Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: YbCJSa8jllW0O871gost/X5q58XY1h+7q5ABwudYUxU=
Subject key identifier: 0D:DB:1E:6E:51:98:95:6F:D6:84:F9:08:A3:B5:21:FE:92:DE:C5:DB
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019873E259451A232AA635055E38C1D11DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1351
Signing time: Mon 04 Aug 2025 07:01:10 +0000
Manifest this update: Mon 04 Aug 2025 07:01:10 +0000
Manifest next update: Tue 05 Aug 2025 07:01:10 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: 00gk/XuvxcIahOebNxkXMUMaXe8uHvYnXr7lSQX+HNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:59:45:1a:23:2a:a6:35:05:5e:38:c1:d1:1d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Aug 4 07:01:10 2025 GMT
Not After : Aug 5 07:01:10 2025 GMT
Subject: CN=0ddb1e6e5198956fd684f908a3b521fe92dec5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:a6:15:ef:66:eb:9f:99:22:8c:bd:e0:53:
4a:2c:21:06:39:ed:4f:cc:c7:d8:7d:25:61:c2:e6:
38:f3:b5:4a:ae:5c:07:49:8d:f6:ce:d6:8f:ed:50:
e7:7d:3e:ac:1f:69:9f:27:02:36:4e:ea:4d:59:9c:
54:db:44:6d:a9:be:b7:52:98:35:95:af:69:d1:ba:
80:4c:61:37:ce:92:6e:b6:ff:62:19:a1:6d:0c:34:
0e:f4:2b:f9:89:9b:9a:78:28:72:28:03:54:19:d6:
5e:58:6e:f3:46:2c:8a:f6:26:aa:78:82:ef:cc:00:
b9:d7:9d:e0:0d:29:3d:a1:e8:a7:f6:30:09:5c:62:
42:72:1c:b2:1e:72:51:d3:35:ab:90:06:86:4c:90:
8b:60:7b:c1:83:65:76:8b:83:5b:0a:75:d6:3c:14:
40:63:37:46:3c:03:27:94:5f:b0:37:ae:2f:ca:06:
1b:42:a0:6f:b7:62:d0:34:70:d8:c1:54:b4:67:41:
d4:b2:88:d3:86:47:0d:d3:08:d5:10:87:6e:29:63:
17:63:bc:1f:d2:46:39:78:ee:37:37:9e:01:e2:29:
1a:d4:2f:bf:15:29:4b:5f:15:c2:fe:49:de:ab:3b:
43:17:8b:6e:a9:73:6d:c8:bd:3c:82:bd:a4:ef:39:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:1E:6E:51:98:95:6F:D6:84:F9:08:A3:B5:21:FE:92:DE:C5:DB
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:51:ed:79:28:ab:e1:32:c7:92:70:79:a4:d5:f6:b6:30:7d:
89:98:31:23:b4:1e:de:d0:d4:7a:95:92:c6:0d:08:0a:01:04:
2e:58:98:05:f1:93:9d:f8:29:6a:ed:b5:2b:b5:86:e2:5c:9d:
06:80:24:f0:25:9f:2b:7d:c6:8b:f0:e5:d0:9f:97:f3:02:3e:
d3:08:f9:e9:0e:78:a0:c8:0c:1b:e7:9b:d6:6d:92:d2:e2:5c:
e5:3c:1c:d2:a4:c1:29:c2:86:96:93:3e:6a:67:ea:60:cd:fb:
b8:4e:44:73:0f:fe:e2:2f:93:53:19:4e:39:9c:25:7a:cc:44:
80:c5:6b:42:b2:f6:d3:8f:f4:bc:2b:eb:b1:f4:27:64:c2:af:
df:53:32:e8:c3:7c:2c:98:b9:9d:e7:cc:90:75:e3:2c:57:11:
5c:92:66:28:eb:54:88:91:49:f4:27:62:ee:6f:fe:38:a4:42:
29:e8:0d:04:68:8f:9d:68:46:08:03:55:51:6c:2f:99:67:b6:
32:73:24:4b:f4:7a:24:b5:d8:f2:03:93:8c:46:1c:81:da:1b:
6b:e1:5b:4a:4c:9d:38:6f:3f:69:6b:77:54:d0:b2:73:fb:77:
03:7d:83:3e:87:8a:18:6a:d6:54:ca:25:fa:eb:ed:60:d9:33:
ec:47:92:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4llFGiMqpjUFXjjB0R3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYTBjNjdmZjg1OWY1NTVhZjg5MjE5Mzg4ODdjNjA4NTI2
OWE0MDIwHhcNMjUwODA0MDcwMTEwWhcNMjUwODA1MDcwMTEwWjAzMTEwLwYDVQQD
EygwZGRiMWU2ZTUxOTg5NTZmZDY4NGY5MDhhM2I1MjFmZTkyZGVjNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uOmFe9m65+ZIoy94FNKLCEGOe1P
zMfYfSVhwuY487VKrlwHSY32ztaP7VDnfT6sH2mfJwI2TupNWZxU20Rtqb63Upg1
la9p0bqATGE3zpJutv9iGaFtDDQO9Cv5iZuaeChyKANUGdZeWG7zRiyK9iaqeILv
zAC5153gDSk9oein9jAJXGJCchyyHnJR0zWrkAaGTJCLYHvBg2V2i4NbCnXWPBRA
YzdGPAMnlF+wN64vygYbQqBvt2LQNHDYwVS0Z0HUsojThkcN0wjVEIduKWMXY7wf
0kY5eO43N54B4ika1C+/FSlLXxXC/kneqztDF4tuqXNtyL08gr2k7zlK1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3bHm5RmJVv1oT5CKO1If6S3sXbMB8GA1UdIwQY
MBaAFPGgxn/4WfVVr4khk4iHxghSaaQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEt
YjQxOTk5ZTVjZjU0LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEtYjQxOTk5ZTVjZjU0
LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlHteSir
4TLHknB5pNX2tjB9iZgxI7Qe3tDUepWSxg0ICgEELliYBfGTnfgpau21K7WG4lyd
BoAk8CWfK33Gi/Dl0J+X8wI+0wj56Q54oMgMG+eb1m2S0uJc5Twc0qTBKcKGlpM+
amfqYM37uE5Ecw/+4i+TUxlOOZwlesxEgMVrQrL204/0vCvrsfQnZMKv31My6MN8
LJi5nefMkHXjLFcRXJJmKOtUiJFJ9Cdi7m/+OKRCKegNBGiPnWhGCANVUWwvmWe2
MnMkS/R6JLXY8gOTjEYcgdoba+FbSkydOG8/aWt3VNCyc/t3A32DPoeKGGrWVMol
+uvtYNkz7EeSvw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:46 2025 by rpki-client