Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: xK3SlExxj2xZRt/VUBFH8rDTXjfWTn9H2CMT7Vbza4g=
Subject key identifier: 3C:59:95:6B:07:B4:2A:98:26:B5:08:92:C5:90:72:22:E6:8A:5D:01
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 0198D8BDDDEE4ADF3E960930E6223D7710B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0736
Signing time: Sat 23 Aug 2025 21:02:58 +0000
Manifest this update: Sat 23 Aug 2025 21:02:58 +0000
Manifest next update: Sun 24 Aug 2025 21:02:58 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: dS2aHvL4PP+O0++4gc5OzA7lbEMjttSXdPkzFf+PvK8=)
2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:dd:ee:4a:df:3e:96:09:30:e6:22:3d:77:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Aug 23 21:02:58 2025 GMT
Not After : Aug 24 21:02:58 2025 GMT
Subject: CN=3c59956b07b42a9826b50892c5907222e68a5d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:c4:c8:3d:76:47:b0:77:a6:89:ff:89:25:
4f:09:b5:b6:48:d7:4e:df:fe:ff:04:bf:ca:da:92:
f0:86:8f:75:5c:cf:16:93:b5:b6:ad:7f:69:85:f3:
29:ea:82:9f:dc:ed:c1:80:50:f9:0a:5a:bf:f9:48:
c0:ab:09:7a:e7:d8:c3:0a:a1:31:ad:2f:0e:56:14:
c3:cc:70:55:14:21:04:45:75:d9:90:d1:b1:52:4d:
0c:2c:73:6a:c1:ec:1e:98:db:62:33:11:f0:5b:4c:
db:81:2f:2b:a5:59:f0:e2:64:e3:b6:66:57:8f:67:
9f:eb:d0:71:71:44:42:e7:0a:2a:b6:c6:c5:e6:9b:
dc:4d:63:b8:79:50:61:63:d9:63:33:91:b3:78:e5:
2c:95:65:2e:c5:69:e4:40:bc:8d:aa:95:5f:5c:47:
c2:2b:3a:59:1c:3e:06:b1:3c:38:29:d7:25:0e:9d:
91:f1:6a:ca:2f:b9:8f:2b:b6:c7:2c:2e:b3:f9:9b:
36:67:a1:87:35:bc:e6:2b:d6:6a:d3:6a:99:16:c4:
a8:39:03:bc:cc:a3:0e:d2:e8:e5:0b:8d:6c:5b:fd:
bf:7b:8a:80:a1:56:d8:d1:b2:ea:5d:30:d6:22:d0:
2d:a8:91:fb:ad:ab:95:93:fa:4e:dd:54:6f:a6:94:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:95:6B:07:B4:2A:98:26:B5:08:92:C5:90:72:22:E6:8A:5D:01
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f4:e7:b3:25:de:d3:57:29:3c:aa:a4:d8:5d:7a:e2:82:37:
cb:22:27:17:ad:c2:a3:57:e1:e1:65:02:60:99:87:bc:0a:34:
54:0f:88:0d:64:25:9d:d7:ab:06:5f:69:4a:7b:09:2c:1e:8a:
4b:6b:fe:c6:16:09:03:e1:d0:11:d7:60:db:1e:89:5f:8a:68:
e0:7b:4a:24:09:c6:67:9e:a2:f5:39:2a:f7:73:ef:40:12:a8:
0b:4d:60:78:55:4f:73:03:2c:7e:80:4e:c5:02:ba:0b:28:08:
67:40:ae:db:d4:a2:01:3d:31:87:80:0e:3f:2f:93:ab:4f:93:
30:11:a7:8a:94:05:7d:6d:a9:21:38:02:22:70:6b:8d:81:c4:
8b:4c:9d:2a:39:0b:a8:eb:4b:7c:ff:21:05:9e:1e:9d:53:11:
7e:cb:a4:db:94:a2:1d:14:0b:7b:6f:b8:37:6b:ec:13:f4:72:
9c:cd:a6:d8:e0:f6:73:6b:c0:13:a6:f2:6e:ea:28:ef:75:bb:
80:b9:6e:47:f3:6a:16:39:a1:c6:66:61:9d:38:b0:f5:8b:d8:
b3:b9:8b:d1:a2:6d:8d:4d:9b:e2:ca:ce:78:56:26:d4:a9:ed:
b5:6f:e8:68:ee:24:26:ef:99:02:45:06:23:5d:85:55:15:61:
91:4f:1b:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvd3uSt8+lgkw5iI9dxCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDljYmJlZmRlNjEyZTYxZTBjZDBmZjBiODcxOTYxY2Jm
Nzk3ZTMwHhcNMjUwODIzMjEwMjU4WhcNMjUwODI0MjEwMjU4WjAzMTEwLwYDVQQD
EygzYzU5OTU2YjA3YjQyYTk4MjZiNTA4OTJjNTkwNzIyMmU2OGE1ZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvrEyD12R7B3pon/iSVPCbW2SNdO
3/7/BL/K2pLwho91XM8Wk7W2rX9phfMp6oKf3O3BgFD5Clq/+UjAqwl659jDCqEx
rS8OVhTDzHBVFCEERXXZkNGxUk0MLHNqwewemNtiMxHwW0zbgS8rpVnw4mTjtmZX
j2ef69BxcURC5woqtsbF5pvcTWO4eVBhY9ljM5GzeOUslWUuxWnkQLyNqpVfXEfC
KzpZHD4GsTw4KdclDp2R8WrKL7mPK7bHLC6z+Zs2Z6GHNbzmK9Zq02qZFsSoOQO8
zKMO0ujlC41sW/2/e4qAoVbY0bLqXTDWItAtqJH7rauVk/pO3VRvppRQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxZlWsHtCqYJrUIksWQciLmil0BMB8GA1UdIwQY
MBaAFPDZy7795hLmHgzQ/wuHGWHL95fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQt
ZjkyOTE1YTk2OGJjLzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQtZjkyOTE1YTk2OGJj
LzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvTnsyXe
01cpPKqk2F164oI3yyInF63Co1fh4WUCYJmHvAo0VA+IDWQlnderBl9pSnsJLB6K
S2v+xhYJA+HQEddg2x6JX4po4HtKJAnGZ56i9Tkq93PvQBKoC01geFVPcwMsfoBO
xQK6CygIZ0Cu29SiAT0xh4AOPy+Tq0+TMBGnipQFfW2pITgCInBrjYHEi0ydKjkL
qOtLfP8hBZ4enVMRfsuk25SiHRQLe2+4N2vsE/RynM2m2OD2c2vAE6bybuoo73W7
gLluR/NqFjmhxmZhnTiw9YvYs7mL0aJtjU2b4srOeFYm1KnttW/oaO4kJu+ZAkUG
I12FVRVhkU8b4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:37 2025 by rpki-client