Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: yV7oS+ZVSBWCV7qq+jadklvPp83PG5O2Ql1l5MhutT8=
Subject key identifier: FA:38:CF:17:4F:15:55:F2:B3:5D:69:43:00:25:E1:2F:0A:07:B9:5E
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 0198D515DAA2D6F29E5DC44A8311F059976D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 0A24
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: 3jnH85RnHUjFsmZcYknKoyKR0cDt882xr7YCAhNq7kI=)
2: mKP-r2WNz-DcN8jHguqt0IynJdI.roa (hash: 64sCq3JbYFHT/xnTN/Iz1j1wV1/No8n++lWEXivZPic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:da:a2:d6:f2:9e:5d:c4:4a:83:11:f0:59:97:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=fa38cf174f1555f2b35d69430025e12f0a07b95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:7a:ba:a2:5f:bd:a3:d9:b5:8d:1b:d1:2f:
0c:f2:f4:89:97:ae:24:46:3d:83:b5:4e:6b:0c:f3:
4b:02:bf:e2:6c:0f:e1:ca:23:ff:5f:02:25:90:51:
d3:4e:75:3e:3f:20:9f:ae:0d:75:8c:33:47:b9:7b:
e6:83:af:b1:14:5d:a0:ad:0b:f3:5d:a3:c1:dd:c8:
0a:f1:91:d6:59:b5:96:05:bc:9e:0a:71:df:10:e0:
cf:24:f4:10:ca:f8:e2:e0:fd:b7:1a:82:c8:8d:58:
52:26:af:47:97:99:e3:57:0c:04:d0:f0:29:ed:f1:
aa:79:4b:28:4d:e8:ba:ea:44:7d:13:dd:37:27:45:
b4:61:ac:f7:d4:15:a0:b3:c3:95:f1:d8:87:f7:07:
d2:89:48:4e:00:94:13:2e:45:d2:de:0c:7c:bb:11:
0c:e8:72:30:36:69:3b:08:0f:7a:85:52:7d:5b:7b:
82:8e:9e:bc:b4:54:b8:8e:d5:9c:9a:5a:41:27:a6:
65:1e:6c:df:30:c4:4c:57:8f:a6:b4:19:7b:83:10:
a9:76:87:21:5d:62:e0:e1:c0:b6:c3:a9:4b:8a:e5:
5f:7f:6d:2b:6a:0a:86:ad:99:86:ea:e4:19:16:4d:
fe:df:82:a0:93:85:e5:e3:52:1f:0a:40:87:df:c5:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:CF:17:4F:15:55:F2:B3:5D:69:43:00:25:E1:2F:0A:07:B9:5E
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6d:37:58:45:85:53:a3:0c:25:17:99:77:cb:fb:93:27:2c:
4d:0c:44:4a:5f:74:ff:35:0a:d5:db:8a:87:04:bf:30:74:a9:
7d:8f:db:4a:74:25:16:7f:6a:47:ae:bb:c7:72:c4:37:2b:27:
3b:b7:10:b7:9a:07:06:39:bd:aa:b5:ce:3a:47:9c:cb:55:56:
38:ec:7d:08:e2:13:a8:4a:5f:0f:4a:23:96:82:fd:c0:0f:53:
b2:94:63:5f:f0:aa:61:56:8f:d5:cc:23:39:7e:c6:bd:aa:81:
43:93:7c:f2:40:d2:f0:e5:62:8f:89:2d:4b:34:7a:30:dd:8a:
d6:ab:19:c9:63:25:c9:14:d0:07:3f:77:11:3c:b9:92:09:8a:
10:ca:8d:14:b6:62:f9:bc:b0:97:5b:57:a7:6f:c3:3a:71:db:
5f:58:03:0b:81:e3:7c:d3:8f:ce:a1:c2:62:a6:90:15:e2:ef:
99:8d:40:36:1e:c9:47:3d:d8:d1:be:2b:1b:8d:2d:04:48:dc:
cc:4c:e6:80:85:17:91:e8:29:75:10:d4:ac:38:72:a9:3c:ba:
82:af:6f:c4:a7:76:68:73:64:96:ab:ff:bc:a8:05:c1:98:3e:
74:7f:e3:73:e6:c2:90:0b:63:44:f9:4d:f0:23:05:ed:5a:48:
60:2d:e1:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFdqi1vKeXcRKgxHwWZdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyY2E0MDIwZWZlZTYxYzMxMDZhYzlmZWNlNzljN2E2OGY3
MWE5Y2IwHhcNMjUwODIzMDQwMDM1WhcNMjUwODI0MDQwMDM1WjAzMTEwLwYDVQQD
EyhmYTM4Y2YxNzRmMTU1NWYyYjM1ZDY5NDMwMDI1ZTEyZjBhMDdiOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk16uqJfvaPZtY0b0S8M8vSJl64k
Rj2DtU5rDPNLAr/ibA/hyiP/XwIlkFHTTnU+PyCfrg11jDNHuXvmg6+xFF2grQvz
XaPB3cgK8ZHWWbWWBbyeCnHfEODPJPQQyvji4P23GoLIjVhSJq9Hl5njVwwE0PAp
7fGqeUsoTei66kR9E903J0W0Yaz31BWgs8OV8diH9wfSiUhOAJQTLkXS3gx8uxEM
6HIwNmk7CA96hVJ9W3uCjp68tFS4jtWcmlpBJ6ZlHmzfMMRMV4+mtBl7gxCpdoch
XWLg4cC2w6lLiuVff20ragqGrZmG6uQZFk3+34Kgk4Xl41IfCkCH38VCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo4zxdPFVXys11pQwAl4S8KB7leMB8GA1UdIwQY
MBaAFPLKQCDv7mHDEGrJ/s55x6aPcanLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEt
Y2ExZmJmN2JiOGM4LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEtY2ExZmJmN2JiOGM4
LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR203WEWF
U6MMJReZd8v7kycsTQxESl90/zUK1duKhwS/MHSpfY/bSnQlFn9qR667x3LENysn
O7cQt5oHBjm9qrXOOkecy1VWOOx9COITqEpfD0ojloL9wA9TspRjX/CqYVaP1cwj
OX7GvaqBQ5N88kDS8OVij4ktSzR6MN2K1qsZyWMlyRTQBz93ETy5kgmKEMqNFLZi
+bywl1tXp2/DOnHbX1gDC4HjfNOPzqHCYqaQFeLvmY1ANh7JRz3Y0b4rG40tBEjc
zEzmgIUXkegpdRDUrDhyqTy6gq9vxKd2aHNklqv/vKgFwZg+dH/jc+bCkAtjRPlN
8CMF7VpIYC3hOA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:23 2025 by rpki-client