Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: DYXF/OFIcQr+G1dzzjfp14u8H2/+VTD/loappXnXjCc=
Subject key identifier: EA:8C:C3:33:9F:48:04:48:0F:81:F6:AD:E3:46:58:8F:97:5C:09:2B
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 0197D5191EEEEA756CD29EFB38A853E846AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 0FD5
Signing time: Fri 04 Jul 2025 11:01:22 +0000
Manifest this update: Fri 04 Jul 2025 11:01:22 +0000
Manifest next update: Sat 05 Jul 2025 11:01:22 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: 8rGzml93vHC9k9t1R32LJ352NIyKR0WlYwN9V4q6/pM=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:19:1e:ee:ea:75:6c:d2:9e:fb:38:a8:53:e8:46:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Jul 4 11:01:22 2025 GMT
Not After : Jul 5 11:01:22 2025 GMT
Subject: CN=ea8cc3339f4804480f81f6ade346588f975c092b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:40:c1:54:59:59:d6:a7:4a:9c:d2:e6:00:
c3:67:e8:34:31:e8:89:c4:71:e0:d3:41:f4:d7:b9:
e0:8e:cd:5a:ae:c7:fe:93:b9:da:60:dd:6d:72:8e:
d7:bf:f0:98:d8:1c:7f:9e:c8:6f:b5:c4:40:f0:1a:
98:71:9d:ca:91:c6:16:66:ad:ea:be:e2:86:63:34:
12:fe:9b:b1:ca:0f:2d:b7:0c:0f:03:59:50:67:a5:
e4:18:57:54:49:fb:b7:40:45:a0:10:fe:21:e8:90:
a1:ec:3e:cb:13:f8:4d:4e:17:74:9e:1a:e5:a9:c6:
e7:c3:b9:e9:9a:be:c1:43:82:85:33:64:1e:5f:71:
98:4b:b0:9b:47:4a:6f:71:30:22:b4:80:5e:db:c7:
a5:bc:7a:0d:a2:6b:e6:70:83:f1:fc:a6:4a:82:07:
a0:25:c4:86:61:41:e5:cc:c2:50:37:a8:2a:fb:e7:
f4:c6:8d:4e:88:10:9f:62:d7:37:a9:cc:7f:bb:5d:
5f:5b:95:87:be:29:31:33:1c:48:ae:99:fb:1b:81:
19:01:13:38:b2:19:4a:63:bc:9a:07:eb:36:44:5a:
f7:96:51:11:83:9a:7c:2e:4d:d0:ab:af:9b:35:4a:
41:85:d0:9b:96:a6:02:0e:4d:1b:f5:80:5e:06:0a:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:C3:33:9F:48:04:48:0F:81:F6:AD:E3:46:58:8F:97:5C:09:2B
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:62:1a:5f:73:84:e9:7d:39:c7:86:f6:ef:5d:5c:88:9b:73:
2a:44:fe:4f:ab:50:47:79:dc:87:ba:9a:0a:c0:e6:42:b3:aa:
ee:bb:a1:f3:dd:96:12:64:e2:ef:c1:90:b6:7b:27:24:f4:05:
f3:ed:0d:83:ab:fc:a8:6c:77:2f:d8:b4:dc:9a:c2:5e:3a:bc:
67:88:00:e0:68:de:01:f3:b8:9e:80:ca:7a:d4:a9:0b:22:07:
9c:0a:6d:54:4a:3d:93:66:a8:37:72:fe:b4:d4:cd:5a:eb:bd:
7a:3b:16:67:90:2b:3b:0c:40:07:28:c1:ab:28:bc:95:ba:42:
1e:92:8f:fd:bd:10:44:d2:d1:8c:e0:2b:5d:d4:4c:26:01:25:
ec:f9:21:c5:7e:38:04:8b:32:ec:3b:0b:06:b1:97:ea:3b:a5:
b7:46:55:3b:e4:f7:9b:dd:9e:46:a3:ed:f8:30:36:e5:cb:78:
36:fe:77:2a:0c:9a:66:c6:b6:19:3a:1d:61:03:f4:9c:28:a1:
f9:1e:6e:98:9e:e3:16:b0:28:58:ff:03:79:3b:5c:12:37:c4:
5d:4e:fa:a2:dc:47:c6:8c:ce:b5:98:3e:c7:c0:76:c4:60:13:
a3:57:18:84:09:a4:3d:05:0a:7f:d0:f1:91:9a:d6:c7:4b:14:
78:02:35:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfVGR7u6nVs0p77OKhT6EauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2
ZjYwOWQwHhcNMjUwNzA0MTEwMTIyWhcNMjUwNzA1MTEwMTIyWjAzMTEwLwYDVQQD
EyhlYThjYzMzMzlmNDgwNDQ4MGY4MWY2YWRlMzQ2NTg4Zjk3NWMwOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32xAwVRZWdanSpzS5gDDZ+g0MeiJ
xHHg00H017ngjs1arsf+k7naYN1tco7Xv/CY2Bx/nshvtcRA8BqYcZ3KkcYWZq3q
vuKGYzQS/puxyg8ttwwPA1lQZ6XkGFdUSfu3QEWgEP4h6JCh7D7LE/hNThd0nhrl
qcbnw7npmr7BQ4KFM2QeX3GYS7CbR0pvcTAitIBe28elvHoNomvmcIPx/KZKggeg
JcSGYUHlzMJQN6gq++f0xo1OiBCfYtc3qcx/u11fW5WHvikxMxxIrpn7G4EZARM4
shlKY7yaB+s2RFr3llERg5p8Lk3Qq6+bNUpBhdCblqYCDk0b9YBeBgonlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqMwzOfSARID4H2reNGWI+XXAkrMB8GA1UdIwQY
MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt
ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh
LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWIaX3OE
6X05x4b2711ciJtzKkT+T6tQR3nch7qaCsDmQrOq7ruh892WEmTi78GQtnsnJPQF
8+0Ng6v8qGx3L9i03JrCXjq8Z4gA4GjeAfO4noDKetSpCyIHnAptVEo9k2aoN3L+
tNTNWuu9ejsWZ5ArOwxAByjBqyi8lbpCHpKP/b0QRNLRjOArXdRMJgEl7PkhxX44
BIsy7DsLBrGX6jult0ZVO+T3m92eRqPt+DA25ct4Nv53KgyaZsa2GTodYQP0nCih
+R5umJ7jFrAoWP8DeTtcEjfEXU76otxHxozOtZg+x8B2xGATo1cYhAmkPQUKf9Dx
kZrWx0sUeAI1oQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:19:50 2025 by rpki-client