Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
File: 8CDLT5tfebnaa0gnutnFSiqAxTE.mft (raw, json)
Hash identifier: vsrzHp9UuODyF5yItIryONwrSnDTmnG8+z5j3/ryNaA=
Subject key identifier: FA:10:15:20:A1:13:43:9A:96:A3:86:D0:26:1C:1D:0D:E9:4E:BA:32
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Certificate issuer: /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial: 0198D54DFC7A1F2F3379FF0078E10FCC7D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
Manifest number: 0EE0
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: 8CDLT5tfebnaa0gnutnFSiqAxTE.crl (hash: cp0TP7Gh38xUIpR6qI9EruL1rKzIdYZv/6Ivl2dyRik=)
2: amkS5SoIvujCi9yce4d8VftUldc.roa (hash: +cELHuiQeJpKMXecyPF27q6ZAbek7zvwZNYTMIlI2SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fc:7a:1f:2f:33:79:ff:00:78:e1:0f:cc:7d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=fa101520a113439a96a386d0261c1d0de94eba32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:10:b3:10:87:d3:2a:80:5a:a2:d1:ca:df:
4d:a9:49:30:82:4f:1c:e6:4e:6e:22:c5:47:7c:2e:
8b:b0:4b:56:ab:ac:50:19:5e:15:b8:d2:96:fe:93:
ab:2a:57:82:c9:73:0b:aa:51:df:5d:26:dd:fe:06:
b9:1a:5d:6d:7f:d0:7f:f0:ad:b4:fb:7a:b8:2c:01:
b8:47:4a:32:0a:93:d7:36:37:27:3d:1a:f6:9f:b4:
71:64:45:f0:20:ec:5c:33:5a:85:b5:e1:87:e7:a8:
a6:f1:9b:62:d6:1f:45:41:60:7b:f0:6d:be:1f:c7:
f3:91:d5:75:f4:71:42:19:41:c5:95:01:f9:71:c6:
2c:aa:f1:14:f3:b6:35:ac:5d:3b:d6:4e:bf:ab:75:
60:c6:f6:a9:71:f2:8d:70:5b:ed:5f:9e:12:2a:24:
58:84:e3:3d:d5:a7:3c:05:41:ec:52:e2:f3:4a:bd:
d4:cc:c4:dd:31:09:5c:ac:9a:a1:4b:bd:72:93:a5:
94:16:de:f0:25:09:52:ce:58:62:92:40:f1:9a:24:
d5:74:ce:9c:07:27:35:3b:00:cc:32:e8:6c:a9:4d:
ec:a1:17:44:55:a1:d9:e4:24:13:e1:a8:37:35:8c:
33:c1:94:88:2a:ff:40:00:a1:0b:8b:1b:4b:6e:ae:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:10:15:20:A1:13:43:9A:96:A3:86:D0:26:1C:1D:0D:E9:4E:BA:32
X509v3 Authority Key Identifier:
keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:dd:79:20:34:10:19:6c:33:61:d8:1c:7c:07:f4:33:f2:44:
61:6a:9d:ef:ee:ad:e8:3f:3c:fb:b6:ee:2e:d3:39:d1:42:57:
97:4e:54:08:57:f2:e4:fa:7f:4b:dd:60:93:0e:89:40:a3:ed:
1d:18:d4:d5:33:c6:77:9c:b4:63:f8:c9:4a:5e:52:77:9c:86:
2e:93:11:e9:67:d1:f8:b1:7d:b5:cd:58:7a:a6:f8:fe:87:b1:
e5:f5:ea:51:ab:03:87:1c:60:29:fb:6e:c3:59:62:a2:32:eb:
3a:50:bd:0c:23:df:c0:50:58:b6:48:72:95:0d:37:f4:d9:56:
f9:16:48:7c:7e:c8:6e:7d:e6:2b:36:d8:21:30:d7:2b:dd:e9:
40:dc:37:8c:6b:0c:3d:36:c2:ec:d6:9e:ae:c0:3b:e7:11:74:
83:02:d6:b0:05:fd:b1:7b:01:8c:fc:97:73:86:b1:36:b2:84:
da:bd:d4:33:96:31:69:e0:03:8f:8c:df:5c:a5:d7:a5:82:bc:
0e:58:51:63:00:fb:3b:f0:7e:52:f8:5d:91:90:13:61:60:f3:
b3:34:d7:e2:85:c6:fd:8f:1e:14:58:7e:95:89:43:68:f6:6a:
8b:0e:d2:58:de:7c:af:4e:44:18:2e:62:86:d7:e0:b5:08:40:
4e:44:68:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfx6Hy8zef8AeOEPzH0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMjBjYjRmOWI1Zjc5YjlkYTZiNDgyN2JhZDljNTRhMmE4
MGM1MzEwHhcNMjUwODIzMDUwMTU0WhcNMjUwODI0MDUwMTU0WjAzMTEwLwYDVQQD
EyhmYTEwMTUyMGExMTM0MzlhOTZhMzg2ZDAyNjFjMWQwZGU5NGViYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywoQsxCH0yqAWqLRyt9NqUkwgk8c
5k5uIsVHfC6LsEtWq6xQGV4VuNKW/pOrKleCyXMLqlHfXSbd/ga5Gl1tf9B/8K20
+3q4LAG4R0oyCpPXNjcnPRr2n7RxZEXwIOxcM1qFteGH56im8Zti1h9FQWB78G2+
H8fzkdV19HFCGUHFlQH5ccYsqvEU87Y1rF071k6/q3VgxvapcfKNcFvtX54SKiRY
hOM91ac8BUHsUuLzSr3UzMTdMQlcrJqhS71yk6WUFt7wJQlSzlhikkDxmiTVdM6c
Byc1OwDMMuhsqU3soRdEVaHZ5CQT4ag3NYwzwZSIKv9AAKELixtLbq4lkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoQFSChE0OalqOG0CYcHQ3pTroyMB8GA1UdIwQY
MBaAFPAgy0+bX3m52mtIJ7rZxUoqgMUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOENETFQ1dGZlYm5hYTBnbnV0bkZTaXFBeFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83YzQ0YzQtZWNjZC00OTVjLWI5ODMt
ODRjOTBiYmE5Y2Q0LzEvOENETFQ1dGZlYm5hYTBnbnV0bkZTaXFBeFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83YzQ0YzQtZWNjZC00OTVjLWI5ODMtODRjOTBiYmE5Y2Q0
LzEvOENETFQ1dGZlYm5hYTBnbnV0bkZTaXFBeFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2d15IDQQ
GWwzYdgcfAf0M/JEYWqd7+6t6D88+7buLtM50UJXl05UCFfy5Pp/S91gkw6JQKPt
HRjU1TPGd5y0Y/jJSl5Sd5yGLpMR6WfR+LF9tc1Yeqb4/oex5fXqUasDhxxgKftu
w1liojLrOlC9DCPfwFBYtkhylQ039NlW+RZIfH7Ibn3mKzbYITDXK93pQNw3jGsM
PTbC7NaersA75xF0gwLWsAX9sXsBjPyXc4axNrKE2r3UM5YxaeADj4zfXKXXpYK8
DlhRYwD7O/B+UvhdkZATYWDzszTX4oXG/Y8eFFh+lYlDaPZqiw7SWN58r05EGC5i
htfgtQhATkRoEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:56 2025 by rpki-client