Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File: 8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier: TWFFM7wah7TDpMcTQSotlxfB+fTYK66wUmeRqmIeLh8=
Subject key identifier: 1B:44:6B:AF:9D:08:99:00:FE:32:A6:F1:88:60:99:DE:76:E0:22:0C
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer: /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial: 0198D4733891D37089DEE0BC9FECBE8838EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:57 +0000
Manifest this update: Sat 23 Aug 2025 01:02:57 +0000
Manifest next update: Sun 24 Aug 2025 01:02:57 +0000
Files and hashes: 1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: PdvZBcW/ePFpJNoK3utqdbMy6+vmKv5FQqSAUqod5hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:38:91:d3:70:89:de:e0:bc:9f:ec:be:88:38:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Validity
Not Before: Aug 23 01:02:57 2025 GMT
Not After : Aug 24 01:02:57 2025 GMT
Subject: CN=1b446baf9d089900fe32a6f1886099de76e0220c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:4f:42:26:e6:4b:7c:68:89:e2:57:b4:93:
fd:47:95:8d:ed:98:d0:5c:4a:4d:7f:47:37:a5:ac:
61:57:50:f7:c3:8c:30:77:db:60:ed:89:70:7a:34:
f2:b5:61:2c:40:ad:ac:c0:b1:0b:55:e2:49:41:1d:
4a:be:d8:68:1f:1b:04:69:cd:c1:26:38:17:d6:39:
50:e8:69:da:f0:eb:fa:c9:61:59:cf:a6:e3:4a:b1:
d1:1f:49:69:a7:02:8c:34:bd:05:0f:1f:0c:f1:13:
a3:0e:a5:d9:22:2f:20:8f:c0:5b:99:cf:cd:e8:4b:
73:a0:67:53:df:2d:8b:f3:8f:53:de:48:4e:5d:61:
53:8b:01:fd:66:5c:a7:8f:32:98:9f:62:ee:95:ac:
76:c6:83:02:3e:0b:c2:89:a2:96:01:f0:06:16:84:
1b:91:f5:06:a4:43:72:fe:4c:c4:56:52:78:e5:5d:
a3:e3:66:a8:5b:66:93:e1:d6:88:59:18:e1:9f:de:
44:ef:1d:e6:80:c0:cb:aa:b4:90:31:c3:30:e2:6e:
a3:1c:d6:8d:d6:d3:56:a8:21:4e:07:ff:0e:41:bf:
74:86:71:7f:5a:6f:d5:fb:4f:3d:ba:6a:c8:91:18:
d6:12:af:64:5b:a1:41:15:6d:fc:61:94:b8:5d:e8:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:44:6B:AF:9D:08:99:00:FE:32:A6:F1:88:60:99:DE:76:E0:22:0C
X509v3 Authority Key Identifier:
keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a0:4e:d7:d8:7a:be:ae:67:5e:92:5c:f2:21:c7:8f:8f:5b:
14:28:d2:c1:af:f0:9a:57:4e:55:0e:43:1a:3a:f1:c5:92:83:
56:a7:8d:43:96:6f:87:94:8f:db:c3:24:dd:71:fd:9a:8f:98:
25:5b:f1:fb:06:2b:b6:ed:3b:be:ed:a5:e2:c5:63:7d:72:01:
ea:d6:a3:fd:55:1a:65:fa:f3:31:9f:a3:89:70:fc:77:4c:5b:
0e:eb:97:3a:98:53:1c:9c:fb:79:0e:c2:63:5e:2d:b3:66:bf:
03:6c:19:55:2b:62:d7:74:86:f1:b5:e6:08:23:f9:e2:f8:b4:
02:c4:35:f0:3d:83:17:86:a4:de:db:c8:1e:71:b5:d7:c9:62:
df:df:13:30:1e:32:17:03:bc:81:27:ea:6d:9f:84:e9:06:cd:
94:d0:68:2b:9c:32:fc:10:3a:39:42:d5:f0:f9:b0:fe:f7:73:
4e:68:45:ba:cf:66:9a:e8:86:b7:a6:a3:26:35:48:22:fd:b3:
9e:0e:72:c3:4b:ca:6b:87:ad:18:38:7f:9b:fc:1c:52:e1:61:
f1:81:90:7e:67:3f:e9:eb:cf:68:74:c5:d1:a5:38:b7:cd:7d:
50:42:6c:33:4c:30:d4:d7:3c:f1:d5:3c:f2:bc:7e:a5:63:e6:
e1:cd:a0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcziR03CJ3uC8n+y+iDjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmM4YTk5YWRhNzdmYmQzZTI0MDE0ZjVlMjRmMWFmNjk1
MDVjMjMwHhcNMjUwODIzMDEwMjU3WhcNMjUwODI0MDEwMjU3WjAzMTEwLwYDVQQD
EygxYjQ0NmJhZjlkMDg5OTAwZmUzMmE2ZjE4ODYwOTlkZTc2ZTAyMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTdPQibmS3xoieJXtJP9R5WN7ZjQ
XEpNf0c3paxhV1D3w4wwd9tg7YlwejTytWEsQK2swLELVeJJQR1KvthoHxsEac3B
JjgX1jlQ6Gna8Ov6yWFZz6bjSrHRH0lppwKMNL0FDx8M8ROjDqXZIi8gj8Bbmc/N
6EtzoGdT3y2L849T3khOXWFTiwH9ZlynjzKYn2Lulax2xoMCPgvCiaKWAfAGFoQb
kfUGpENy/kzEVlJ45V2j42aoW2aT4daIWRjhn95E7x3mgMDLqrSQMcMw4m6jHNaN
1tNWqCFOB/8OQb90hnF/Wm/V+089umrIkRjWEq9kW6FBFW38YZS4XehbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtEa6+dCJkA/jKm8Yhgmd524CIMMB8GA1UdIwQY
MBaAFPIsipmtp3+9PiQBT14k8a9pUFwjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGl5S21hMm5mNzAtSkFGUFhpVHhyMmxRWENNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYThiMWItYmI2OS00OGQ3LThjYTUt
N2RjMjI1YWZlNTU1LzEvOGl5S21hMm5mNzAtSkFGUFhpVHhyMmxRWENNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wYThiMWItYmI2OS00OGQ3LThjYTUtN2RjMjI1YWZlNTU1
LzEvOGl5S21hMm5mNzAtSkFGUFhpVHhyMmxRWENNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6BO19h6
vq5nXpJc8iHHj49bFCjSwa/wmldOVQ5DGjrxxZKDVqeNQ5Zvh5SP28Mk3XH9mo+Y
JVvx+wYrtu07vu2l4sVjfXIB6taj/VUaZfrzMZ+jiXD8d0xbDuuXOphTHJz7eQ7C
Y14ts2a/A2wZVSti13SG8bXmCCP54vi0AsQ18D2DF4ak3tvIHnG118li398TMB4y
FwO8gSfqbZ+E6QbNlNBoK5wy/BA6OULV8Pmw/vdzTmhFus9mmuiGt6ajJjVIIv2z
ng5yw0vKa4etGDh/m/wcUuFh8YGQfmc/6evPaHTF0aU4t819UEJsM0ww1Nc88dU8
8rx+pWPm4c2gYw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:27 2025 by rpki-client