Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: rFktTof20RMxRla2N6Q9a5tAyBHMHHFpFA8opHsVlNw=
Subject key identifier: B5:8D:24:B2:28:8E:68:A0:02:87:26:10:3F:BB:5E:70:2C:8F:F2:1F
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 0198D5155FBE81CFDDFE161E8299318B29FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 05CD
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: 8hrWMJghJ7wGQxTSUhZVui3/LtUKgwYHoy4FKFnmpAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:5f:be:81:cf:dd:fe:16:1e:82:99:31:8b:29:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=b58d24b2288e68a0028726103fbb5e702c8ff21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:1b:7e:ee:e8:82:c1:79:4a:8c:ea:60:6f:
6d:9f:82:b1:10:b0:31:87:59:56:f7:9b:b8:76:a7:
bd:66:a6:79:16:ef:64:f6:2b:da:42:6b:2a:09:bd:
71:21:2e:be:0e:85:cb:55:5f:7b:ef:ee:89:03:38:
33:0e:e0:4e:5b:19:a5:3b:a5:26:a2:76:84:f3:af:
98:ae:e9:5a:7a:af:b2:a7:09:ff:45:2d:1d:dc:02:
16:ca:25:99:3e:36:c1:ac:d7:74:2d:c1:f1:32:e1:
b4:30:62:e3:44:2f:a6:66:84:22:ee:db:00:bb:b6:
7b:53:3f:36:46:b9:f1:32:13:97:ba:bc:0f:69:1a:
4a:0c:65:af:0d:c5:f8:3c:72:8d:d9:74:0c:91:ad:
a5:c3:23:43:7e:2c:ce:c3:29:0b:a2:2d:74:4a:49:
2e:6c:17:c3:0f:d7:fe:15:7a:65:42:c9:6d:4b:99:
d0:e9:c3:c6:29:c7:bc:4b:4a:ea:99:d6:9f:42:6d:
e9:3e:16:1b:5a:93:ba:df:bd:48:fd:1d:d6:7c:5b:
58:f7:40:96:b7:e1:b6:9c:66:23:20:ea:16:5e:58:
14:65:57:60:4e:ed:98:58:05:7e:ca:8d:7e:bb:94:
c6:ca:91:cf:9d:57:44:be:2d:73:63:2a:74:8f:6a:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:24:B2:28:8E:68:A0:02:87:26:10:3F:BB:5E:70:2C:8F:F2:1F
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3f:93:5d:00:51:47:eb:ad:16:0b:03:c7:83:bb:a2:ea:20:
36:b4:ca:5d:0f:ef:b0:ea:45:d1:b0:04:f4:74:89:c8:4f:13:
3e:2d:5b:d3:45:a5:5d:b4:24:19:25:74:25:e2:2b:ff:e4:93:
01:55:f6:23:14:0a:be:06:21:57:e1:78:27:c4:65:54:62:96:
70:01:24:12:10:62:bd:9e:44:b5:fd:38:d0:1e:de:6b:cf:7f:
d1:42:eb:7f:74:b5:3b:c9:31:15:53:1c:eb:d4:ef:28:64:68:
2a:be:26:6f:a9:41:b3:c0:4d:66:f1:ea:ae:da:21:47:94:1e:
94:3d:b9:5a:d8:e1:f8:75:3d:d3:ce:11:56:5f:58:24:98:f5:
93:dd:ae:31:0f:93:61:6e:5e:ee:33:69:41:64:52:be:8f:09:
6a:b6:4b:a8:e6:64:83:e8:9a:0a:ea:23:ab:8f:7a:2c:03:7e:
ef:a1:b5:2a:55:02:f4:36:f7:76:58:0f:ed:b9:87:73:e6:30:
9c:53:5e:bf:8f:77:01:5a:24:77:20:6f:8c:10:7e:11:71:5a:
63:71:11:73:0f:3b:b1:4d:d8:d3:73:69:99:ba:ee:ac:9a:84:
91:95:e2:62:bb:cf:67:a0:b2:de:da:cf:62:87:b4:a3:e9:c3:
4e:f7:99:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFV++gc/d/hYegpkxiyn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzU2ZWMxMzBkOThhZjJkMGQyOTQ1OWYyMGZhNzliZDYz
NTkwMTUwHhcNMjUwODIzMDQwMDA0WhcNMjUwODI0MDQwMDA0WjAzMTEwLwYDVQQD
EyhiNThkMjRiMjI4OGU2OGEwMDI4NzI2MTAzZmJiNWU3MDJjOGZmMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruMbfu7ogsF5SozqYG9tn4KxELAx
h1lW95u4dqe9ZqZ5Fu9k9ivaQmsqCb1xIS6+DoXLVV977+6JAzgzDuBOWxmlO6Um
onaE86+Yrulaeq+ypwn/RS0d3AIWyiWZPjbBrNd0LcHxMuG0MGLjRC+mZoQi7tsA
u7Z7Uz82RrnxMhOXurwPaRpKDGWvDcX4PHKN2XQMka2lwyNDfizOwykLoi10Skku
bBfDD9f+FXplQsltS5nQ6cPGKce8S0rqmdafQm3pPhYbWpO6371I/R3WfFtY90CW
t+G2nGYjIOoWXlgUZVdgTu2YWAV+yo1+u5TGypHPnVdEvi1zYyp0j2rqXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWNJLIojmigAocmED+7XnAsj/IfMB8GA1UdIwQY
MBaAFKPFbsEw2Yry0NKUWfIPp5vWNZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjkt
YjNlOWJlNzQyODk0LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjktYjNlOWJlNzQyODk0
LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj+TXQBR
R+utFgsDx4O7ouogNrTKXQ/vsOpF0bAE9HSJyE8TPi1b00WlXbQkGSV0JeIr/+ST
AVX2IxQKvgYhV+F4J8RlVGKWcAEkEhBivZ5Etf040B7ea89/0ULrf3S1O8kxFVMc
69TvKGRoKr4mb6lBs8BNZvHqrtohR5QelD25Wtjh+HU9084RVl9YJJj1k92uMQ+T
YW5e7jNpQWRSvo8JarZLqOZkg+iaCuojq496LAN+76G1KlUC9Db3dlgP7bmHc+Yw
nFNev493AVokdyBvjBB+EXFaY3ERcw87sU3Y03NpmbrurJqEkZXiYrvPZ6Cy3trP
Yoe0o+nDTveZLg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:36 2025 by rpki-client