Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: DvrNZih83PWt7sXnJAtwfp2gKEwPPSNC/YSfV3Mfdno=
Subject key identifier: 7E:14:2A:DC:52:FD:5C:17:94:70:23:F3:2A:A1:DD:06:B5:63:CE:81
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 0198D4E020273D816D0174B2DDF6C07B31B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: FqOVWgu1atqLA6duIHSzLNWMVuUCBcet9sYFlS/HFsM=)
2: 4mphuMGYKre7KcVIZklqvnEwe9w.roa (hash: BDdrPj5npMilCe1H11h3z51bgzRRHnfwNgW8/PXQiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:20:27:3d:81:6d:01:74:b2:dd:f6:c0:7b:31:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=7e142adc52fd5c17947023f32aa1dd06b563ce81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:de:d7:f5:26:17:67:2e:74:66:0e:9e:ce:
00:a9:ee:f6:81:e6:73:43:11:12:08:41:f5:bf:50:
c7:53:5e:29:b0:be:0b:8b:dc:cc:37:8e:51:46:fb:
7c:fc:fa:c2:0d:71:f5:69:3e:b2:27:be:d6:2f:06:
cb:57:55:eb:e8:1e:30:ee:50:b2:c4:73:e5:6f:f9:
8e:a0:fe:79:1c:e5:39:79:e9:d1:c1:09:29:fb:08:
0f:80:d5:c0:0e:e5:20:02:20:51:05:bd:f1:e2:92:
39:88:bf:be:2c:2c:b2:1d:57:1e:50:95:20:a4:e6:
0c:23:24:77:84:b6:30:8a:f2:f1:3b:85:31:1e:1c:
ba:da:ac:e4:89:7d:c7:aa:27:1c:04:b9:66:c2:25:
18:59:7f:65:50:af:25:b9:de:af:c1:a3:1d:b6:ce:
fe:a3:d6:0a:3e:fc:93:83:d9:8c:83:80:45:83:3a:
cb:4e:c6:5c:5a:d9:4d:35:e9:df:86:3e:72:60:d4:
8b:f4:20:9f:53:54:d3:38:01:49:ef:47:6e:b1:b6:
3b:3c:50:f7:5b:bd:9d:44:f6:d4:f0:46:1c:54:42:
82:be:22:10:15:7d:e8:4e:b5:8c:a1:26:94:26:ed:
30:8c:2e:79:1b:a5:5c:d7:16:d7:e4:a0:80:49:ed:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:2A:DC:52:FD:5C:17:94:70:23:F3:2A:A1:DD:06:B5:63:CE:81
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1c:f2:fa:b9:8a:c1:86:25:e1:ef:3d:30:52:67:d3:18:35:
75:59:3f:e7:95:69:13:06:43:ab:9b:52:8b:1a:b7:f3:31:c0:
43:d4:9d:73:e8:d3:16:1d:d1:70:0d:af:2c:a7:b2:2c:cc:5e:
18:7f:d8:25:77:48:75:88:0d:6c:a4:32:a7:7a:5f:46:c0:e0:
47:2f:a9:36:e1:2d:3f:89:48:bd:99:ba:ec:2c:52:ed:f3:29:
0e:b9:9b:51:a6:c6:31:3b:a8:50:d0:01:c4:42:30:16:df:36:
37:26:1a:c2:f3:2d:63:25:d2:08:02:b2:aa:5f:39:23:06:dd:
1d:37:83:8c:4b:fa:0e:9a:c5:55:b1:3f:1a:8b:49:a9:86:10:
78:ae:10:e0:9b:21:8d:ee:32:a9:01:ca:03:08:d8:34:4f:a9:
09:b9:8e:af:63:fa:08:eb:b2:76:fe:09:93:25:45:01:72:d3:
a4:3b:55:92:85:73:ce:d4:66:65:64:ac:e3:1d:b9:18:c1:18:
66:3f:d8:0f:57:2e:5a:85:fb:c8:fc:d7:51:8d:02:fc:0d:e6:
b1:9f:33:ad:cc:27:71:52:4d:35:3e:80:d0:f3:f8:be:85:97:
08:a0:68:29:c8:da:46:5c:ca:db:cf:1f:b8:05:27:29:1e:83:
8b:64:05:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4CAnPYFtAXSy3fbAezGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNDYzYzI3OGI4NGUyZGYwMGE0N2JjMmQ4MGM4ZDgwZmZh
OWJhODkwHhcNMjUwODIzMDMwMTU0WhcNMjUwODI0MDMwMTU0WjAzMTEwLwYDVQQD
Eyg3ZTE0MmFkYzUyZmQ1YzE3OTQ3MDIzZjMyYWExZGQwNmI1NjNjZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy3e1/UmF2cudGYOns4Aqe72geZz
QxESCEH1v1DHU14psL4Li9zMN45RRvt8/PrCDXH1aT6yJ77WLwbLV1Xr6B4w7lCy
xHPlb/mOoP55HOU5eenRwQkp+wgPgNXADuUgAiBRBb3x4pI5iL++LCyyHVceUJUg
pOYMIyR3hLYwivLxO4UxHhy62qzkiX3HqiccBLlmwiUYWX9lUK8lud6vwaMdts7+
o9YKPvyTg9mMg4BFgzrLTsZcWtlNNenfhj5yYNSL9CCfU1TTOAFJ70dusbY7PFD3
W72dRPbU8EYcVEKCviIQFX3oTrWMoSaUJu0wjC55G6Vc1xbX5KCASe2zlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4UKtxS/VwXlHAj8yqh3Qa1Y86BMB8GA1UdIwQY
MBaAFONGPCeLhOLfAKR7wtgMjYD/qbqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEt
NWYyZGZlZDVkMWE0LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEtNWYyZGZlZDVkMWE0
LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBzy+rmK
wYYl4e89MFJn0xg1dVk/55VpEwZDq5tSixq38zHAQ9Sdc+jTFh3RcA2vLKeyLMxe
GH/YJXdIdYgNbKQyp3pfRsDgRy+pNuEtP4lIvZm67CxS7fMpDrmbUabGMTuoUNAB
xEIwFt82NyYawvMtYyXSCAKyql85IwbdHTeDjEv6DprFVbE/GotJqYYQeK4Q4Jsh
je4yqQHKAwjYNE+pCbmOr2P6COuydv4JkyVFAXLTpDtVkoVzztRmZWSs4x25GMEY
Zj/YD1cuWoX7yPzXUY0C/A3msZ8zrcwncVJNNT6A0PP4voWXCKBoKcjaRlzK288f
uAUnKR6Di2QFIQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:20 2025 by rpki-client