Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier: 3QjSjRCKv+ODFEJ4+ExwlERoBzKo4b8SArEh09UQPkQ=
Subject key identifier: 83:9E:9E:9B:E0:0E:74:07:42:DB:06:20:A5:FD:EC:F0:78:0A:4B:D4
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial: 0198D3287F2F7F4A0A84AAD215E1AAFCFD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 19:01:43 +0000
Manifest this update: Fri 22 Aug 2025 19:01:43 +0000
Manifest next update: Sat 23 Aug 2025 19:01:43 +0000
Files and hashes: 1: 7Kmoa0mTT-hmQesiS2Vd310k5jw.roa (hash: USbTJdTp4AkhAgtWaDPdpVWCdumqCodGAPlzgsbWpqI=)
2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: YFn/weR+ryJGN8XvHwhiWNYRkKitcSTRdHcXZZxbqcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:28:7f:2f:7f:4a:0a:84:aa:d2:15:e1:aa:fc:fd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Validity
Not Before: Aug 22 19:01:43 2025 GMT
Not After : Aug 23 19:01:43 2025 GMT
Subject: CN=839e9e9be00e740742db0620a5fdecf0780a4bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:57:46:c8:37:76:8b:11:53:5e:71:e3:6b:
cb:cc:16:f4:1d:b5:4d:fe:b6:7e:fd:ab:6b:86:a4:
38:11:6d:45:55:6d:80:b7:83:06:1d:d6:5f:ad:34:
89:e5:8a:4e:cd:1f:2e:1d:9e:f7:c4:66:be:63:4f:
04:d1:ce:24:36:19:49:b3:a7:95:89:43:b1:15:c6:
af:e0:d4:d1:0a:d9:8d:c1:29:44:dc:32:82:e4:60:
f8:5a:d2:c6:43:22:66:f9:b0:d8:ef:ce:6d:73:71:
33:77:64:b7:12:d3:a3:96:32:38:d4:93:00:41:4b:
62:b1:f8:3a:c9:c5:85:54:c9:1f:7d:e1:5f:06:14:
1d:38:e7:41:e9:dd:73:cc:5b:37:e4:62:ce:08:a8:
88:c1:3a:07:ab:25:b5:94:78:9a:dc:41:09:a6:2e:
36:65:23:41:67:ff:d1:fc:c3:ef:a1:47:25:2b:37:
1e:01:5d:df:fd:1f:98:d3:99:d7:29:0f:a8:58:71:
75:14:92:d9:95:f4:8b:2e:53:87:80:7a:0d:01:7d:
0f:17:25:d5:71:04:7b:3d:ec:8f:3a:c5:92:01:16:
2f:ef:26:80:86:cf:34:a2:5a:47:f0:76:4a:2e:75:
09:77:2d:25:fc:d0:2c:95:b8:23:ff:fa:83:47:04:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:9E:9B:E0:0E:74:07:42:DB:06:20:A5:FD:EC:F0:78:0A:4B:D4
X509v3 Authority Key Identifier:
keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5e:7f:cc:7b:fb:73:3d:e6:64:cd:56:7d:59:68:d5:02:78:
19:ee:93:5d:7f:3f:c3:88:ad:8a:e4:3f:78:f1:63:be:a9:14:
17:63:47:cc:1d:f9:6b:55:60:2d:59:3f:da:97:3b:c6:6d:de:
40:10:ad:89:2b:66:9b:cb:80:a4:48:a3:bb:b7:40:bb:10:b4:
0b:f2:db:35:63:de:b4:6b:4b:05:9d:0c:4b:51:0d:34:1a:25:
19:cd:b9:46:6a:3e:58:cf:8f:04:2e:f8:25:52:30:df:ac:78:
4d:88:ea:53:09:b1:6e:9e:c9:ef:24:e1:9b:8b:65:eb:10:37:
1a:ac:f4:d6:9a:c7:f4:75:32:d6:c4:1a:0b:b7:10:a9:c2:66:
a9:43:15:ff:bf:ba:b5:f2:7d:29:b3:7d:97:f2:c7:a2:29:b2:
b2:47:4f:b7:67:a0:e5:b9:d4:38:7e:ec:e0:80:e6:18:48:e7:
44:a7:26:27:a2:73:9c:77:1a:38:53:13:08:ea:2b:31:bf:93:
98:57:07:a7:b1:60:7d:5a:bf:5e:1d:f7:6d:97:8f:f5:d1:b0:
52:34:b6:c0:39:a0:15:26:cb:31:6a:76:a7:aa:d8:11:50:86:
21:0e:0e:c1:cd:29:61:b8:7a:4a:96:3b:a0:5d:c7:84:30:64:
d9:5a:c6:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjTKH8vf0oKhKrSFeGq/P01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjA5MGM1ZjYyMzNjYmFlYWYzMTlkY2ZhZTY5MmE5NTZl
ZWExMDIwHhcNMjUwODIyMTkwMTQzWhcNMjUwODIzMTkwMTQzWjAzMTEwLwYDVQQD
Eyg4MzllOWU5YmUwMGU3NDA3NDJkYjA2MjBhNWZkZWNmMDc4MGE0YmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKhXRsg3dosRU15x42vLzBb0HbVN
/rZ+/atrhqQ4EW1FVW2At4MGHdZfrTSJ5YpOzR8uHZ73xGa+Y08E0c4kNhlJs6eV
iUOxFcav4NTRCtmNwSlE3DKC5GD4WtLGQyJm+bDY785tc3Ezd2S3EtOjljI41JMA
QUtisfg6ycWFVMkffeFfBhQdOOdB6d1zzFs35GLOCKiIwToHqyW1lHia3EEJpi42
ZSNBZ//R/MPvoUclKzceAV3f/R+Y05nXKQ+oWHF1FJLZlfSLLlOHgHoNAX0PFyXV
cQR7PeyPOsWSARYv7yaAhs80olpH8HZKLnUJdy0l/NAslbgj//qDRwTHQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOenpvgDnQHQtsGIKX97PB4CkvUMB8GA1UdIwQY
MBaAFPFgkMX2Izy66vMZ3PrmkqlW7qECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQt
N2M4OGM0ZTA0ZjkxLzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQtN2M4OGM0ZTA0Zjkx
LzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIV5/zHv7
cz3mZM1WfVlo1QJ4Ge6TXX8/w4itiuQ/ePFjvqkUF2NHzB35a1VgLVk/2pc7xm3e
QBCtiStmm8uApEiju7dAuxC0C/LbNWPetGtLBZ0MS1ENNBolGc25Rmo+WM+PBC74
JVIw36x4TYjqUwmxbp7J7yThm4tl6xA3Gqz01prH9HUy1sQaC7cQqcJmqUMV/7+6
tfJ9KbN9l/LHoimyskdPt2eg5bnUOH7s4IDmGEjnRKcmJ6JznHcaOFMTCOorMb+T
mFcHp7FgfVq/Xh33bZeP9dGwUjS2wDmgFSbLMWp2p6rYEVCGIQ4Owc0pYbh6SpY7
oF3HhDBk2VrGkQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 01:34:19 2025 by rpki-client