Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
File: i8EWjaFgICh-6h_eygVBkwqdNok.mft (raw, json)
Hash identifier: 80SSpdjgLvMvU1Ndbucz4YSH+Q6W9uTIG/MI1JEgP+g=
Subject key identifier: 26:44:CF:BF:76:CB:A1:D0:87:78:D6:AD:EC:BF:DD:A3:B3:6E:CA:F5
Authority key identifier: 8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
Certificate issuer: /CN=8bc1168da16020287eea1fdeca0541930a9d3689
Certificate serial: 0198D5BBCB287406D414B153DB6D739A22C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
Manifest number: 02CD
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: M8dNAav4bGEdssIavf8xkWsYnhg.roa (hash: XQuy4W50mLmkvV791/MW+gWfWSh1bhqASgHVJ90pFyY=)
2: i8EWjaFgICh-6h_eygVBkwqdNok.crl (hash: EeH/6+BqCUpp0k7/is5b6OdMf9AikfhCObx12Q7H3Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cb:28:74:06:d4:14:b1:53:db:6d:73:9a:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc1168da16020287eea1fdeca0541930a9d3689
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=2644cfbf76cba1d08778d6adecbfdda3b36ecaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:68:de:bb:fe:54:e4:23:e9:7b:ea:05:76:
48:1f:cf:47:84:44:7d:c4:26:70:85:47:f8:17:f1:
ba:46:af:a0:d1:df:43:60:17:3f:3a:87:9c:24:34:
9b:ef:c1:8a:8b:00:b3:4c:d3:86:96:f4:46:23:06:
d3:28:a9:21:3c:db:ee:81:e1:68:ba:f7:3e:15:72:
44:a5:f0:73:fa:d9:ba:cf:ab:c7:41:1d:f6:61:75:
9d:bf:0e:e4:34:8f:29:2c:00:86:0c:00:b1:5f:d3:
80:b7:4b:34:9c:21:ae:4b:33:e8:9a:1a:d5:c8:87:
bb:a0:0f:f4:8f:04:86:f0:c5:c6:90:63:b4:f4:93:
fd:88:56:73:65:94:ec:47:ff:80:ff:b9:3e:2c:51:
60:eb:f1:fc:00:8e:f8:68:6c:6f:d7:94:bd:72:4b:
d6:c0:bd:7a:1d:bc:9f:4a:d7:7c:93:b6:df:f8:f6:
b1:fa:9b:53:2d:f0:62:f0:e6:a0:51:fa:5b:82:32:
d5:78:86:60:51:0e:d5:9d:1c:f3:4c:6e:b4:1a:6e:
72:e9:0b:d1:c8:d4:d2:76:12:bf:37:be:41:08:da:
d1:db:44:44:d5:37:44:d9:0e:98:10:1e:f0:a1:03:
bb:4b:62:fd:57:c1:65:08:e1:01:96:01:4e:88:78:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:44:CF:BF:76:CB:A1:D0:87:78:D6:AD:EC:BF:DD:A3:B3:6E:CA:F5
X509v3 Authority Key Identifier:
keyid:8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cd:15:65:d8:df:30:64:e1:c9:b8:71:7b:12:31:5e:d8:ef:
fe:da:12:5f:eb:9b:20:c2:37:fc:06:d6:8b:4c:2f:e7:49:4b:
43:70:0e:53:f5:73:31:7f:ca:2c:b1:8a:d9:25:7d:80:34:5e:
bb:59:bf:bb:11:62:bc:93:75:e1:a5:7f:2c:a4:f9:3e:93:00:
24:ff:98:ba:96:45:0d:29:99:29:0f:1e:7d:1a:66:ad:40:eb:
f2:0e:55:a4:46:05:57:8b:b3:9d:f7:b7:10:cc:cf:f3:00:23:
4f:66:8b:1e:01:ba:b0:3a:6c:bb:53:43:0b:a1:b1:58:ef:4a:
e0:da:79:4b:12:fd:4b:17:39:79:e0:32:79:8d:f9:9c:f4:41:
ab:74:37:30:09:8c:48:0e:78:96:28:22:12:5c:09:c9:29:4f:
57:45:44:18:f1:5d:94:47:e5:3e:7e:8b:c4:30:38:02:a0:c7:
c9:ae:cb:d7:61:3b:33:a2:e0:4f:54:da:08:9a:dc:55:d3:6e:
1f:68:c2:19:9f:ac:73:38:bb:41:59:06:8d:3c:11:81:7d:5c:
2f:53:a0:79:7a:2a:08:c7:25:e7:3f:3d:67:84:f4:db:4a:46:
69:15:f6:48:4e:b2:bf:a0:d3:02:6a:dd:35:68:33:44:6d:09:
86:29:78:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8sodAbUFLFT221zmiLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYzExNjhkYTE2MDIwMjg3ZWVhMWZkZWNhMDU0MTkzMGE5
ZDM2ODkwHhcNMjUwODIzMDcwMTUwWhcNMjUwODI0MDcwMTUwWjAzMTEwLwYDVQQD
EygyNjQ0Y2ZiZjc2Y2JhMWQwODc3OGQ2YWRlY2JmZGRhM2IzNmVjYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4to3rv+VOQj6XvqBXZIH89HhER9
xCZwhUf4F/G6Rq+g0d9DYBc/OoecJDSb78GKiwCzTNOGlvRGIwbTKKkhPNvugeFo
uvc+FXJEpfBz+tm6z6vHQR32YXWdvw7kNI8pLACGDACxX9OAt0s0nCGuSzPomhrV
yIe7oA/0jwSG8MXGkGO09JP9iFZzZZTsR/+A/7k+LFFg6/H8AI74aGxv15S9ckvW
wL16HbyfStd8k7bf+Pax+ptTLfBi8OagUfpbgjLVeIZgUQ7VnRzzTG60Gm5y6QvR
yNTSdhK/N75BCNrR20RE1TdE2Q6YEB7woQO7S2L9V8FlCOEBlgFOiHjuFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZEz792y6HQh3jWrey/3aOzbsr1MB8GA1UdIwQY
MBaAFIvBFo2hYCAofuof3soFQZMKnTaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xOGJjNjAtZWNhNi00OGRkLWFlOTkt
MjZjZTA3MWIwYzM2LzEvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8xOGJjNjAtZWNhNi00OGRkLWFlOTktMjZjZTA3MWIwYzM2
LzEvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD80VZdjf
MGThybhxexIxXtjv/toSX+ubIMI3/AbWi0wv50lLQ3AOU/VzMX/KLLGK2SV9gDRe
u1m/uxFivJN14aV/LKT5PpMAJP+YupZFDSmZKQ8efRpmrUDr8g5VpEYFV4uznfe3
EMzP8wAjT2aLHgG6sDpsu1NDC6GxWO9K4Np5SxL9Sxc5eeAyeY35nPRBq3Q3MAmM
SA54ligiElwJySlPV0VEGPFdlEflPn6LxDA4AqDHya7L12E7M6LgT1TaCJrcVdNu
H2jCGZ+sczi7QVkGjTwRgX1cL1OgeXoqCMcl5z89Z4T020pGaRX2SE6yv6DTAmrd
NWgzRG0Jhil4NA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:01 2025 by rpki-client