Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: XiJQtDXXh7Iorpn5b/UPdwFO0Qh5h9Nf8SQSavnEB5I=
Subject key identifier: BB:40:C0:3B:E1:F0:03:26:30:A1:3C:39:8C:D4:4B:58:40:A2:08:6B
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 0197B6A0D341FB2945C12C6F766940857845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 08A7
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: 8oFMROhZdVjNRc+ipF3aZK37KwlKZ3ORS0pQMI7ibuM=)
2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d3:41:fb:29:45:c1:2c:6f:76:69:40:85:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=bb40c03be1f0032630a13c398cd44b5840a2086b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9e:bb:7d:31:e6:7f:0d:ee:f1:03:cc:1a:e0:
e1:4f:92:3a:00:6b:da:59:20:0f:68:13:35:30:b8:
96:f8:63:f3:6f:4c:c9:19:41:6e:8d:4d:5f:67:fe:
e5:f6:cf:a2:88:85:c5:19:e0:76:3b:db:71:bf:a3:
42:36:19:13:f1:97:1f:25:1f:89:01:2b:d5:d4:74:
02:81:19:4c:a3:9c:24:b6:77:b6:eb:60:30:3a:e2:
2c:4f:04:8a:3e:a9:bb:c2:06:78:f6:70:19:f1:d0:
48:b2:8a:42:22:a3:72:6f:5b:98:87:a7:03:8d:ab:
86:00:dd:6c:4d:60:d7:fc:6c:ec:b2:5d:57:86:c4:
fd:1d:ea:c9:d2:d5:fd:d7:e4:ea:e2:8f:b0:b4:c7:
65:21:e4:b4:7b:7a:ff:9e:b7:f3:7f:76:06:2a:27:
a4:de:3d:b0:8e:7f:4a:d9:39:06:72:55:72:e0:49:
a5:1c:eb:78:57:d4:f9:d9:56:24:17:5e:02:14:a4:
8a:b3:8c:b1:58:af:cb:ac:bd:8f:a6:4e:49:3e:b8:
df:65:e8:2a:19:0d:0e:86:66:ef:1f:6b:2a:6e:c5:
e5:0d:cf:05:b1:01:b4:5c:06:97:89:48:d0:3c:14:
64:fe:a2:0f:46:ad:5a:8b:59:bf:98:2c:04:88:3a:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:C0:3B:E1:F0:03:26:30:A1:3C:39:8C:D4:4B:58:40:A2:08:6B
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:11:f3:21:74:5a:6a:df:f4:62:cf:a3:b6:d9:01:c7:aa:c5:
ea:cd:2b:0a:83:f6:3c:f8:59:b3:6b:29:c4:20:14:1c:77:9c:
fe:6f:f3:1e:ad:a9:63:fe:ed:29:b7:68:8f:79:82:a2:fe:ab:
f5:77:47:a5:6e:68:33:b6:32:6f:b9:a8:63:7e:92:58:1d:4e:
64:57:bc:cc:7d:7a:e8:62:49:44:ca:cf:5e:15:c2:c2:52:3e:
b9:78:53:d9:8f:55:33:ae:ee:4a:85:dc:49:d0:b2:df:95:a2:
94:38:f4:8f:73:78:c6:da:3f:f1:34:9e:e7:5a:01:af:cb:95:
94:00:c6:11:04:74:b4:4a:e9:2e:43:4a:cd:fe:75:b4:c4:f3:
79:12:51:42:83:3e:f3:1e:a4:8d:f2:c8:e0:fa:26:0d:e9:79:
ed:4b:cd:48:94:e9:dd:7e:fb:5d:67:67:39:88:18:ef:79:2d:
f0:9a:df:2d:0d:df:d7:9e:0f:1b:b3:de:a2:af:f1:c7:ad:83:
58:8a:87:7d:ce:94:15:db:52:42:ca:b5:29:3e:c9:b8:03:0b:
4e:a2:33:f7:cd:89:3f:d0:7a:07:51:c6:53:a6:70:a6:64:09:
86:46:ff:b1:93:32:36:03:21:15:b3:73:51:a2:ca:27:30:c7:
8b:32:10:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNNB+ylFwSxvdmlAhXhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzkzNWQ4NDMxNmEyY2Y1NmE2NTk1N2I2ZDc5YjdhZjgx
MWE3MDcwHhcNMjUwNjI4MTMwMTIyWhcNMjUwNjI5MTMwMTIyWjAzMTEwLwYDVQQD
EyhiYjQwYzAzYmUxZjAwMzI2MzBhMTNjMzk4Y2Q0NGI1ODQwYTIwODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8567fTHmfw3u8QPMGuDhT5I6AGva
WSAPaBM1MLiW+GPzb0zJGUFujU1fZ/7l9s+iiIXFGeB2O9txv6NCNhkT8ZcfJR+J
ASvV1HQCgRlMo5wktne262AwOuIsTwSKPqm7wgZ49nAZ8dBIsopCIqNyb1uYh6cD
jauGAN1sTWDX/Gzssl1XhsT9HerJ0tX91+Tq4o+wtMdlIeS0e3r/nrfzf3YGKiek
3j2wjn9K2TkGclVy4EmlHOt4V9T52VYkF14CFKSKs4yxWK/LrL2Ppk5JPrjfZegq
GQ0OhmbvH2sqbsXlDc8FsQG0XAaXiUjQPBRk/qIPRq1ai1m/mCwEiDrvvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtAwDvh8AMmMKE8OYzUS1hAoghrMB8GA1UdIwQY
MBaAFLPJNdhDFqLPVqZZV7bXm3r4EacHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMt
MWNjMWE1MzhjM2NlLzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMtMWNjMWE1MzhjM2Nl
LzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhHzIXRa
at/0Ys+jttkBx6rF6s0rCoP2PPhZs2spxCAUHHec/m/zHq2pY/7tKbdoj3mCov6r
9XdHpW5oM7Yyb7moY36SWB1OZFe8zH166GJJRMrPXhXCwlI+uXhT2Y9VM67uSoXc
SdCy35WilDj0j3N4xto/8TSe51oBr8uVlADGEQR0tErpLkNKzf51tMTzeRJRQoM+
8x6kjfLI4PomDel57UvNSJTp3X77XWdnOYgY73kt8JrfLQ3f154PG7Peoq/xx62D
WIqHfc6UFdtSQsq1KT7JuAMLTqIz982JP9B6B1HGU6ZwpmQJhkb/sZMyNgMhFbNz
UaLKJzDHizIQfw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:08 2025 by rpki-client