Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: 3rpquBXs8CTQyku6xth5iPqawpfY3CO2NyU3fMoBWv0=
Subject key identifier: 59:81:08:5A:66:E2:C7:81:D6:66:DF:0B:B5:A3:22:99:64:0B:16:93
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 0198D515A180AB73E753EB9D7469CD78DC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0CB6
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: zSzJvCpe9uFaNfJ11WFOS5XL5yQQ3AwwOCeLF/TmRwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a1:80:ab:73:e7:53:eb:9d:74:69:cd:78:dc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=5981085a66e2c781d666df0bb5a32299640b1693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:4d:46:a5:1a:c8:c9:d8:a9:cf:86:51:37:
04:ee:a6:04:23:5e:30:d5:5e:63:e3:db:b1:21:68:
c6:98:c0:09:4f:60:3c:fc:28:75:56:cc:05:5a:46:
11:76:ea:b1:58:5c:10:38:15:4e:ef:aa:8e:fa:fd:
4d:6c:33:95:e9:19:86:cf:0c:52:07:ca:13:6b:24:
7c:cb:a0:3a:98:56:b9:23:77:c1:6d:10:70:73:02:
bb:5b:81:b6:cc:6a:03:02:93:28:d2:ec:fe:7a:1f:
83:7e:60:55:46:d2:0c:f2:c0:04:97:bb:80:44:27:
80:a8:ea:6b:05:f5:14:1f:e3:d0:8c:8b:f6:73:3d:
53:11:33:dd:a2:01:bb:6e:f7:84:f0:8e:2d:78:28:
d8:16:5c:8d:cf:b5:7b:9d:da:73:0b:a7:a3:31:54:
51:dd:ae:ed:c4:f8:2e:db:c3:15:c4:d1:a9:a5:b8:
25:ae:d1:d0:4c:9a:fc:6b:5c:7c:7c:27:90:0f:67:
79:0e:40:ab:d3:95:b2:08:a9:83:fc:65:79:b9:3b:
e7:e6:e0:94:12:06:84:0d:19:a6:36:52:00:3d:ee:
2f:dd:a3:40:6f:01:e9:2d:f2:79:d1:f6:31:76:c8:
a3:aa:06:8b:55:b5:f0:53:1c:35:0d:51:69:64:35:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:81:08:5A:66:E2:C7:81:D6:66:DF:0B:B5:A3:22:99:64:0B:16:93
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9a:fd:8d:ca:14:c8:d5:5a:c8:87:e3:d4:29:c9:25:40:8b:
0f:d2:f3:77:a6:3d:91:78:71:27:1b:3a:7f:ac:a4:9b:c8:f6:
89:68:52:f0:c1:70:54:2d:39:93:54:05:95:b2:bf:7b:9e:69:
bd:d5:81:30:f1:7d:8a:08:af:91:59:f9:98:df:73:5a:84:84:
73:ba:a3:8d:56:4d:14:16:71:bc:3e:5b:05:b8:ac:e7:f9:ff:
ec:f9:71:e9:dc:68:7c:6d:a3:79:7e:d9:02:81:e8:5e:ea:c4:
04:70:f5:4d:fa:ed:98:ef:7c:69:30:0c:ce:cc:7e:3b:9c:d7:
bd:a8:30:d0:c1:06:fa:14:30:e2:8a:65:ac:3f:95:73:c5:67:
73:10:31:97:61:55:96:a6:5b:f1:8f:8e:e0:9d:72:a6:e0:49:
59:b4:88:f8:d7:53:41:ad:63:17:de:43:e7:2e:61:62:c1:44:
4e:4b:d1:79:cf:2a:64:7b:0e:35:95:ed:85:d8:3f:c9:4e:ed:
b5:5a:ed:4d:bf:25:64:75:05:2d:f7:fe:a3:8c:4f:92:04:61:
db:04:1c:28:1c:99:76:98:2b:43:9d:40:74:dd:38:99:22:6d:
58:cd:e7:c5:3e:fc:3a:49:06:3c:12:fb:fd:b4:1d:af:2f:8d:
46:32:73:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFaGAq3PnU+uddGnNeNw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTc2MGNmMTFlZjJiODYyMTg3YjA1ZTVkNzUxYzczNGM2
MzRiNDUwHhcNMjUwODIzMDQwMDIxWhcNMjUwODI0MDQwMDIxWjAzMTEwLwYDVQQD
Eyg1OTgxMDg1YTY2ZTJjNzgxZDY2NmRmMGJiNWEzMjI5OTY0MGIxNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8JNRqUayMnYqc+GUTcE7qYEI14w
1V5j49uxIWjGmMAJT2A8/Ch1VswFWkYRduqxWFwQOBVO76qO+v1NbDOV6RmGzwxS
B8oTayR8y6A6mFa5I3fBbRBwcwK7W4G2zGoDApMo0uz+eh+DfmBVRtIM8sAEl7uA
RCeAqOprBfUUH+PQjIv2cz1TETPdogG7bveE8I4teCjYFlyNz7V7ndpzC6ejMVRR
3a7txPgu28MVxNGppbglrtHQTJr8a1x8fCeQD2d5DkCr05WyCKmD/GV5uTvn5uCU
EgaEDRmmNlIAPe4v3aNAbwHpLfJ50fYxdsijqgaLVbXwUxw1DVFpZDWcWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmBCFpm4seB1mbfC7WjIplkCxaTMB8GA1UdIwQY
MBaAFPCXYM8R7yuGIYewXl11HHNMY0tFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2It
MzYwMjI0NDZmMDIzLzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2ItMzYwMjI0NDZmMDIz
LzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5r9jcoU
yNVayIfj1CnJJUCLD9Lzd6Y9kXhxJxs6f6ykm8j2iWhS8MFwVC05k1QFlbK/e55p
vdWBMPF9igivkVn5mN9zWoSEc7qjjVZNFBZxvD5bBbis5/n/7Plx6dxofG2jeX7Z
AoHoXurEBHD1TfrtmO98aTAMzsx+O5zXvagw0MEG+hQw4oplrD+Vc8VncxAxl2FV
lqZb8Y+O4J1ypuBJWbSI+NdTQa1jF95D5y5hYsFETkvRec8qZHsONZXthdg/yU7t
tVrtTb8lZHUFLff+o4xPkgRh2wQcKByZdpgrQ51AdN04mSJtWM3nxT78OkkGPBL7
/bQdry+NRjJzig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:01:16 2025 by rpki-client