Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: gXjIA66xHGORdUmT+69eChNJBiUILfQAtS5uR3rO208=
Subject key identifier: 78:2C:67:CF:35:CC:08:7E:A5:04:B9:5F:7D:74:EA:21:F9:19:7C:7F
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 0198D58372F53341B8B66F7843C242529562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: fl5cOWEnDU6kC3nK1yEX3aPDLS1cSvr/mvJdj8B0Z14=)
2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:72:f5:33:41:b8:b6:6f:78:43:c2:42:52:95:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=782c67cf35cc087ea504b95f7d74ea21f9197c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:4f:0c:57:f6:a5:13:48:1e:c8:f8:5f:04:
14:1d:ed:e2:91:c8:26:2c:e4:f5:88:e6:b8:19:61:
8b:96:9f:4f:59:52:b8:cc:1c:dd:5d:bb:96:14:9e:
40:21:89:ae:0f:d1:02:80:c0:bb:f7:35:52:ea:b6:
ab:70:a8:e2:01:ad:92:23:62:a5:07:04:ca:ec:c2:
a4:07:15:6a:8d:c6:ac:df:99:ff:d8:f4:5b:a7:b8:
80:e0:42:14:e7:3e:bf:97:cb:88:de:f9:74:bf:86:
f9:ba:69:d0:9c:7b:fb:3a:c3:a3:4e:e5:79:98:00:
22:88:35:87:e4:4c:2e:d1:d9:0e:f6:12:7f:29:e2:
a9:e5:eb:43:5a:a8:5e:62:78:f3:ab:20:0d:19:8c:
3e:f8:b2:4d:94:87:74:10:eb:49:f8:f7:a5:bb:f1:
2e:53:f6:98:8b:3a:77:01:82:57:75:2a:e6:3a:5c:
f3:c0:f7:9f:c6:e2:a2:13:fd:9e:23:8c:b1:fa:85:
46:5e:10:fe:78:a1:58:f0:bf:58:4f:d6:0d:f4:f0:
b5:91:a8:2d:71:9c:04:a2:91:cb:2c:40:22:94:a3:
dc:06:13:ac:16:36:55:55:b9:c9:5c:a2:52:e2:f7:
d7:cc:27:ba:d4:41:47:45:25:0d:04:67:23:df:f1:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2C:67:CF:35:CC:08:7E:A5:04:B9:5F:7D:74:EA:21:F9:19:7C:7F
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e0:af:c4:6c:23:58:46:52:ab:b0:3e:45:6d:59:4c:ec:62:
68:57:e5:61:8a:fd:14:9a:5b:da:e1:b2:59:5f:ee:ea:a3:29:
ae:cc:48:56:d4:3c:fa:35:d8:f7:79:89:89:be:07:7d:18:3c:
71:96:56:b5:a5:b8:a3:02:22:af:34:c2:01:a6:0d:79:8b:45:
85:de:b9:ec:40:4a:68:7b:70:83:8d:3a:96:d7:c1:a5:a9:c1:
2f:3f:ce:bc:51:9a:3d:e7:79:0d:cc:8c:61:b3:29:4f:32:7f:
e2:fa:c4:22:00:ad:97:55:b3:c3:9e:df:f1:ee:e2:7f:e6:cb:
04:55:af:a7:89:26:6d:9f:b3:3e:ea:18:57:0d:a4:83:51:e4:
9a:8b:99:da:7c:83:d4:e7:04:60:3d:84:91:1e:00:6a:07:4e:
20:71:7e:27:2a:3a:58:42:c6:89:37:c6:88:50:db:38:67:3f:
f0:84:33:d3:b2:f7:53:f9:89:7b:e9:8d:3a:07:a5:19:89:1b:
7c:0f:c9:17:c1:5b:a5:22:7a:8e:38:47:d0:95:54:8d:b6:00:
7e:49:bd:cb:77:5b:97:bf:3d:0a:d4:44:28:05:5f:bf:e9:b2:
da:85:a4:6c:f7:5e:96:52:d5:51:1a:df:6a:49:d8:5e:ed:d8:
f2:9e:ed:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg3L1M0G4tm94Q8JCUpViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzA0MGM3NDI5ZTdiOWUyMWE1ZmZjODhkOTMyYjQ3MDdj
YzNhMDAwHhcNMjUwODIzMDYwMDE4WhcNMjUwODI0MDYwMDE4WjAzMTEwLwYDVQQD
Eyg3ODJjNjdjZjM1Y2MwODdlYTUwNGI5NWY3ZDc0ZWEyMWY5MTk3YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC1PDFf2pRNIHsj4XwQUHe3ikcgm
LOT1iOa4GWGLlp9PWVK4zBzdXbuWFJ5AIYmuD9ECgMC79zVS6rarcKjiAa2SI2Kl
BwTK7MKkBxVqjcas35n/2PRbp7iA4EIU5z6/l8uI3vl0v4b5umnQnHv7OsOjTuV5
mAAiiDWH5Ewu0dkO9hJ/KeKp5etDWqheYnjzqyANGYw++LJNlId0EOtJ+Pelu/Eu
U/aYizp3AYJXdSrmOlzzwPefxuKiE/2eI4yx+oVGXhD+eKFY8L9YT9YN9PC1kagt
cZwEopHLLEAilKPcBhOsFjZVVbnJXKJS4vfXzCe61EFHRSUNBGcj3/HGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgsZ881zAh+pQS5X3106iH5GXx/MB8GA1UdIwQY
MBaAFPJwQMdCnnueIaX/yI2TK0cHzDoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMt
N2VjYWJhZTE4ZDhhLzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMtN2VjYWJhZTE4ZDhh
LzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeCvxGwj
WEZSq7A+RW1ZTOxiaFflYYr9FJpb2uGyWV/u6qMprsxIVtQ8+jXY93mJib4HfRg8
cZZWtaW4owIirzTCAaYNeYtFhd657EBKaHtwg406ltfBpanBLz/OvFGaPed5DcyM
YbMpTzJ/4vrEIgCtl1Wzw57f8e7if+bLBFWvp4kmbZ+zPuoYVw2kg1HkmouZ2nyD
1OcEYD2EkR4AagdOIHF+Jyo6WELGiTfGiFDbOGc/8IQz07L3U/mJe+mNOgelGYkb
fA/JF8FbpSJ6jjhH0JVUjbYAfkm9y3dbl789CtREKAVfv+my2oWkbPdellLVURrf
aknYXu3Y8p7tWA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:04 2025 by rpki-client