Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: rDobOyHGjTgC7Z8VcR68jjTF18JgKyovbQ6zxyasgq0=
Subject key identifier: 58:84:82:5D:84:06:02:CE:69:81:E4:48:E7:F3:CF:F7:CF:94:BC:BA
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 0197B7EAE48A4265B748885E15BC20407992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:53 +0000
Manifest this update: Sat 28 Jun 2025 19:01:53 +0000
Manifest next update: Sun 29 Jun 2025 19:01:53 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: RE3QdK+YeYPRikulToS0fTvWN8OdTXWWNsQ3CBwvjC8=)
2: ic2AvQV4fn5mQGurv_9LydC-BbI.roa (hash: mD0dAfaF87izkBorR76KrAgNEqpqvPq8C6YXxT1+QYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e4:8a:42:65:b7:48:88:5e:15:bc:20:40:79:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Jun 28 19:01:53 2025 GMT
Not After : Jun 29 19:01:53 2025 GMT
Subject: CN=5884825d840602ce6981e448e7f3cff7cf94bcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:43:3c:18:3e:70:82:ff:59:6d:73:76:65:
07:26:e9:d5:31:be:12:e7:44:70:7c:65:c3:09:45:
96:77:3c:cb:ff:7f:d6:03:49:87:e7:cc:d6:3f:77:
cc:8c:17:7b:72:be:40:9f:48:f0:c6:b0:ec:25:03:
a9:7e:02:49:3b:2f:19:6c:4c:8c:47:45:66:92:d8:
86:24:95:06:a3:ab:b9:7e:2b:74:e4:6a:ef:43:25:
2b:77:40:99:d3:03:6d:7b:7d:22:43:d6:28:22:41:
2b:ed:7b:22:50:24:0b:c6:8d:68:fb:88:03:a4:07:
b1:34:f9:b9:b4:93:1f:e8:5c:d1:bc:2e:2b:d3:e5:
48:4a:df:53:a9:8c:c5:0c:57:60:50:16:83:ab:ce:
24:92:38:50:8b:3e:d0:4c:8a:f5:cd:b2:77:9d:63:
6b:a1:6e:a3:83:07:b6:32:46:d1:74:c0:93:c8:b6:
dc:9d:98:1d:7d:7c:68:28:c1:da:73:1f:cc:43:09:
f2:49:51:fa:19:5c:8b:3a:9c:8d:a3:24:c0:32:72:
eb:a1:b4:66:a9:2b:43:f8:9d:30:84:cc:64:1f:18:
87:e2:56:6d:24:79:80:48:76:fd:7e:46:78:a6:26:
db:b0:f3:06:16:ab:a9:b8:85:b9:8b:8e:69:82:19:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:84:82:5D:84:06:02:CE:69:81:E4:48:E7:F3:CF:F7:CF:94:BC:BA
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:52:88:96:c7:71:ce:8f:e5:b2:ee:00:50:81:cb:6a:23:8c:
66:05:94:c6:54:ef:e2:20:79:50:e5:72:f9:cb:76:d8:ed:c0:
f6:71:c7:2f:f1:23:c0:5c:52:d7:27:08:21:ab:f1:b5:d6:4b:
b8:23:6d:93:3c:62:17:ae:d2:b4:33:60:80:6f:a8:7d:9a:47:
56:07:94:02:4e:12:35:14:32:a4:d1:94:92:13:3a:dc:08:9e:
df:b7:e0:5c:8f:d0:a8:17:bb:08:db:a3:59:a4:82:02:90:b3:
14:16:eb:8f:2a:5e:7e:d3:e7:8f:ab:b7:c4:d6:45:9f:3a:c8:
ee:0b:2e:1e:09:ed:0e:6e:d4:ec:47:4b:2d:d7:92:b5:c1:70:
9c:b7:6d:2b:fc:67:3e:5c:7a:45:2a:7b:01:0e:2a:85:e6:cd:
ad:5e:db:86:aa:79:f1:23:ba:b2:5f:c0:b1:0c:5d:1b:32:d8:
55:a8:b9:c7:55:83:52:47:ec:4d:6a:2a:59:c5:3c:e2:2d:cd:
15:21:aa:bb:b6:96:ed:8e:8b:c1:67:6a:2a:bb:60:84:d8:d8:
87:bc:5a:01:15:04:d3:a0:65:65:9c:54:8c:39:bd:bd:66:0f:
97:d7:ee:f2:9c:30:3b:e6:3f:b0:ba:99:6a:fa:6c:b3:b1:eb:
a1:24:03:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36uSKQmW3SIheFbwgQHmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzg5OTBiZDZlOTMwNzExM2U4MzgzMmM2OTE1ZmRhNWNh
Y2ZjMmYwHhcNMjUwNjI4MTkwMTUzWhcNMjUwNjI5MTkwMTUzWjAzMTEwLwYDVQQD
Eyg1ODg0ODI1ZDg0MDYwMmNlNjk4MWU0NDhlN2YzY2ZmN2NmOTRiY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+xDPBg+cIL/WW1zdmUHJunVMb4S
50RwfGXDCUWWdzzL/3/WA0mH58zWP3fMjBd7cr5An0jwxrDsJQOpfgJJOy8ZbEyM
R0VmktiGJJUGo6u5fit05GrvQyUrd0CZ0wNte30iQ9YoIkEr7XsiUCQLxo1o+4gD
pAexNPm5tJMf6FzRvC4r0+VISt9TqYzFDFdgUBaDq84kkjhQiz7QTIr1zbJ3nWNr
oW6jgwe2MkbRdMCTyLbcnZgdfXxoKMHacx/MQwnySVH6GVyLOpyNoyTAMnLrobRm
qStD+J0whMxkHxiH4lZtJHmASHb9fkZ4pibbsPMGFqupuIW5i45pghn9XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiEgl2EBgLOaYHkSOfzz/fPlLy6MB8GA1UdIwQY
MBaAFPPImQvW6TBxE+g4MsaRX9pcrPwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMt
ZTg4OWE2ZTZiZWFjLzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMtZTg4OWE2ZTZiZWFj
LzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlKIlsdx
zo/lsu4AUIHLaiOMZgWUxlTv4iB5UOVy+ct22O3A9nHHL/EjwFxS1ycIIavxtdZL
uCNtkzxiF67StDNggG+ofZpHVgeUAk4SNRQypNGUkhM63Aie37fgXI/QqBe7CNuj
WaSCApCzFBbrjypeftPnj6u3xNZFnzrI7gsuHgntDm7U7EdLLdeStcFwnLdtK/xn
Plx6RSp7AQ4qhebNrV7bhqp58SO6sl/AsQxdGzLYVai5x1WDUkfsTWoqWcU84i3N
FSGqu7aW7Y6LwWdqKrtghNjYh7xaARUE06BlZZxUjDm9vWYPl9fu8pwwO+Y/sLqZ
avpss7HroSQDUg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:43 2025 by rpki-client