Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
File: sl8gfyfZGpE36LZdKQEpmHGqOh0.mft (raw, json)
Hash identifier: HfeL4DRpwP7NwyPt/xbGNdLoR/ac4QeKzNv7phlbjQA=
Subject key identifier: 89:B4:EF:D2:D6:16:28:C4:DE:73:CA:94:F7:8F:13:B0:76:7E:99:50
Authority key identifier: B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
Certificate issuer: /CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Certificate serial: 0198D65F57ECB6BB754E6D19CDD80D394F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
Manifest number: 0181
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: sl8gfyfZGpE36LZdKQEpmHGqOh0.crl (hash: B7lGM61udOJDhLSa14meveSYRGR/1AfLNqmPe/o6ysU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:57:ec:b6:bb:75:4e:6d:19:cd:d8:0d:39:4f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=89b4efd2d61628c4de73ca94f78f13b0767e9950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:37:6d:f8:58:d2:4f:c6:00:ea:af:60:9c:
7d:3b:35:07:e1:76:b9:66:a5:ca:8f:3a:d6:eb:db:
a8:56:d1:52:9c:6d:4d:cb:86:e5:6b:30:b3:a7:7a:
a8:9e:84:97:72:12:fe:7a:3b:de:26:8d:bf:38:98:
44:a9:9b:df:b9:5c:7f:55:6b:10:9a:36:a5:5d:4b:
f3:39:bd:a8:24:b2:a7:32:3e:89:68:14:5d:c4:c6:
13:eb:89:2e:8d:bb:d2:a3:2c:0b:1b:a0:87:2c:cb:
0b:83:50:9e:bc:c1:e5:0f:14:82:17:37:28:da:78:
57:1a:6c:f2:65:19:a9:3c:b5:0d:e9:bd:27:dd:08:
d4:9b:8b:3b:13:08:19:93:99:d7:68:2b:aa:97:e7:
cf:b2:90:56:b2:76:36:9b:32:c4:38:56:4f:ad:1d:
f6:f2:2e:88:d5:14:1a:76:cf:b8:e1:f1:9a:e8:cd:
46:6e:ef:ce:23:ba:df:45:11:f0:9e:9f:d0:c7:50:
3e:dc:75:36:72:65:69:f4:22:77:a5:17:58:7f:63:
64:80:fe:d1:18:94:a7:60:e3:71:ac:eb:60:de:6b:
62:4b:19:26:4f:6b:be:4c:f1:cd:7e:aa:a1:7c:69:
d0:15:48:5e:81:f8:d5:3f:e2:e7:0b:76:d0:78:a3:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:EF:D2:D6:16:28:C4:DE:73:CA:94:F7:8F:13:B0:76:7E:99:50
X509v3 Authority Key Identifier:
keyid:B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:49:b3:b8:c2:78:5b:66:8c:d3:db:ae:18:65:a3:04:b9:99:
26:00:9b:ba:c8:06:de:74:82:09:21:22:ad:f2:09:75:b5:0d:
9e:c4:f0:6f:b0:6b:cc:5e:f4:56:34:67:95:7c:ed:d9:23:a3:
57:fc:90:6f:18:ba:b1:20:f8:de:c0:58:c7:27:75:49:b7:54:
12:44:00:51:4d:b4:11:03:3c:5b:98:50:9f:94:11:4d:41:82:
f5:41:93:c8:43:6a:82:b9:ba:9b:81:3d:08:d1:2d:eb:bf:5b:
13:0b:82:f0:3c:bb:e8:29:83:f0:4d:42:68:b9:fd:22:92:01:
c3:a1:71:ea:64:34:1a:62:d0:30:fa:a1:10:5f:7e:5b:4f:0a:
bf:47:25:fb:c5:82:fd:06:43:4e:35:46:13:63:b5:32:c6:a8:
1a:ea:f1:f4:e2:cd:8b:27:0c:9c:01:60:70:4b:81:fc:54:ef:
6e:61:67:94:a6:1e:f4:60:0f:86:40:6c:eb:6b:67:1e:79:3d:
d8:1e:e9:7b:66:07:17:5a:02:7e:b7:45:93:7a:e0:3f:a4:00:
6a:c9:e1:b3:2f:8f:e4:ed:9a:0a:89:4a:5d:8f:7d:82:9f:b5:
be:db:95:a6:80:ab:07:9c:24:aa:9d:f6:b8:31:46:ac:8e:ca:
70:2b:d8:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX1fstrt1Tm0ZzdgNOU9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWYyMDdmMjdkOTFhOTEzN2U4YjY1ZDI5MDEyOTk4NzFh
YTNhMWQwHhcNMjUwODIzMTAwMDI5WhcNMjUwODI0MTAwMDI5WjAzMTEwLwYDVQQD
Eyg4OWI0ZWZkMmQ2MTYyOGM0ZGU3M2NhOTRmNzhmMTNiMDc2N2U5OTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutM3bfhY0k/GAOqvYJx9OzUH4Xa5
ZqXKjzrW69uoVtFSnG1Ny4blazCzp3qonoSXchL+ejveJo2/OJhEqZvfuVx/VWsQ
mjalXUvzOb2oJLKnMj6JaBRdxMYT64kujbvSoywLG6CHLMsLg1CevMHlDxSCFzco
2nhXGmzyZRmpPLUN6b0n3QjUm4s7EwgZk5nXaCuql+fPspBWsnY2mzLEOFZPrR32
8i6I1RQads+44fGa6M1Gbu/OI7rfRRHwnp/Qx1A+3HU2cmVp9CJ3pRdYf2NkgP7R
GJSnYONxrOtg3mtiSxkmT2u+TPHNfqqhfGnQFUhegfjVP+LnC3bQeKN+iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm079LWFijE3nPKlPePE7B2fplQMB8GA1UdIwQY
MBaAFLJfIH8n2RqRN+i2XSkBKZhxqjodMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2w4Z2Z5ZlpHcEUzNkxaZEtRRXBtSEdxT2gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lZDg1ZGYtMWMxMi00ZTIwLWI3Zjgt
MWM5NzQ0YzE5NWY3LzEvc2w4Z2Z5ZlpHcEUzNkxaZEtRRXBtSEdxT2gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lZDg1ZGYtMWMxMi00ZTIwLWI3ZjgtMWM5NzQ0YzE5NWY3
LzEvc2w4Z2Z5ZlpHcEUzNkxaZEtRRXBtSEdxT2gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEmzuMJ4
W2aM09uuGGWjBLmZJgCbusgG3nSCCSEirfIJdbUNnsTwb7BrzF70VjRnlXzt2SOj
V/yQbxi6sSD43sBYxyd1SbdUEkQAUU20EQM8W5hQn5QRTUGC9UGTyENqgrm6m4E9
CNEt679bEwuC8Dy76CmD8E1CaLn9IpIBw6Fx6mQ0GmLQMPqhEF9+W08Kv0cl+8WC
/QZDTjVGE2O1MsaoGurx9OLNiycMnAFgcEuB/FTvbmFnlKYe9GAPhkBs62tnHnk9
2B7pe2YHF1oCfrdFk3rgP6QAasnhsy+P5O2aColKXY99gp+1vtuVpoCrB5wkqp32
uDFGrI7KcCvYZg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:46 2025 by rpki-client