Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: jROSKA44EovSVRZg8xX+LMeUJ/Bkg7TWfnvxTyKW4Lo=
Subject key identifier: 7A:D0:4D:57:A4:E3:66:51:7F:BF:E6:6A:84:4D:63:3A:CF:D7:F5:D9
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 0198D515D691B4A74F62D8556FC7804858C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: JzANM6H89DyoKjvaC+SUultC7Fut2YRxduJ8TaWTZv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d6:91:b4:a7:4f:62:d8:55:6f:c7:80:48:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=7ad04d57a4e366517fbfe66a844d633acfd7f5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:bd:ad:95:9d:cf:78:fe:9e:a8:0a:29:ec:
e4:b7:fa:a1:97:f8:3b:68:4a:7d:cf:f2:e0:7e:ac:
9b:ea:60:da:a4:6d:ab:03:55:ee:3e:20:fb:9a:59:
8d:5a:fc:e7:ba:19:b9:7b:06:de:6c:29:59:47:29:
22:51:7e:ab:81:8e:9d:8b:ca:ed:c6:d9:bf:7e:65:
c2:c6:0a:d0:78:73:f4:42:b1:4c:12:df:de:7b:84:
a8:c4:ac:d4:b1:1f:ad:d1:98:f3:87:e2:c7:35:c8:
42:25:83:73:6e:1e:e5:81:ac:67:14:ae:81:36:d0:
60:59:a6:d4:06:2d:30:b5:a7:cf:10:e0:f5:c2:20:
fd:70:b8:68:83:4a:b0:a9:19:01:00:fd:b2:ae:b8:
d3:1b:19:0e:d2:bc:41:33:66:e2:cc:7b:e5:7b:4e:
ff:b7:b7:b4:16:7b:9f:d4:0b:a5:f8:af:85:2e:31:
65:1d:68:73:ef:7f:02:90:86:e3:66:d2:85:ad:03:
c7:9f:a7:60:d2:0c:81:24:3c:34:d3:08:e9:e1:aa:
ab:6e:dd:49:e8:c1:bf:7b:7e:8b:10:42:8c:d2:85:
eb:7e:32:95:1d:52:c4:d9:27:b7:64:01:2d:51:d9:
e2:0b:a5:47:cb:f6:5f:a5:16:09:ae:15:ab:a2:3c:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D0:4D:57:A4:E3:66:51:7F:BF:E6:6A:84:4D:63:3A:CF:D7:F5:D9
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:43:b8:60:32:c2:eb:b9:92:d1:2d:c6:13:20:08:57:94:42:
a0:d0:4d:32:e2:ab:03:09:dd:f1:b2:ca:ed:27:bb:f5:9e:1b:
97:d8:1c:46:24:7d:03:bf:d4:ae:e6:fd:53:46:60:e4:84:8a:
0a:1b:a1:f6:31:21:60:90:a6:a2:75:b2:dd:b9:a9:6d:a7:85:
d3:c0:70:08:33:61:c8:01:17:88:0d:a8:19:8a:5f:cb:80:df:
4a:ed:4d:54:0a:2a:27:54:51:68:fd:bf:43:a8:c9:97:58:6b:
fe:95:e6:1c:21:b5:e9:21:a7:5a:be:b2:3e:13:10:84:13:28:
6b:6a:6b:0d:f1:cf:ce:10:6c:e2:e2:86:10:03:2f:b2:51:81:
2a:53:25:38:47:41:c9:d2:a7:c2:8d:f4:c3:0a:38:18:a5:3c:
7e:9b:cb:47:17:8d:5c:2f:21:27:00:2c:8e:62:a6:44:59:2e:
11:10:b7:ce:49:06:6f:52:75:ec:d9:e8:5d:a1:78:8d:38:6a:
64:b7:e1:84:8e:da:f7:76:fe:58:60:10:61:5a:29:36:e4:45:
a6:d3:1f:eb:ec:f6:27:65:a2:cc:cc:a1:a6:ff:e9:88:2e:b8:
3b:ae:b7:4e:53:21:37:89:3a:57:a0:c1:a5:d9:dc:57:0f:a1:
86:e1:c6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFdaRtKdPYthVb8eASFjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjUwODIzMDQwMDM0WhcNMjUwODI0MDQwMDM0WjAzMTEwLwYDVQQD
Eyg3YWQwNGQ1N2E0ZTM2NjUxN2ZiZmU2NmE4NDRkNjMzYWNmZDdmNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxC9rZWdz3j+nqgKKezkt/qhl/g7
aEp9z/Lgfqyb6mDapG2rA1XuPiD7mlmNWvznuhm5ewbebClZRykiUX6rgY6di8rt
xtm/fmXCxgrQeHP0QrFMEt/ee4SoxKzUsR+t0Zjzh+LHNchCJYNzbh7lgaxnFK6B
NtBgWabUBi0wtafPEOD1wiD9cLhog0qwqRkBAP2yrrjTGxkO0rxBM2bizHvle07/
t7e0Fnuf1Aul+K+FLjFlHWhz738CkIbjZtKFrQPHn6dg0gyBJDw00wjp4aqrbt1J
6MG/e36LEEKM0oXrfjKVHVLE2Se3ZAEtUdniC6VHy/ZfpRYJrhWrojwL/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrQTVek42ZRf7/maoRNYzrP1/XZMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkO4YDLC
67mS0S3GEyAIV5RCoNBNMuKrAwnd8bLK7Se79Z4bl9gcRiR9A7/Urub9U0Zg5ISK
Chuh9jEhYJCmonWy3bmpbaeF08BwCDNhyAEXiA2oGYpfy4DfSu1NVAoqJ1RRaP2/
Q6jJl1hr/pXmHCG16SGnWr6yPhMQhBMoa2prDfHPzhBs4uKGEAMvslGBKlMlOEdB
ydKnwo30wwo4GKU8fpvLRxeNXC8hJwAsjmKmRFkuERC3zkkGb1J17NnoXaF4jThq
ZLfhhI7a93b+WGAQYVopNuRFptMf6+z2J2WizMyhpv/piC64O663TlMhN4k6V6DB
pdncVw+hhuHG2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:30 2025 by rpki-client