Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: Hm5yuPHd0Sm+MWIjyMg7mjFxqrfJYu6C9oDhWIxAUaE=
Subject key identifier: EA:D7:90:AB:D7:02:A7:30:DB:49:12:DA:DF:6B:C1:C2:51:BD:FC:B6
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 0197B7456E3EA0B18FB11AE61FF2160ADC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 07C1
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: oJkcs6WmPNG73FqseC/j+8JuW4wWBjWySfGj2PDGqEg=)
2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6e:3e:a0:b1:8f:b1:1a:e6:1f:f2:16:0a:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=ead790abd702a730db4912dadf6bc1c251bdfcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:9f:72:ce:7c:d5:29:3a:bc:07:db:33:e5:
d4:74:18:75:39:46:63:44:74:03:ce:04:72:2e:d3:
47:4d:cd:25:d4:b7:fd:b3:42:fe:6e:21:74:4d:f2:
da:58:d8:64:d6:b2:89:9c:05:85:15:ad:60:89:11:
03:4c:92:c1:28:33:7e:b7:b5:da:88:b9:ac:c7:75:
1d:cc:d7:07:8f:97:35:a1:b9:1b:e3:0b:b9:3f:48:
39:b6:1e:48:89:ae:ee:b4:5c:02:67:85:a6:f1:a5:
ef:fd:f6:71:0d:69:18:52:19:a5:8e:6b:1b:d4:f0:
85:05:6a:48:67:4c:df:ae:b6:64:1c:c7:0c:89:45:
1f:12:76:a8:f7:f4:be:e2:41:ef:fa:14:a1:89:81:
55:8a:f1:d5:a6:fd:b2:c5:3d:5a:b8:f7:21:dc:30:
04:f1:65:36:63:24:34:bb:8a:d3:a8:6d:a3:c2:37:
e4:59:05:bc:b1:a3:51:f8:b7:ef:33:63:22:27:05:
f8:08:a7:b2:d8:dd:75:d0:7a:13:49:50:ec:34:b3:
37:a2:8f:33:26:ca:d9:97:03:86:f5:02:4c:c6:8b:
58:0a:c9:16:1f:4b:f7:94:ac:de:48:73:d6:49:23:
21:39:8b:8a:a7:64:2c:65:a4:46:10:46:8c:db:f3:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D7:90:AB:D7:02:A7:30:DB:49:12:DA:DF:6B:C1:C2:51:BD:FC:B6
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:53:9a:d5:2c:71:0a:c8:14:33:80:08:62:b9:b3:f0:3b:0d:
25:bc:fe:e5:02:d1:44:e9:56:12:92:87:5f:89:01:9c:22:40:
39:9f:4b:9b:68:a5:ab:22:4d:7f:f8:d0:32:30:4a:55:92:e6:
44:d1:e4:db:2f:79:95:8f:fe:de:51:b1:87:55:31:5f:db:60:
e2:30:46:e9:89:0d:c7:c0:28:0c:7f:5c:ac:32:4c:40:6d:9d:
80:64:de:8b:8d:ab:c4:0e:98:1c:f7:15:b2:6d:66:29:91:86:
b0:44:db:de:ff:e4:0a:a5:3c:72:a7:31:77:48:b2:17:73:c0:
7f:4a:69:9e:b9:64:40:0d:79:6e:f7:3a:f7:46:38:9e:97:bb:
d4:55:6b:17:5d:99:3c:c5:78:5c:df:8c:19:2b:81:38:25:5e:
3d:83:7e:34:05:61:a3:0e:65:44:d0:45:ee:8a:52:0a:7f:d5:
72:9c:b7:0d:5f:23:8f:95:b3:af:5f:c1:14:69:5c:73:89:64:
07:47:ea:20:64:12:20:37:90:61:26:ea:93:5c:51:23:ac:42:
49:82:03:d4:28:16:fb:ca:dc:bd:87:3d:85:80:3c:cc:79:eb:
c9:e1:87:5e:75:ec:c9:02:1d:56:b7:f5:69:2a:be:43:3b:86:
7e:f6:0e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RW4+oLGPsRrmH/IWCtwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGEwOGViOGZhN2JlZTZhMzE4M2UzMmRlNTFhMmYzY2Nk
NGFlNDcwHhcNMjUwNjI4MTYwMTEwWhcNMjUwNjI5MTYwMTEwWjAzMTEwLwYDVQQD
EyhlYWQ3OTBhYmQ3MDJhNzMwZGI0OTEyZGFkZjZiYzFjMjUxYmRmY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIOfcs581Sk6vAfbM+XUdBh1OUZj
RHQDzgRyLtNHTc0l1Lf9s0L+biF0TfLaWNhk1rKJnAWFFa1giREDTJLBKDN+t7Xa
iLmsx3UdzNcHj5c1obkb4wu5P0g5th5Iia7utFwCZ4Wm8aXv/fZxDWkYUhmljmsb
1PCFBWpIZ0zfrrZkHMcMiUUfEnao9/S+4kHv+hShiYFVivHVpv2yxT1auPch3DAE
8WU2YyQ0u4rTqG2jwjfkWQW8saNR+LfvM2MiJwX4CKey2N110HoTSVDsNLM3oo8z
JsrZlwOG9QJMxotYCskWH0v3lKzeSHPWSSMhOYuKp2QsZaRGEEaM2/OARwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrXkKvXAqcw20kS2t9rwcJRvfy2MB8GA1UdIwQY
MBaAFPCKCOuPp77moxg+Mt5RovPM1K5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hYjExYzktMjVkNS00M2ZhLTliZDMt
YjFlYzI4YzY3Yzc0LzEvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hYjExYzktMjVkNS00M2ZhLTliZDMtYjFlYzI4YzY3Yzc0
LzEvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1Oa1Sxx
CsgUM4AIYrmz8DsNJbz+5QLRROlWEpKHX4kBnCJAOZ9Lm2ilqyJNf/jQMjBKVZLm
RNHk2y95lY/+3lGxh1UxX9tg4jBG6YkNx8AoDH9crDJMQG2dgGTei42rxA6YHPcV
sm1mKZGGsETb3v/kCqU8cqcxd0iyF3PAf0ppnrlkQA15bvc690Y4npe71FVrF12Z
PMV4XN+MGSuBOCVePYN+NAVhow5lRNBF7opSCn/Vcpy3DV8jj5Wzr1/BFGlcc4lk
B0fqIGQSIDeQYSbqk1xRI6xCSYID1CgW+8rcvYc9hYA8zHnryeGHXnXsyQIdVrf1
aSq+QzuGfvYO4w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:55 2025 by rpki-client