Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: 0pwBoIoR7Jo7BL/6JkBr+ZZTD6rVdzGcSscTT9BAV34=
Subject key identifier: 08:17:37:75:1C:F8:B8:8C:21:F7:44:EF:FE:06:C4:2A:10:18:3D:66
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 0197B77C540DA936A6740F8602C8E9EE7A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 01E3
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: hT3Z0b5N5v6hhbMH/QJ9iBZBN76RoLSTAc2kSiQtLqg=)
2: qCeXwVNQp66WQ27Det0b9KrkJEc.roa (hash: WoKc3ldX5sHKUSOKMyS/VBt9xUxQrJ5xCbXpuIjQb48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:54:0d:a9:36:a6:74:0f:86:02:c8:e9:ee:7a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=081737751cf8b88c21f744effe06c42a10183d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:78:05:51:95:ea:e4:7d:88:47:e5:b7:0e:
2f:79:b2:de:0d:2e:7e:1c:7b:1c:62:48:62:d8:52:
1f:8d:a6:c4:c7:06:92:98:3f:b1:c7:d7:32:5e:d3:
6f:81:52:e9:39:56:41:36:50:e4:4b:8d:ee:d3:23:
85:bb:96:50:20:68:43:d1:0d:14:33:8f:2d:78:30:
7b:44:68:de:d5:3a:c3:fe:5a:06:80:55:f5:6c:df:
d7:ec:46:36:90:65:14:4b:f7:b8:22:64:21:b7:68:
b2:1d:80:1b:f0:28:28:c1:34:07:c4:29:32:77:23:
33:de:3c:d9:aa:0b:b2:66:6e:76:61:4f:62:fc:0a:
72:99:c5:5b:ba:1d:06:4f:cd:5c:02:d8:d9:23:7f:
b6:ab:c5:b8:32:ea:f5:60:81:33:64:00:d0:23:27:
8f:83:db:51:a8:39:d0:43:7b:73:74:5b:97:ed:5a:
44:82:14:6f:22:8c:ee:e7:03:b2:85:a1:fb:c7:84:
9c:90:13:14:5d:37:b9:da:9f:46:57:9a:5c:18:fe:
ec:19:9f:9e:5e:89:0c:c3:17:9d:24:5e:41:6d:c5:
44:25:72:d9:e1:8a:80:d4:44:f3:2c:eb:ac:82:46:
aa:e7:74:cf:35:06:46:f6:c4:c4:d9:99:77:37:cd:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:37:75:1C:F8:B8:8C:21:F7:44:EF:FE:06:C4:2A:10:18:3D:66
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:2a:a6:d4:a0:08:14:0e:61:04:cf:a0:ad:81:3d:01:f1:
30:a8:85:65:3e:81:4a:1d:03:20:8c:61:d2:2a:a4:4c:d7:60:
f4:3b:c3:a8:b3:af:5d:d4:29:c3:fc:3d:ea:5e:d1:83:73:9c:
aa:d2:03:4b:e7:01:15:6b:02:b9:36:c3:93:38:cc:e7:14:d2:
b2:99:79:03:83:46:48:5c:92:5a:57:aa:af:10:13:f7:6e:5b:
91:42:8e:3b:05:06:db:e6:8e:80:72:ec:21:5d:eb:dc:0f:6a:
a2:c6:92:e8:75:8a:35:d2:25:02:0c:8a:6f:20:d5:46:d4:87:
94:68:43:b0:2e:ff:a7:f0:79:7b:fa:aa:72:84:6a:4f:13:3d:
93:0f:92:fa:e6:a3:66:b9:7d:07:b8:02:0b:bf:96:95:2f:6d:
30:a7:67:32:70:5d:a8:c6:8f:77:a1:fe:00:20:d9:99:55:36:
bf:9f:92:b4:e8:a3:ae:b1:c8:52:13:d6:d0:7f:45:03:d4:6f:
5f:6a:18:b3:ee:54:fb:f0:30:4a:99:2b:4b:e5:16:3d:d6:74:
44:f0:b5:8e:ee:7f:cd:e5:4b:c1:ca:c7:9d:bd:f7:36:84:16:
b0:10:f9:c6:22:ba:6b:89:6d:83:d5:64:98:39:eb:d2:69:2f:
c8:9e:64:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fFQNqTamdA+GAsjp7np6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTU1MTdiMGIyMDMwOWU5MTY0MDViOWUxZWQyMWEwNDY5
YTY4OTUwHhcNMjUwNjI4MTcwMTA3WhcNMjUwNjI5MTcwMTA3WjAzMTEwLwYDVQQD
EygwODE3Mzc3NTFjZjhiODhjMjFmNzQ0ZWZmZTA2YzQyYTEwMTgzZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbt4BVGV6uR9iEfltw4vebLeDS5+
HHscYkhi2FIfjabExwaSmD+xx9cyXtNvgVLpOVZBNlDkS43u0yOFu5ZQIGhD0Q0U
M48teDB7RGje1TrD/loGgFX1bN/X7EY2kGUUS/e4ImQht2iyHYAb8CgowTQHxCky
dyMz3jzZqguyZm52YU9i/ApymcVbuh0GT81cAtjZI3+2q8W4Mur1YIEzZADQIyeP
g9tRqDnQQ3tzdFuX7VpEghRvIozu5wOyhaH7x4SckBMUXTe52p9GV5pcGP7sGZ+e
XokMwxedJF5BbcVEJXLZ4YqA1ETzLOusgkaq53TPNQZG9sTE2Zl3N80HZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgXN3Uc+LiMIfdE7/4GxCoQGD1mMB8GA1UdIwQY
MBaAFPIVUXsLIDCekWQFueHtIaBGmmiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAt
Yjk1YTE2NDE2YjU2LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAtYjk1YTE2NDE2YjU2
LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpkqptSg
CBQOYQTPoK2BPQHxMKiFZT6BSh0DIIxh0iqkTNdg9DvDqLOvXdQpw/w96l7Rg3Oc
qtIDS+cBFWsCuTbDkzjM5xTSspl5A4NGSFySWleqrxAT925bkUKOOwUG2+aOgHLs
IV3r3A9qosaS6HWKNdIlAgyKbyDVRtSHlGhDsC7/p/B5e/qqcoRqTxM9kw+S+uaj
Zrl9B7gCC7+WlS9tMKdnMnBdqMaPd6H+ACDZmVU2v5+StOijrrHIUhPW0H9FA9Rv
X2oYs+5U+/AwSpkrS+UWPdZ0RPC1ju5/zeVLwcrHnb33NoQWsBD5xiK6a4ltg9Vk
mDnr0mkvyJ5k3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:52 2025 by rpki-client