
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: ZYJttMA6RjzHEsyASG9m4+6DrK1AKmnadru6rk02nsU=
Subject key identifier: 5E:37:F2:FD:ED:D5:46:A5:4F:ED:55:6C:06:14:E0:45:0F:C6:CB:C7
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 0198D84F51A8F3CAC2A06CFD1C7FC287279C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0C50
Signing time: Sat 23 Aug 2025 19:02:13 +0000
Manifest this update: Sat 23 Aug 2025 19:02:13 +0000
Manifest next update: Sun 24 Aug 2025 19:02:13 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: uBCe+qebzdZdVWeU0Ze10toXE0eL7Ii1FX7ALs24hR0=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:51:a8:f3:ca:c2:a0:6c:fd:1c:7f:c2:87:27:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Aug 23 19:02:13 2025 GMT
Not After : Aug 24 19:02:13 2025 GMT
Subject: CN=5e37f2fdedd546a54fed556c0614e0450fc6cbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:15:b9:fd:1a:46:3b:f1:96:8c:e6:72:27:
85:07:e6:ab:30:ea:fd:45:7f:52:5c:ae:48:6f:93:
9e:5f:04:7b:0a:b9:7e:af:5f:bf:f7:f4:a5:b5:52:
3c:91:19:f9:43:af:98:cc:a3:ae:6a:5e:bc:53:3b:
fc:a8:f4:90:80:b0:59:f8:15:36:70:ca:0e:4a:af:
ed:d4:89:9b:bc:e0:c1:1c:51:c4:d9:87:a1:59:7e:
29:70:2e:f3:c7:7b:e1:3d:31:bc:bd:c5:99:11:55:
f7:10:a3:f3:74:a5:97:7a:4e:51:8e:2d:8b:85:1e:
59:d1:f8:54:e0:96:64:f1:ff:36:69:c3:8c:b5:04:
04:dd:b5:a8:30:e6:d0:34:0d:71:e7:50:fe:63:05:
c6:a6:13:bd:9d:5e:6b:7c:91:e7:dd:d1:79:f7:6b:
24:7a:89:59:41:52:9c:14:15:d8:57:74:d4:47:f6:
5e:a7:aa:20:29:25:7d:83:70:f4:0c:b1:7e:9a:ae:
55:7a:6b:62:9c:b2:bf:f4:cc:0e:a1:aa:ac:08:9d:
5f:0a:12:9c:64:c1:a2:45:a1:b2:96:01:38:c6:f5:
9f:c0:27:75:30:d9:54:6e:7d:f6:39:33:cc:a8:8c:
c6:ec:4c:f5:5b:ed:6b:f7:91:96:f5:5d:aa:42:8a:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:37:F2:FD:ED:D5:46:A5:4F:ED:55:6C:06:14:E0:45:0F:C6:CB:C7
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:24:00:f6:43:bf:b0:98:53:b2:e2:28:13:36:28:e6:3a:af:
c5:6c:ff:9b:fb:2a:ce:97:ef:70:a8:f7:a2:44:10:2d:37:ba:
dc:d0:94:91:c5:a5:8e:30:80:95:c0:67:11:ed:83:97:43:c6:
61:56:da:70:8a:e2:a8:2c:b7:21:74:fb:8a:d5:fe:68:bb:3d:
f8:35:4f:60:6e:8f:b8:5e:04:62:13:1a:23:c9:c0:f3:69:78:
8d:b8:c4:5a:a2:ff:41:3c:f4:e6:38:93:09:7f:a2:46:56:fe:
c3:50:54:e1:8a:d5:35:6a:6b:03:8c:43:59:6f:fc:15:19:fd:
b9:e7:ee:d6:df:6f:94:60:78:c7:63:37:b2:49:80:7d:67:d4:
30:f2:dc:1e:34:3f:30:a6:88:9b:93:97:0e:ad:dc:10:18:7f:
c5:a3:21:c9:02:bd:87:b4:0f:70:84:ee:f8:55:7a:b1:88:a0:
f4:09:6e:ab:af:30:5c:4c:5e:fc:3c:9f:9b:48:36:3f:02:b9:
d6:4f:0c:e5:32:4a:90:58:3d:4f:23:33:eb:cd:53:9d:69:83:
15:e6:f0:51:69:68:bf:4f:ad:84:c7:52:f8:a6:55:82:84:c5:
d3:d3:8e:2d:b9:84:7d:35:7b:73:30:19:b7:34:3e:5e:97:5f:
f7:86:92:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT1Go88rCoGz9HH/ChyecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjRkMGY0NzI5NzY4MDUzNWViMjc5OTE4OWRiODg4YjQw
NjY3ODIwHhcNMjUwODIzMTkwMjEzWhcNMjUwODI0MTkwMjEzWjAzMTEwLwYDVQQD
Eyg1ZTM3ZjJmZGVkZDU0NmE1NGZlZDU1NmMwNjE0ZTA0NTBmYzZjYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PIVuf0aRjvxlozmcieFB+arMOr9
RX9SXK5Ib5OeXwR7Crl+r1+/9/SltVI8kRn5Q6+YzKOual68Uzv8qPSQgLBZ+BU2
cMoOSq/t1ImbvODBHFHE2YehWX4pcC7zx3vhPTG8vcWZEVX3EKPzdKWXek5Rji2L
hR5Z0fhU4JZk8f82acOMtQQE3bWoMObQNA1x51D+YwXGphO9nV5rfJHn3dF592sk
eolZQVKcFBXYV3TUR/Zep6ogKSV9g3D0DLF+mq5VemtinLK/9MwOoaqsCJ1fChKc
ZMGiRaGylgE4xvWfwCd1MNlUbn32OTPMqIzG7Ez1W+1r95GW9V2qQoojWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF438v3t1UalT+1VbAYU4EUPxsvHMB8GA1UdIwQY
MBaAFPMk0PRyl2gFNesnmRiduIi0BmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjkt
MDI2NWU1Y2Q2OTY2LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjktMDI2NWU1Y2Q2OTY2
LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiQA9kO/
sJhTsuIoEzYo5jqvxWz/m/sqzpfvcKj3okQQLTe63NCUkcWljjCAlcBnEe2Dl0PG
YVbacIriqCy3IXT7itX+aLs9+DVPYG6PuF4EYhMaI8nA82l4jbjEWqL/QTz05jiT
CX+iRlb+w1BU4YrVNWprA4xDWW/8FRn9uefu1t9vlGB4x2M3skmAfWfUMPLcHjQ/
MKaIm5OXDq3cEBh/xaMhyQK9h7QPcITu+FV6sYig9Aluq68wXExe/Dyfm0g2PwK5
1k8M5TJKkFg9TyMz681TnWmDFebwUWlov0+thMdS+KZVgoTF09OOLbmEfTV7czAZ
tzQ+Xpdf94aSVQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:28 2025 by rpki-client