Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: Kf0cpHAb05ME5D0d5+dzBA48OefPtsSrtz7TPTIkqiY=
Subject key identifier: 5B:FC:FA:01:DB:68:8A:E1:66:C4:CE:9F:72:18:99:EE:12:3E:13:30
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 0198D473473483D66B0F9D44C3D4BCA0955C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 0A18
Signing time: Sat 23 Aug 2025 01:03:01 +0000
Manifest this update: Sat 23 Aug 2025 01:03:01 +0000
Manifest next update: Sun 24 Aug 2025 01:03:01 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: 4e1+oBIPw4kfYMzXX41DTwCMyqqR+b4cHcU+/0dXW9s=)
2: tRxgXr9YQwTbEh2NqyL9M68npkQ.roa (hash: QcuVE9jeWpJsMM52+9+6n7mFIjZuC9lNEDcWkB7O3NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:47:34:83:d6:6b:0f:9d:44:c3:d4:bc:a0:95:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: Aug 23 01:03:01 2025 GMT
Not After : Aug 24 01:03:01 2025 GMT
Subject: CN=5bfcfa01db688ae166c4ce9f721899ee123e1330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:e8:92:c4:b4:3d:80:cd:16:11:a9:45:e1:
92:4b:99:d6:22:b0:cd:53:04:d6:d6:c7:aa:a8:35:
a7:88:57:fa:5d:4d:a1:ca:c8:a6:0b:87:dc:67:f1:
38:74:e6:f8:8a:c8:fa:21:3f:b9:e6:c4:34:c2:14:
40:1b:88:80:1b:17:31:22:ef:70:81:db:22:dd:5f:
e8:68:62:4e:32:48:22:5d:4d:9d:c6:a4:06:db:17:
21:8f:3b:64:b3:50:64:f3:c0:e8:8f:66:7b:b0:97:
36:42:8e:db:e2:37:a5:13:7c:94:9c:a0:b9:14:d6:
82:59:f7:15:b6:23:35:a0:25:12:5c:10:84:94:aa:
57:a9:54:13:e3:f4:2b:17:a0:af:a3:cf:d3:e5:09:
25:b3:15:6c:ad:67:53:29:e3:6a:74:42:7c:15:5a:
76:3f:3e:83:d3:de:69:bb:cf:74:7a:87:89:42:4b:
44:fe:8d:c4:87:d9:d5:e7:13:b0:10:4c:00:c4:9c:
a7:09:1b:27:b1:bd:cb:af:32:2f:33:ab:dd:51:23:
07:0c:5f:4e:12:3d:b2:ba:4f:33:5e:b0:18:7b:64:
a2:fa:46:36:9e:5c:c2:05:f2:76:5f:5e:ce:12:2f:
67:9b:68:6e:ef:38:45:53:03:93:17:de:e6:be:d1:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FC:FA:01:DB:68:8A:E1:66:C4:CE:9F:72:18:99:EE:12:3E:13:30
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:60:c9:b8:f3:ca:ef:fb:9f:c2:e7:e9:94:8f:45:8d:e3:87:
ab:be:9a:01:90:49:71:71:84:23:08:93:50:a0:57:f7:13:3a:
6d:0a:fd:5d:a0:67:c9:67:6e:46:44:92:03:58:99:06:95:05:
4a:0d:33:bb:da:2e:94:3f:25:ba:4f:f9:62:2b:73:ff:2b:de:
78:e7:b3:99:02:49:29:79:8e:cd:e8:b2:7f:36:9d:1d:9b:14:
3f:72:58:63:7d:10:83:94:6b:eb:67:fa:f8:b6:a4:87:96:a9:
4e:35:d0:89:c9:43:c6:86:6c:25:27:f7:c3:b1:c1:62:92:4c:
b2:27:aa:00:f1:53:90:c6:f9:17:d8:11:1c:c2:0a:03:4f:9e:
1d:ef:9b:a4:60:af:d2:18:53:14:c4:6a:39:e9:1d:81:56:7e:
9f:66:d1:f3:78:a0:b4:6d:99:88:e3:c9:1a:d8:a2:92:b2:77:
91:6e:40:f7:be:ef:c9:24:2c:f2:8d:40:3e:59:68:bf:e8:85:
75:40:03:99:80:b5:0c:a6:04:50:65:0d:63:ec:1a:09:d0:dd:
12:41:00:28:84:82:84:e1:73:74:1d:7a:68:94:74:b5:df:05:
05:6c:f8:f2:16:98:16:13:09:48:4b:e3:83:28:59:a7:a9:59:
2b:62:c1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc0c0g9ZrD51Ew9S8oJVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMWYyODlhMDBhMWIxMTViN2YzYTRkMWI4MDExYmY5MGQx
YTJmNzIwHhcNMjUwODIzMDEwMzAxWhcNMjUwODI0MDEwMzAxWjAzMTEwLwYDVQQD
Eyg1YmZjZmEwMWRiNjg4YWUxNjZjNGNlOWY3MjE4OTllZTEyM2UxMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkLoksS0PYDNFhGpReGSS5nWIrDN
UwTW1seqqDWniFf6XU2hysimC4fcZ/E4dOb4isj6IT+55sQ0whRAG4iAGxcxIu9w
gdsi3V/oaGJOMkgiXU2dxqQG2xchjztks1Bk88Doj2Z7sJc2Qo7b4jelE3yUnKC5
FNaCWfcVtiM1oCUSXBCElKpXqVQT4/QrF6Cvo8/T5QklsxVsrWdTKeNqdEJ8FVp2
Pz6D095pu890eoeJQktE/o3Eh9nV5xOwEEwAxJynCRsnsb3LrzIvM6vdUSMHDF9O
Ej2yuk8zXrAYe2Si+kY2nlzCBfJ2X17OEi9nm2hu7zhFUwOTF97mvtHRuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFv8+gHbaIrhZsTOn3IYme4SPhMwMB8GA1UdIwQY
MBaAFPEfKJoAobEVt/Ok0bgBG/kNGi9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjct
NzRlODQ5NjcxNjhiLzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjctNzRlODQ5NjcxNjhi
LzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmDJuPPK
7/ufwufplI9FjeOHq76aAZBJcXGEIwiTUKBX9xM6bQr9XaBnyWduRkSSA1iZBpUF
Sg0zu9oulD8luk/5Yitz/yveeOezmQJJKXmOzeiyfzadHZsUP3JYY30Qg5Rr62f6
+Lakh5apTjXQiclDxoZsJSf3w7HBYpJMsieqAPFTkMb5F9gRHMIKA0+eHe+bpGCv
0hhTFMRqOekdgVZ+n2bR83igtG2ZiOPJGtiikrJ3kW5A977vySQs8o1APllov+iF
dUADmYC1DKYEUGUNY+waCdDdEkEAKISChOFzdB16aJR0td8FBWz48haYFhMJSEvj
gyhZp6lZK2LB+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:39 2025 by rpki-client