Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
File: r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json)
Hash identifier: cMtf/weHmwPzVY9Dg5ud0nASpQjDJp+VEIpbrJPvY4g=
Subject key identifier: 3E:93:F7:4B:14:C1:CC:16:BF:BC:CA:CA:2C:37:CC:69:B3:7A:47:74
Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Certificate issuer: /CN=afff13a67f225c3c2a606658c23965b8191d4008
Certificate serial: 0198D65F3A5A1C0D1B4454FD47512AFACEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
Manifest number: 0C6F
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: uP3K0JoOyVBzhylDeuryG9e2WpQlTrBRSW32gxnugps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3a:5a:1c:0d:1b:44:54:fd:47:51:2a:fa:ce:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=3e93f74b14c1cc16bfbccaca2c37cc69b37a4774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:cf:1c:c0:19:78:8b:5d:36:d7:33:65:27:
f7:43:69:e4:e6:c9:db:a3:8c:d5:36:26:19:36:ea:
44:25:b9:43:5c:ee:f5:00:3f:7b:9b:8c:55:43:f8:
ba:88:7a:57:2f:18:0f:b9:a4:f6:e9:25:47:1e:13:
84:08:0e:6d:7f:86:16:6f:e6:0a:65:a5:c9:9e:2a:
d9:2b:13:6f:48:d3:6d:19:3f:31:17:f0:dd:da:4e:
e5:0c:78:ff:0f:51:f8:09:33:21:7a:d1:1a:7f:b2:
b7:0a:5d:7a:9e:ce:ed:88:0b:44:1c:9b:e8:fd:4f:
30:45:4a:93:da:4e:b7:65:e0:38:fa:b7:46:53:90:
2e:1e:17:4c:d7:19:cc:46:1c:8f:ef:a3:99:62:58:
3f:34:e8:57:e3:9a:51:e2:92:29:99:ad:df:8c:7a:
02:34:b0:6f:32:dd:49:ec:19:a2:d9:c7:42:75:e9:
de:6f:05:ed:94:4a:6c:65:27:e7:e1:ef:b6:5a:c8:
c7:35:c3:57:c8:ab:45:e6:b5:51:bd:38:6a:d9:71:
9b:ea:6d:ab:24:be:e2:8f:2b:02:7e:9c:c4:1b:66:
7d:36:43:77:44:90:23:3d:75:07:00:21:37:5b:b2:
f7:fe:a0:38:9d:e0:b2:1b:ee:15:ea:fa:41:8b:0a:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:93:F7:4B:14:C1:CC:16:BF:BC:CA:CA:2C:37:CC:69:B3:7A:47:74
X509v3 Authority Key Identifier:
keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f4:80:af:93:ee:c0:9e:e1:05:bd:0c:82:cc:c2:1a:af:74:
9a:57:bf:58:f5:a1:48:c5:15:51:94:64:19:51:71:fb:4d:f4:
ac:03:d5:b5:f9:da:00:62:6f:52:b3:fc:29:78:05:2c:65:b8:
f5:e1:33:92:0f:de:27:83:4d:4a:42:8a:b4:47:d5:cc:84:31:
b1:20:26:cb:58:07:8e:1f:51:01:5a:a6:01:fb:e3:e9:3c:0e:
55:9c:e1:7e:e3:7b:78:ed:c5:41:de:8b:c1:43:98:9c:58:69:
a1:37:90:3f:b6:10:4b:f5:d4:22:71:07:1d:23:b9:d3:53:f6:
64:eb:c8:4d:85:63:5b:9a:51:6c:1d:09:df:d5:48:56:06:f3:
84:a0:d1:97:56:fe:c5:6c:45:13:d0:dd:f4:fd:9b:02:34:30:
b4:d5:f1:7b:e1:89:ab:ee:aa:95:36:fc:b3:86:42:35:d3:ac:
92:c3:62:e3:b1:94:c8:34:8f:0e:d5:3c:2c:48:e9:4a:10:84:
ae:b1:46:95:a6:31:a3:34:2b:f4:74:94:0a:16:31:2b:a8:50:
67:f3:76:f9:be:b1:3c:94:d2:86:f8:df:0a:85:e0:cc:fc:e0:
69:b1:c4:50:50:c7:24:b3:6c:c0:f3:48:bf:53:74:3a:49:07:
4e:1a:36:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXzpaHA0bRFT9R1Eq+s77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmYxM2E2N2YyMjVjM2MyYTYwNjY1OGMyMzk2NWI4MTkx
ZDQwMDgwHhcNMjUwODIzMTAwMDIxWhcNMjUwODI0MTAwMDIxWjAzMTEwLwYDVQQD
EygzZTkzZjc0YjE0YzFjYzE2YmZiY2NhY2EyYzM3Y2M2OWIzN2E0Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzjPHMAZeItdNtczZSf3Q2nk5snb
o4zVNiYZNupEJblDXO71AD97m4xVQ/i6iHpXLxgPuaT26SVHHhOECA5tf4YWb+YK
ZaXJnirZKxNvSNNtGT8xF/Dd2k7lDHj/D1H4CTMhetEaf7K3Cl16ns7tiAtEHJvo
/U8wRUqT2k63ZeA4+rdGU5AuHhdM1xnMRhyP76OZYlg/NOhX45pR4pIpma3fjHoC
NLBvMt1J7Bmi2cdCdenebwXtlEpsZSfn4e+2WsjHNcNXyKtF5rVRvThq2XGb6m2r
JL7ijysCfpzEG2Z9NkN3RJAjPXUHACE3W7L3/qA4neCyG+4V6vpBiwqFNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6T90sUwcwWv7zKyiw3zGmzekd0MB8GA1UdIwQY
MBaAFK//E6Z/Ilw8KmBmWMI5ZbgZHUAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84ZjA2M2MtMTE5YS00N2EwLThiMGQt
NmQyYjJiYTJhODhhLzEvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84ZjA2M2MtMTE5YS00N2EwLThiMGQtNmQyYjJiYTJhODhh
LzEvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfSAr5Pu
wJ7hBb0MgszCGq90mle/WPWhSMUVUZRkGVFx+030rAPVtfnaAGJvUrP8KXgFLGW4
9eEzkg/eJ4NNSkKKtEfVzIQxsSAmy1gHjh9RAVqmAfvj6TwOVZzhfuN7eO3FQd6L
wUOYnFhpoTeQP7YQS/XUInEHHSO501P2ZOvITYVjW5pRbB0J39VIVgbzhKDRl1b+
xWxFE9Dd9P2bAjQwtNXxe+GJq+6qlTb8s4ZCNdOsksNi47GUyDSPDtU8LEjpShCE
rrFGlaYxozQr9HSUChYxK6hQZ/N2+b6xPJTShvjfCoXgzPzgabHEUFDHJLNswPNI
v1N0OkkHTho2wQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:06 2025 by rpki-client