Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: YNYytpWkjjt+md9anhGLR3z2j+dESGHjz12zM4W63rs=
Subject key identifier: 9B:E0:FE:06:65:F3:0D:E1:77:13:96:FA:B3:CE:91:D2:D8:A7:C8:83
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 01B82F90C77AC302B993BA97D2BA4510B4D35707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 046A
Signing time: Fri 22 Aug 2025 22:15:23 +0000
Manifest this update: Fri 22 Aug 2025 22:10:23 +0000
Manifest next update: Sun 24 Aug 2025 01:35:23 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: Oih3CkR+Koa5hYnnPRI5QKfGqM4RSLuZpCwHTj0Ra+Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b8:2f:90:c7:7a:c3:02:b9:93:ba:97:d2:ba:45:10:b4:d3:57:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Aug 22 22:10:23 2025 GMT
Not After : Aug 24 01:35:23 2025 GMT
Subject: CN=9BE0FE0665F30DE1771396FAB3CE91D2D8A7C883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:c4:26:20:87:07:e7:d7:7e:b5:ea:c8:2f:
ab:cf:17:7e:a2:a0:a8:b7:61:13:0f:23:91:0e:a2:
12:e2:c9:ba:b4:16:b9:07:ae:00:9e:db:2a:ad:f4:
4d:b4:7b:76:c2:16:7a:25:dd:9c:8c:68:64:54:32:
25:61:36:99:f0:a3:82:3f:ac:87:82:b9:0c:f4:d6:
4f:18:b7:01:b9:00:15:c8:d6:6b:eb:48:3e:a4:f5:
27:e7:24:0c:83:65:95:14:29:eb:07:cf:66:2a:4d:
af:68:ee:a0:90:7b:78:3e:cf:bf:b8:74:1a:57:00:
26:c6:9d:9e:d3:ce:b9:b9:84:cd:e0:3a:84:a5:e6:
15:4e:0b:c1:1f:f1:40:62:b2:af:33:03:ab:04:65:
28:11:92:e2:e5:bc:22:b1:64:72:eb:e9:d5:d5:3e:
44:c6:23:1b:c1:c2:cf:b5:6c:20:8f:d2:ea:19:ce:
cb:29:2f:9d:03:15:18:f1:1b:75:d2:7b:6f:d5:7c:
fe:22:dd:3c:a5:76:b2:88:94:69:04:fc:54:f4:06:
eb:a8:99:1b:b4:3c:26:48:b9:ac:3c:b9:1b:7d:25:
6f:52:27:d0:fa:c7:ec:2c:3f:ed:fa:24:2c:24:86:
1e:4f:f9:f1:d4:81:c1:e2:21:a7:8c:96:4b:a7:a8:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:FE:06:65:F3:0D:E1:77:13:96:FA:B3:CE:91:D2:D8:A7:C8:83
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:df:ad:eb:35:91:33:15:b9:8d:83:24:17:8b:4a:ce:34:dd:
fc:66:41:11:29:08:cc:2d:9f:bd:09:dd:3b:f3:28:4f:43:61:
e2:39:84:b0:6b:0f:1d:97:b4:80:23:2a:1b:3f:41:8d:74:08:
a6:f3:fb:ff:e3:ae:f2:d4:53:42:b4:8b:43:6a:fb:b0:85:77:
3d:33:19:9b:c8:9b:16:8b:83:57:ef:82:eb:ce:10:2a:af:cc:
21:23:47:a4:28:f0:96:73:d8:74:fd:59:e6:61:e3:28:48:14:
71:eb:ae:8c:b2:6a:3a:ed:80:36:2b:af:4e:c8:0a:52:6c:2d:
29:13:e3:e9:da:5b:44:29:3a:d4:f2:b3:24:ea:95:80:c5:27:
8b:e2:3c:6f:41:d9:f5:ea:f6:2d:16:32:91:27:19:51:10:e2:
d8:40:b5:8a:db:b0:de:81:b7:e1:16:06:32:31:dc:2d:4f:98:
0e:4c:94:da:4e:1e:e7:d7:86:b4:0e:10:be:76:a5:56:5d:b4:
64:76:9d:4f:79:fa:80:51:f1:d8:b1:a0:f2:db:7a:34:a3:c1:
6c:ee:cf:f0:8e:8c:df:db:d9:7a:43:f4:04:bf:b9:15:67:79:
e7:27:e3:37:be:17:37:39:7a:95:1b:be:a5:4d:0f:d0:3a:5a:
d2:13:fc:ea
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAbgvkMd6wwK5k7qX0rpFELTTVwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4
ZjUyM2IxMTAeFw0yNTA4MjIyMjEwMjNaFw0yNTA4MjQwMTM1MjNaMDMxMTAvBgNV
BAMTKDlCRTBGRTA2NjVGMzBERTE3NzEzOTZGQUIzQ0U5MUQyRDhBN0M4ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu28QmIIcH59d+terIL6vPF36i
oKi3YRMPI5EOohLiybq0FrkHrgCe2yqt9E20e3bCFnol3ZyMaGRUMiVhNpnwo4I/
rIeCuQz01k8YtwG5ABXI1mvrSD6k9SfnJAyDZZUUKesHz2YqTa9o7qCQe3g+z7+4
dBpXACbGnZ7Tzrm5hM3gOoSl5hVOC8Ef8UBisq8zA6sEZSgRkuLlvCKxZHLr6dXV
PkTGIxvBws+1bCCP0uoZzsspL50DFRjxG3XSe2/VfP4i3TyldrKIlGkE/FT0Buuo
mRu0PCZIuaw8uRt9JW9SJ9D6x+wsP+36JCwkhh5P+fHUgcHiIaeMlkunqMYfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUm+D+BmXzDeF3E5b6s86R0tinyIMwHwYDVR0j
BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5
U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05
Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG
Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit+t6zWRMxW5jYMkF4tK
zjTd/GZBESkIzC2fvQndO/MoT0Nh4jmEsGsPHZe0gCMqGz9BjXQIpvP7/+Ou8tRT
QrSLQ2r7sIV3PTMZm8ibFouDV++C684QKq/MISNHpCjwlnPYdP1Z5mHjKEgUceuu
jLJqOu2ANiuvTsgKUmwtKRPj6dpbRCk61PKzJOqVgMUni+I8b0HZ9er2LRYykScZ
URDi2EC1ituw3oG34RYGMjHcLU+YDkyU2k4e59eGtA4QvnalVl20ZHadT3n6gFHx
2LGg8tt6NKPBbO7P8I6M39vZekP0BL+5FWd55yfjN74XNzl6lRu+pU0P0Dpa0hP8
6g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:13 2025 by rpki-client