Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
File: n8UDUANWwjcveVsQ0PfVid9p_Is.mft (raw, json)
Hash identifier: bUeEOT82mDtqZQUFzbN1UifL0Fa2Eucj1MaTTYY8LQg=
Subject key identifier: EB:23:F1:CE:42:5F:22:4B:72:EA:4E:20:27:73:0A:A2:A2:46:70:23
Authority key identifier: 9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
Certificate issuer: /CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Certificate serial: 0198D472552BFED928DBDE1C6727FCDE5C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:01:59 +0000
Manifest this update: Sat 23 Aug 2025 01:01:59 +0000
Manifest next update: Sun 24 Aug 2025 01:01:59 +0000
Files and hashes: 1: n8UDUANWwjcveVsQ0PfVid9p_Is.crl (hash: SL3fYDQFSwvY5cisgqRNFjc+eJWCW6W1YwEcWjTUKEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:55:2b:fe:d9:28:db:de:1c:67:27:fc:de:5c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Validity
Not Before: Aug 23 01:01:59 2025 GMT
Not After : Aug 24 01:01:59 2025 GMT
Subject: CN=eb23f1ce425f224b72ea4e2027730aa2a2467023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:c2:b1:a4:d0:0f:22:4c:70:e7:42:ed:68:
10:99:71:cb:9b:a8:bb:5f:b7:47:53:4c:27:22:85:
af:24:e8:b0:ba:66:3d:18:33:bc:63:e9:28:13:30:
f6:a4:99:13:16:94:59:67:0b:d2:95:61:81:67:e7:
19:1a:5c:ac:26:ed:07:e0:77:d8:b2:3a:ec:cb:26:
d2:e5:ac:55:6a:0e:ca:41:9a:34:22:82:98:66:df:
56:e1:63:7c:d4:71:1c:79:8a:ea:85:ce:19:de:3a:
b9:69:b4:86:81:31:a9:e1:56:42:26:d3:8e:f3:fb:
a6:0c:22:70:1c:d7:eb:fe:91:14:e2:3f:e8:1a:d2:
40:74:57:4e:25:c9:ad:22:02:a6:20:76:ef:02:64:
28:16:f2:d4:a8:2d:33:4a:80:df:8d:89:1a:81:7c:
e0:8b:53:5b:2f:80:80:ad:72:52:8e:3b:75:b6:21:
f4:54:dc:16:8c:8c:59:3f:15:86:8c:7f:40:7f:67:
ed:4f:36:25:c3:8c:b3:31:d8:55:ee:fd:82:c7:1b:
86:90:70:aa:29:cb:a4:a3:8d:40:d5:c3:0a:99:65:
55:46:58:f2:19:34:0f:13:4c:ea:bd:e5:ae:94:e2:
59:52:73:a1:f7:3f:99:cf:be:a5:80:3d:0c:a3:ab:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:F1:CE:42:5F:22:4B:72:EA:4E:20:27:73:0A:A2:A2:46:70:23
X509v3 Authority Key Identifier:
keyid:9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2a:99:74:0d:83:23:45:61:76:46:a3:aa:5e:18:55:d9:e1:
30:37:a7:01:1e:3a:72:e2:8e:86:e8:ee:b8:fd:85:b6:d4:67:
62:7a:c1:69:e1:db:d1:b4:90:53:13:60:97:d6:55:40:ab:43:
45:29:e6:0e:52:52:7f:b1:ea:ed:ad:3f:ba:1d:2e:21:75:14:
92:fc:d2:9d:d8:a8:d6:63:f5:e3:74:53:9f:7a:11:40:25:5a:
88:73:ba:6a:00:fe:97:13:d6:ad:ec:3d:5a:76:b9:a7:28:f8:
c0:0d:bf:9d:c1:fa:ba:8d:c3:a1:2a:bf:c1:f8:06:e5:7c:9e:
c5:c8:b0:56:42:1c:bd:f8:a5:2f:92:c1:32:fd:f2:7e:91:74:
1d:5b:8b:ae:79:b9:7c:26:31:95:22:27:9b:b0:40:6c:8e:d3:
c3:3f:73:0a:ce:52:69:6c:0f:dd:9a:d6:73:2b:1c:d8:a9:6f:
e9:09:b8:ac:68:57:f1:94:59:3d:b4:ab:83:94:b0:a7:95:f5:
1b:e7:c1:3c:38:1e:6c:e4:c5:93:94:d7:b1:87:ad:bd:9a:36:
46:cf:19:22:cd:a8:b5:4d:e2:d8:fd:62:61:69:d2:a0:73:32:
27:0b:80:3b:b2:ea:76:c4:7f:77:56:1e:08:63:76:24:da:bf:
77:bc:e4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUclUr/tko294cZyf83lwTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYzUwMzUwMDM1NmMyMzcyZjc5NWIxMGQwZjdkNTg5ZGY2
OWZjOGIwHhcNMjUwODIzMDEwMTU5WhcNMjUwODI0MDEwMTU5WjAzMTEwLwYDVQQD
EyhlYjIzZjFjZTQyNWYyMjRiNzJlYTRlMjAyNzczMGFhMmEyNDY3MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF/CsaTQDyJMcOdC7WgQmXHLm6i7
X7dHU0wnIoWvJOiwumY9GDO8Y+koEzD2pJkTFpRZZwvSlWGBZ+cZGlysJu0H4HfY
sjrsyybS5axVag7KQZo0IoKYZt9W4WN81HEceYrqhc4Z3jq5abSGgTGp4VZCJtOO
8/umDCJwHNfr/pEU4j/oGtJAdFdOJcmtIgKmIHbvAmQoFvLUqC0zSoDfjYkagXzg
i1NbL4CArXJSjjt1tiH0VNwWjIxZPxWGjH9Af2ftTzYlw4yzMdhV7v2CxxuGkHCq
Kcuko41A1cMKmWVVRljyGTQPE0zqveWulOJZUnOh9z+Zz76lgD0Mo6uU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsj8c5CXyJLcupOICdzCqKiRnAjMB8GA1UdIwQY
MBaAFJ/FA1ADVsI3L3lbEND31YnfafyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83OTFjMzktZDgzOC00OWUzLTg5ZWEt
ODQwODE2NmJiNzYxLzEvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83OTFjMzktZDgzOC00OWUzLTg5ZWEtODQwODE2NmJiNzYx
LzEvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyqZdA2D
I0Vhdkajql4YVdnhMDenAR46cuKOhujuuP2FttRnYnrBaeHb0bSQUxNgl9ZVQKtD
RSnmDlJSf7Hq7a0/uh0uIXUUkvzSndio1mP143RTn3oRQCVaiHO6agD+lxPWrew9
Wna5pyj4wA2/ncH6uo3DoSq/wfgG5XyexciwVkIcvfilL5LBMv3yfpF0HVuLrnm5
fCYxlSInm7BAbI7Twz9zCs5SaWwP3ZrWcysc2Klv6Qm4rGhX8ZRZPbSrg5Swp5X1
G+fBPDgebOTFk5TXsYetvZo2Rs8ZIs2otU3i2P1iYWnSoHMyJwuAO7LqdsR/d1Ye
CGN2JNq/d7zk4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:50 2025 by rpki-client