPSr8k1ZLHofAzes0EH
k4IT9cbIMZSZsXcvRdywUZN+Zt3ATlEYyvqtAxLLZRk7VJsIdkXsDsikWTsBmV2Y
+Aa9NtxbmdLAK9+M6jcda6vmxMuF9tFxrzFMAGHiDsVp400QN5iyMeNT8HdbQXAX
HHZN9JBZC0SI4zUZmIbaeTcNryQD1VMLkta0olorP8My3CD3oN3Lh/hnc+9OJK82
BXTYI2NB3VmsDw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:50 2025 by rpki-client