Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: UHJ9Z62WVwxBLncEYjjAFjkSx6yqNEsK71WaUItiZu0=
Subject key identifier: E2:FD:73:13:D6:22:05:55:7E:3D:2F:5A:D8:10:DD:F0:5A:09:9F:FE
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 0197B7B37154632AAA8E244B60746B10C4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 0534
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: xLrhV2dWpSVphfzLxEHAwtcwu85QodJFVlgHi0lmAc4=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:71:54:63:2a:aa:8e:24:4b:60:74:6b:10:c4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=e2fd7313d62205557e3d2f5ad810ddf05a099ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:9f:50:52:a7:63:b1:cd:cf:5c:a3:b5:8c:
b6:5c:3f:b6:ff:13:47:74:d9:80:c6:3d:88:68:47:
e6:23:70:46:12:31:4c:52:15:a3:42:3f:f9:73:2a:
e2:ec:be:87:ba:94:b9:ce:2a:d3:f4:fb:9c:95:2a:
ff:3c:44:ee:1e:53:c0:5a:cd:e1:9a:e3:62:78:4f:
44:15:c9:cd:af:60:9c:ca:b4:79:53:b1:7b:d6:13:
e4:16:97:f7:b0:32:65:60:49:d5:0c:67:e7:bb:75:
02:68:2c:a5:d6:09:5d:b3:cc:b6:c3:22:7a:0d:0b:
36:8f:aa:0d:85:c2:c2:ca:2f:7c:85:93:25:55:10:
9c:9f:a1:a7:1b:77:4f:4f:3c:ee:40:b0:fd:e6:0f:
d0:c9:a4:72:d0:33:6b:c3:c6:88:44:8b:ad:e5:7b:
eb:ec:ef:94:98:05:cf:ef:99:02:3e:68:6c:b1:fc:
dd:32:f8:97:cd:a4:5b:b9:83:1a:35:e8:9b:10:01:
85:90:59:b0:25:52:ea:e7:39:0f:f9:d7:90:67:52:
46:d8:98:f7:e8:7c:5f:0a:26:41:ca:e4:c9:3b:21:
7a:fd:66:b7:a1:46:8c:56:73:da:99:20:2c:09:54:
9a:16:57:94:ae:d5:d2:5b:54:b7:30:36:ff:13:de:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:73:13:D6:22:05:55:7E:3D:2F:5A:D8:10:DD:F0:5A:09:9F:FE
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:68:19:3d:aa:42:7e:fd:07:22:67:67:32:5f:d6:11:b7:b2:
3b:76:c2:79:e9:52:9f:5c:1b:02:ba:7c:0d:d5:ed:5a:c0:b7:
0d:1c:5f:bb:60:e7:c9:a6:fb:5f:ea:b5:6b:41:65:9e:02:80:
f5:5c:bc:e7:16:55:f4:96:e3:b3:60:89:55:cb:2b:18:ad:92:
b5:35:31:27:82:f0:b0:ae:73:22:1c:c9:fc:67:7d:7e:88:b7:
96:e5:c9:84:26:d2:d3:b0:78:f0:9d:e4:01:87:e1:85:f3:73:
64:61:ee:50:00:fb:57:a6:38:9b:5e:6a:9d:55:1c:0e:ae:19:
8f:42:a1:ec:94:1d:78:a9:6e:da:49:8d:cf:32:0e:37:b7:30:
51:87:c8:1e:f0:82:ba:44:21:e9:34:96:62:bf:d1:8e:b1:9e:
8e:41:e4:c4:00:e6:45:a4:f8:c9:9d:f0:c8:30:c0:17:2f:31:
b0:fd:fe:f4:cc:ac:34:53:1a:e4:1e:99:ba:3d:b5:32:3c:f8:
67:bc:b5:da:0f:40:a2:c1:ee:40:6b:9b:97:e8:2e:2e:91:cf:
fa:0c:c0:64:26:0a:b6:f6:b6:01:45:dc:c2:fd:73:5f:68:65:
9e:78:6f:0c:6d:4a:0c:40:b4:c6:d6:35:71:1d:81:1a:9d:e8:
e6:64:5c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3FUYyqqjiRLYHRrEMTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjUwNjI4MTgwMTE5WhcNMjUwNjI5MTgwMTE5WjAzMTEwLwYDVQQD
EyhlMmZkNzMxM2Q2MjIwNTU1N2UzZDJmNWFkODEwZGRmMDVhMDk5ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNqfUFKnY7HNz1yjtYy2XD+2/xNH
dNmAxj2IaEfmI3BGEjFMUhWjQj/5cyri7L6HupS5zirT9PuclSr/PETuHlPAWs3h
muNieE9EFcnNr2CcyrR5U7F71hPkFpf3sDJlYEnVDGfnu3UCaCyl1glds8y2wyJ6
DQs2j6oNhcLCyi98hZMlVRCcn6GnG3dPTzzuQLD95g/QyaRy0DNrw8aIRIut5Xvr
7O+UmAXP75kCPmhssfzdMviXzaRbuYMaNeibEAGFkFmwJVLq5zkP+deQZ1JG2Jj3
6HxfCiZByuTJOyF6/Wa3oUaMVnPamSAsCVSaFleUrtXSW1S3MDb/E95ZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL9cxPWIgVVfj0vWtgQ3fBaCZ/+MB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGgZPapC
fv0HImdnMl/WEbeyO3bCeelSn1wbArp8DdXtWsC3DRxfu2Dnyab7X+q1a0FlngKA
9Vy85xZV9Jbjs2CJVcsrGK2StTUxJ4LwsK5zIhzJ/Gd9foi3luXJhCbS07B48J3k
AYfhhfNzZGHuUAD7V6Y4m15qnVUcDq4Zj0Kh7JQdeKlu2kmNzzION7cwUYfIHvCC
ukQh6TSWYr/RjrGejkHkxADmRaT4yZ3wyDDAFy8xsP3+9MysNFMa5B6Zuj21Mjz4
Z7y12g9AosHuQGubl+guLpHP+gzAZCYKtva2AUXcwv1zX2hlnnhvDG1KDEC0xtY1
cR2BGp3o5mRczA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:14 2025 by rpki-client