Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: vdXCD9KwaOW2gtBuuuQg/8WjWjgfSAspdOEJxSbKHVE=
Subject key identifier: 78:25:1C:45:EB:1F:07:8A:13:67:5E:FC:3E:96:87:21:CD:62:E9:67
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 0198D5833E233700C1BA195E9DC5DE0DC34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 11CB
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: wMl13V9QBybrfRU+9DOcAn4iPwjVd7oWuUCKBmB19WA=)
2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3e:23:37:00:c1:ba:19:5e:9d:c5:de:0d:c3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=78251c45eb1f078a13675efc3e968721cd62e967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:66:d7:34:a4:0e:d2:fa:79:f2:e7:40:49:
72:43:24:30:89:0a:1e:de:02:c8:2f:97:2c:f2:ff:
c4:86:34:3d:5b:11:ed:3a:8c:ff:8c:c4:9d:98:3d:
6a:92:1f:af:b7:c0:de:e6:42:96:f2:11:66:4a:13:
ce:ae:e3:de:00:da:71:e6:2d:26:25:3d:01:e9:c5:
19:e5:69:7b:e9:a2:10:82:78:9f:8e:9f:7c:bb:43:
15:b3:1b:c1:d7:b1:84:18:c0:a2:d5:0a:c1:13:26:
c2:46:d8:48:a1:f6:ef:61:78:7a:41:fb:90:16:c0:
bb:98:20:95:28:36:b2:57:a0:5a:b1:94:58:cf:c8:
29:b6:dd:a9:02:b3:71:6f:9b:32:6d:c8:af:77:26:
35:48:21:37:cc:d6:ce:ff:ae:1b:0d:27:60:be:5b:
d3:d1:9f:d8:29:90:06:cf:97:8d:f9:64:27:ba:48:
d8:81:8d:e7:77:a1:ff:ee:c5:97:39:cf:2b:87:3b:
7a:07:d2:22:ea:d7:e4:de:2c:6e:69:48:7b:5c:07:
9d:07:56:b3:34:6c:ee:7b:1d:39:9f:bc:57:6f:4a:
2f:3f:67:dd:7e:75:bd:28:fa:27:98:0d:4f:b2:a7:
67:52:c2:a9:c4:37:a1:ee:17:14:60:bf:73:5e:95:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:1C:45:EB:1F:07:8A:13:67:5E:FC:3E:96:87:21:CD:62:E9:67
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:31:71:28:c4:f3:03:6f:9e:47:5d:ac:b6:f1:ff:1b:4c:48:
27:8b:e2:0b:da:ac:96:03:48:0e:8e:12:5d:85:e3:32:eb:67:
44:38:dc:62:f1:0a:81:8c:f1:f8:3f:d9:50:b7:f1:7e:73:38:
9d:31:e5:26:7d:f1:c2:64:fe:6c:70:cf:a6:81:80:e3:08:82:
2e:09:01:a6:e1:9d:2c:06:4a:db:d7:39:0a:7f:c6:11:bf:3f:
b6:d7:07:88:67:3e:55:89:ce:79:6e:72:ea:1a:c1:de:34:c0:
d4:11:25:13:31:c0:67:80:87:47:51:56:0a:66:1a:13:d0:33:
9d:05:ea:34:b9:e0:d3:2a:4a:8b:41:32:df:66:05:e4:47:5b:
7f:31:a6:f9:02:c7:e6:42:dd:42:5b:12:8e:bb:e2:92:a5:4a:
5a:8d:16:6b:d9:09:b0:d9:8f:ba:bb:dd:f0:1c:2a:30:6a:92:
01:96:78:50:36:76:e6:69:b3:a3:70:5d:8a:24:c2:b8:32:86:
ca:d7:76:1c:9e:3f:f5:0c:f4:62:03:98:b1:62:12:38:10:f4:
60:a4:8e:0f:28:1c:52:f2:2d:ef:56:dc:5f:fd:7c:b9:38:3e:
62:a6:37:0b:33:83:e8:cb:41:d3:24:1f:6b:d2:42:f8:71:05:
aa:5b:2d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVgz4jNwDBuhlencXeDcNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj
NDE0YzcwHhcNMjUwODIzMDYwMDA0WhcNMjUwODI0MDYwMDA0WjAzMTEwLwYDVQQD
Eyg3ODI1MWM0NWViMWYwNzhhMTM2NzVlZmMzZTk2ODcyMWNkNjJlOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlllm1zSkDtL6efLnQElyQyQwiQoe
3gLIL5cs8v/EhjQ9WxHtOoz/jMSdmD1qkh+vt8De5kKW8hFmShPOruPeANpx5i0m
JT0B6cUZ5Wl76aIQgnifjp98u0MVsxvB17GEGMCi1QrBEybCRthIofbvYXh6QfuQ
FsC7mCCVKDayV6BasZRYz8gptt2pArNxb5sybcivdyY1SCE3zNbO/64bDSdgvlvT
0Z/YKZAGz5eN+WQnukjYgY3nd6H/7sWXOc8rhzt6B9Ii6tfk3ixuaUh7XAedB1az
NGzuex05n7xXb0ovP2fdfnW9KPonmA1PsqdnUsKpxDeh7hcUYL9zXpUbgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHglHEXrHweKE2de/D6WhyHNYulnMB8GA1UdIwQY
MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt
NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3
LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDFxKMTz
A2+eR12stvH/G0xIJ4viC9qslgNIDo4SXYXjMutnRDjcYvEKgYzx+D/ZULfxfnM4
nTHlJn3xwmT+bHDPpoGA4wiCLgkBpuGdLAZK29c5Cn/GEb8/ttcHiGc+VYnOeW5y
6hrB3jTA1BElEzHAZ4CHR1FWCmYaE9AznQXqNLng0ypKi0Ey32YF5EdbfzGm+QLH
5kLdQlsSjrvikqVKWo0Wa9kJsNmPurvd8BwqMGqSAZZ4UDZ25mmzo3BdiiTCuDKG
ytd2HJ4/9Qz0YgOYsWISOBD0YKSODygcUvIt71bcX/18uTg+YqY3CzOD6MtB0yQf
a9JC+HEFqlst1A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:15 2025 by rpki-client