Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier: U5OQlJjOHPfzIn9BFZQxd8QSHxYPRliK6YVeBkGbyW4=
Subject key identifier: C3:64:48:DF:AE:7D:1B:BB:E1:B4:5F:81:13:60:CE:C4:C8:C0:17:B7
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial: 0198D65FC7937A80506331DB582FB3F3ACC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number: 0BDE
Signing time: Sat 23 Aug 2025 10:00:57 +0000
Manifest this update: Sat 23 Aug 2025 10:00:57 +0000
Manifest next update: Sun 24 Aug 2025 10:00:57 +0000
Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: Ktg61xq3XRBqgDofIVWW67p8HxgAEQQEXW4ox53DEyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c7:93:7a:80:50:63:31:db:58:2f:b3:f3:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Validity
Not Before: Aug 23 10:00:57 2025 GMT
Not After : Aug 24 10:00:57 2025 GMT
Subject: CN=c36448dfae7d1bbbe1b45f811360cec4c8c017b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:91:9e:a2:17:d4:78:48:99:05:9c:cc:15:6f:
be:9e:ad:b1:df:6f:c1:ff:06:f2:e0:4c:b2:cd:8c:
22:b0:11:d7:f1:87:65:60:76:73:65:56:5d:32:91:
88:f6:67:85:0b:51:80:b6:18:10:bd:de:25:00:87:
eb:4f:11:29:7a:32:ed:fb:5a:7c:0d:aa:6b:37:5e:
98:80:e2:87:a8:5e:13:72:c4:6a:ba:ef:01:62:34:
d2:3b:9b:6b:b4:2a:14:ff:32:5e:26:7a:97:cd:48:
85:1d:c3:7f:24:be:e8:08:8c:50:f9:ec:43:98:07:
20:6e:63:e9:19:7a:85:7b:92:1c:b0:bc:48:8b:3c:
55:ed:25:f0:70:9b:70:a3:9e:e4:8f:dc:78:9f:29:
c2:ff:d2:09:00:b8:1c:f4:34:ee:d9:cb:e5:f8:70:
4b:ea:95:ea:00:fd:d6:47:f9:3c:8a:8e:9c:e3:6a:
10:09:bc:5e:d6:77:3f:88:66:91:b4:82:49:30:99:
6a:13:7f:62:5c:1d:50:48:77:e5:e9:bb:42:11:9c:
63:ca:47:7d:9e:f6:82:5b:78:9e:c2:80:b5:ef:4b:
d5:00:82:8b:a4:a2:b8:c9:29:c2:d8:1a:36:01:9d:
dc:98:80:35:ef:60:04:9e:6c:64:71:69:ab:c1:e0:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:64:48:DF:AE:7D:1B:BB:E1:B4:5F:81:13:60:CE:C4:C8:C0:17:B7
X509v3 Authority Key Identifier:
keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9c:61:96:9b:19:97:19:c6:04:8d:5a:74:42:33:07:3c:68:
85:0e:1a:a9:af:29:5b:7d:eb:4c:84:16:8f:bf:b3:e9:cc:9d:
a3:8f:3a:01:37:72:81:d9:f1:2d:6c:e0:f8:7c:77:21:40:88:
fd:e1:77:a8:fe:10:13:ca:6d:ae:e8:04:83:12:e5:53:8d:9e:
b2:24:d5:32:ff:24:33:83:2a:09:80:75:b0:12:f2:77:6c:f8:
a9:da:f0:95:08:a7:fe:47:92:0d:b1:d4:71:9f:fd:fc:5a:5e:
ca:a4:c3:d5:d1:32:7a:31:38:a9:a3:ba:43:e6:0c:55:6c:9d:
10:78:f1:42:30:0d:0f:06:54:1c:12:1e:75:f8:68:92:bb:6d:
11:2f:a9:e6:87:36:b4:69:1a:27:e1:3c:e9:ec:7a:20:0f:9f:
17:a3:bb:68:14:d3:cf:13:ba:53:8c:b5:1a:88:2b:b6:c4:53:
04:bb:f3:66:16:5d:89:9e:df:8f:69:f8:da:fe:53:a9:40:45:
a3:81:d1:cb:78:c9:10:6a:f4:4f:19:f7:d6:f1:3e:85:7d:9c:
8b:7c:db:70:91:9b:4c:17:b8:a7:ec:58:2d:4b:4d:13:c9:19:
f3:d3:63:4b:d2:2c:65:1e:ce:c2:8b:cf:a5:4e:e7:31:dd:93:
72:17:3b:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8eTeoBQYzHbWC+z86zCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmIxMmM5MjliMmYwNWI5OWQ0OTdmYWYxNTUxZGJjNWQ4
MDdlNTEwHhcNMjUwODIzMTAwMDU3WhcNMjUwODI0MTAwMDU3WjAzMTEwLwYDVQQD
EyhjMzY0NDhkZmFlN2QxYmJiZTFiNDVmODExMzYwY2VjNGM4YzAxN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95GeohfUeEiZBZzMFW++nq2x32/B
/wby4EyyzYwisBHX8YdlYHZzZVZdMpGI9meFC1GAthgQvd4lAIfrTxEpejLt+1p8
DaprN16YgOKHqF4TcsRquu8BYjTSO5trtCoU/zJeJnqXzUiFHcN/JL7oCIxQ+exD
mAcgbmPpGXqFe5IcsLxIizxV7SXwcJtwo57kj9x4nynC/9IJALgc9DTu2cvl+HBL
6pXqAP3WR/k8io6c42oQCbxe1nc/iGaRtIJJMJlqE39iXB1QSHfl6btCEZxjykd9
nvaCW3iewoC170vVAIKLpKK4ySnC2Bo2AZ3cmIA172AEnmxkcWmrweCTywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNkSN+ufRu74bRfgRNgzsTIwBe3MB8GA1UdIwQY
MBaAFPD7EskpsvBbmdSX+vFVHbxdgH5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBzU3lTbXk4RnVaMUpmNjhWVWR2RjJBZmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hM2Q1ZjAtZWE2Yi00YTkwLWE2NDct
MmVmZjliOTgzOWRiLzEvOFBzU3lTbXk4RnVaMUpmNjhWVWR2RjJBZmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hM2Q1ZjAtZWE2Yi00YTkwLWE2NDctMmVmZjliOTgzOWRi
LzEvOFBzU3lTbXk4RnVaMUpmNjhWVWR2RjJBZmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupxhlpsZ
lxnGBI1adEIzBzxohQ4aqa8pW33rTIQWj7+z6cydo486ATdygdnxLWzg+Hx3IUCI
/eF3qP4QE8ptrugEgxLlU42esiTVMv8kM4MqCYB1sBLyd2z4qdrwlQin/keSDbHU
cZ/9/FpeyqTD1dEyejE4qaO6Q+YMVWydEHjxQjANDwZUHBIedfhokrttES+p5oc2
tGkaJ+E86ex6IA+fF6O7aBTTzxO6U4y1GogrtsRTBLvzZhZdiZ7fj2n42v5TqUBF
o4HRy3jJEGr0Txn31vE+hX2ci3zbcJGbTBe4p+xYLUtNE8kZ89NjS9IsZR7OwovP
pU7nMd2Tchc7+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:19 2025 by rpki-client