Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: 0I9uFU1+kS0F/AwzUHLQNkE2GkXOdby4RLkjVzRECjk=
Subject key identifier: 8C:8E:9F:11:BE:46:C2:2B:E9:E2:6A:AE:E7:44:22:C7:6F:BC:70:0C
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 0198D698090C36694B2FB033AB30805C9C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:24 +0000
Manifest this update: Sat 23 Aug 2025 11:02:24 +0000
Manifest next update: Sun 24 Aug 2025 11:02:24 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: tLetsCLD0Gt/W1t2asm/4Wfe5VXWLa30DcT7syEri0U=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:09:0c:36:69:4b:2f:b0:33:ab:30:80:5c:9c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: Aug 23 11:02:24 2025 GMT
Not After : Aug 24 11:02:24 2025 GMT
Subject: CN=8c8e9f11be46c22be9e26aaee74422c76fbc700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:d6:71:b4:7c:58:53:27:00:fb:cf:80:b8:
a0:0e:a3:19:57:16:fb:17:57:02:7a:d4:0e:a4:0c:
6e:30:ad:75:b7:8a:ca:14:a5:42:ef:f2:9a:d8:54:
fb:09:1b:38:9a:49:59:2c:61:86:be:19:8c:dc:66:
5f:86:ab:7b:6b:16:c0:d7:26:42:0a:b4:fc:b5:69:
78:b8:3a:22:ab:84:9e:dd:19:27:79:ce:07:1b:82:
4b:29:c9:e5:49:25:be:b5:17:d5:b3:db:3d:0f:02:
83:38:8d:c2:4c:98:89:89:4d:86:47:71:01:8c:e2:
3a:16:a2:49:df:03:61:59:b9:a9:f8:44:48:4a:30:
4c:05:08:58:77:da:00:4c:9c:6c:ca:b0:cd:1e:4c:
e7:58:f6:9a:d3:f1:c0:6d:b2:ed:1d:d1:b1:6c:14:
0c:30:36:84:84:ac:d8:7d:a2:25:81:00:18:70:b0:
8a:99:c9:00:f8:d0:aa:57:69:51:c4:c2:08:ad:85:
6a:73:2d:76:f3:cd:c4:2f:df:32:f8:dd:44:04:df:
e7:e4:05:6c:44:6b:3a:de:08:3e:64:e9:34:e2:e0:
81:9b:1c:80:93:94:7f:8c:89:cc:b8:df:ad:9f:9c:
a7:e6:33:1a:a7:51:83:07:8e:03:78:83:2a:d7:89:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8E:9F:11:BE:46:C2:2B:E9:E2:6A:AE:E7:44:22:C7:6F:BC:70:0C
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:84:82:2a:81:c7:4a:2d:d4:1a:a8:fa:9f:31:61:97:a3:55:
29:01:cc:e7:89:57:6d:3b:32:16:f8:b2:e3:76:ca:97:ea:c4:
46:86:d3:a8:74:e7:27:d2:0f:44:51:02:ec:dd:32:c8:ff:85:
6f:cd:ab:b3:ee:d5:42:3f:0c:7e:8f:36:af:91:67:e1:d4:89:
7f:5d:ae:17:5e:ba:55:37:b4:6b:27:5d:b6:ec:73:6b:53:b2:
9a:44:78:8c:4e:47:9a:9f:47:e4:c0:56:42:c4:6f:9f:9b:4b:
68:d1:97:e0:f8:a3:6c:ca:be:11:2e:c0:bb:b1:74:b0:60:53:
49:56:ae:63:24:55:40:f0:ee:b3:cf:9b:81:ea:17:81:bc:4b:
ec:0d:ca:d9:4d:81:f1:60:1c:b7:cd:29:73:24:c1:97:03:42:
ec:a0:08:f8:9b:9a:df:59:bd:bc:8b:ce:cd:d1:e4:ce:08:3e:
de:5a:1b:12:3b:ba:a2:0b:de:d6:d3:b4:c9:6f:b8:9b:39:d0:
65:64:93:5e:99:80:b6:1d:c1:16:4e:d7:a8:a2:1f:42:89:91:
66:41:62:64:cf:38:b8:27:4b:5f:93:ae:49:3c:c6:38:f9:6c:
73:e4:7c:5d:4e:1e:a5:5a:de:6a:28:6a:4c:72:c4:ee:a0:76:
d5:6e:e1:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmAkMNmlLL7AzqzCAXJyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzhjNGY5NTEyMDZmMWFiZDg2YTczZDFjYmJiMzk5MDdl
ODZlMWYwHhcNMjUwODIzMTEwMjI0WhcNMjUwODI0MTEwMjI0WjAzMTEwLwYDVQQD
Eyg4YzhlOWYxMWJlNDZjMjJiZTllMjZhYWVlNzQ0MjJjNzZmYmM3MDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uHWcbR8WFMnAPvPgLigDqMZVxb7
F1cCetQOpAxuMK11t4rKFKVC7/Ka2FT7CRs4mklZLGGGvhmM3GZfhqt7axbA1yZC
CrT8tWl4uDoiq4Se3Rknec4HG4JLKcnlSSW+tRfVs9s9DwKDOI3CTJiJiU2GR3EB
jOI6FqJJ3wNhWbmp+ERISjBMBQhYd9oATJxsyrDNHkznWPaa0/HAbbLtHdGxbBQM
MDaEhKzYfaIlgQAYcLCKmckA+NCqV2lRxMIIrYVqcy12883EL98y+N1EBN/n5AVs
RGs63gg+ZOk04uCBmxyAk5R/jInMuN+tn5yn5jMap1GDB44DeIMq14kJvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyOnxG+RsIr6eJqrudEIsdvvHAMMB8GA1UdIwQY
MBaAFFPIxPlRIG8avYanPRy7s5kH6G4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThqRS1WRWdieHE5aHFjOUhMdXptUWZvYmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83OTMyODMtZTMwNC00MjcwLWIzMDAt
MWIxNWIyNTg3OWYyLzEvVThqRS1WRWdieHE5aHFjOUhMdXptUWZvYmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83OTMyODMtZTMwNC00MjcwLWIzMDAtMWIxNWIyNTg3OWYy
LzEvVThqRS1WRWdieHE5aHFjOUhMdXptUWZvYmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4SCKoHH
Si3UGqj6nzFhl6NVKQHM54lXbTsyFviy43bKl+rERobTqHTnJ9IPRFEC7N0yyP+F
b82rs+7VQj8Mfo82r5Fn4dSJf12uF166VTe0ayddtuxza1OymkR4jE5Hmp9H5MBW
QsRvn5tLaNGX4PijbMq+ES7Au7F0sGBTSVauYyRVQPDus8+bgeoXgbxL7A3K2U2B
8WAct80pcyTBlwNC7KAI+Jua31m9vIvOzdHkzgg+3lobEju6ogve1tO0yW+4mznQ
ZWSTXpmAth3BFk7XqKIfQomRZkFiZM84uCdLX5OuSTzGOPlsc+R8XU4epVreaihq
THLE7qB21W7h8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:33 2025 by rpki-client