Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: AP+I0gt5GFFpaMc5P+WgtRGAEWpNY5quBhGq/0VeG3I=
Subject key identifier: A9:2A:9A:BB:2D:4F:97:46:C3:D7:94:8F:F0:AF:A5:FB:04:A0:E7:6A
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 019874F541D6898AF732A6566ADEAB02BDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 12:01:26 +0000
Manifest this update: Mon 04 Aug 2025 12:01:26 +0000
Manifest next update: Tue 05 Aug 2025 12:01:26 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: rbvM7RTjgp4YZVeZvV+kXeZzmdea7u+9rkV3TorQ76I=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:41:d6:89:8a:f7:32:a6:56:6a:de:ab:02:bd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Aug 4 12:01:26 2025 GMT
Not After : Aug 5 12:01:26 2025 GMT
Subject: CN=a92a9abb2d4f9746c3d7948ff0afa5fb04a0e76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:04:e6:50:27:bd:98:a5:4d:6f:00:db:09:
ba:0d:29:eb:94:66:a7:3e:93:9a:dd:71:1c:1a:04:
8a:64:d8:17:f8:b5:d4:c1:c0:37:a7:a6:4d:8f:d1:
85:52:0c:8c:4d:74:3d:9c:e5:3d:e8:0f:a5:7a:b5:
02:63:dd:33:eb:e4:46:14:7d:9d:cd:28:94:32:50:
f9:90:fe:ae:93:46:1f:5f:59:ba:40:25:ca:b0:2c:
63:bd:2b:a4:0c:10:ae:d2:7b:d5:ad:ef:9c:23:7b:
52:fc:87:25:08:6a:c6:b5:5b:50:fe:cb:ef:4a:a5:
9a:08:bd:27:4a:76:cf:58:84:23:bc:2f:25:03:20:
c9:38:6c:c4:fc:c4:84:c1:e6:70:0f:5a:52:6f:ff:
04:ce:31:42:ed:36:18:a7:cc:18:3b:41:9c:fa:17:
e2:3c:b6:7c:05:78:60:0e:6c:dc:aa:60:bd:0d:5a:
fd:bf:8a:a0:f4:7d:d6:ef:48:d6:cb:b8:e1:76:b2:
3f:7c:64:5d:78:11:ea:c1:83:c7:b5:66:72:d9:03:
cc:4b:2c:16:7c:cf:07:1c:cc:0d:23:cb:da:c3:4d:
ef:f0:c8:2d:12:ae:1d:13:b0:b8:0b:62:b4:7d:90:
66:39:6f:cb:4e:9f:c5:c6:2e:0c:2b:86:53:a5:fe:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2A:9A:BB:2D:4F:97:46:C3:D7:94:8F:F0:AF:A5:FB:04:A0:E7:6A
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e0:b7:4b:57:1f:19:cb:a5:71:4b:6d:23:c5:07:61:de:af:
a0:7d:e8:fa:a8:d6:e4:5f:17:8f:16:2d:d3:cd:46:af:b5:d1:
1d:20:cd:01:fc:b8:4e:c6:1c:13:d2:fc:e7:86:ea:a1:72:ed:
f1:c9:a9:89:b6:9e:9c:d5:15:ad:fa:af:91:e5:25:e3:f0:dd:
ad:56:bd:c9:2a:f8:e9:04:b2:1f:ee:e9:f2:9c:0f:35:ed:af:
0b:01:23:46:40:13:bc:2b:c4:db:3b:c4:10:aa:c7:2b:49:6a:
92:01:91:13:de:90:40:15:0e:a3:78:5a:c8:77:f1:b9:ca:a1:
f1:0a:cc:bc:91:14:e2:c5:b7:ee:fb:aa:24:a8:2b:49:bb:5f:
5a:57:f6:46:06:a1:a4:4f:ba:93:d4:4d:88:47:90:28:83:85:
7d:0c:7c:22:a4:5b:67:99:f4:9e:61:57:86:99:6f:34:d8:02:
ac:f8:40:f6:86:50:e0:aa:93:d4:bb:c7:e5:b0:03:b7:1d:1a:
52:df:29:e1:8b:28:ab:db:ee:dc:e3:5e:fc:90:c7:09:54:ab:
67:3d:0d:4b:97:14:0d:fe:b2:49:17:e7:d4:ed:c3:cb:8a:6b:
6d:c9:3e:43:cc:d0:31:07:8c:c0:4a:cc:a1:30:cb:da:3c:25:
84:6e:ba:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09UHWiYr3MqZWat6rAr3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWE1ZDVjYjc5NDljZTFiZDIwOWRjMjEzOTkzNTIwZTAy
ZDEwODUwHhcNMjUwODA0MTIwMTI2WhcNMjUwODA1MTIwMTI2WjAzMTEwLwYDVQQD
EyhhOTJhOWFiYjJkNGY5NzQ2YzNkNzk0OGZmMGFmYTVmYjA0YTBlNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C8E5lAnvZilTW8A2wm6DSnrlGan
PpOa3XEcGgSKZNgX+LXUwcA3p6ZNj9GFUgyMTXQ9nOU96A+lerUCY90z6+RGFH2d
zSiUMlD5kP6uk0YfX1m6QCXKsCxjvSukDBCu0nvVre+cI3tS/IclCGrGtVtQ/svv
SqWaCL0nSnbPWIQjvC8lAyDJOGzE/MSEweZwD1pSb/8EzjFC7TYYp8wYO0Gc+hfi
PLZ8BXhgDmzcqmC9DVr9v4qg9H3W70jWy7jhdrI/fGRdeBHqwYPHtWZy2QPMSywW
fM8HHMwNI8vaw03v8MgtEq4dE7C4C2K0fZBmOW/LTp/Fxi4MK4ZTpf7Q8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkqmrstT5dGw9eUj/CvpfsEoOdqMB8GA1UdIwQY
MBaAFPGaXVy3lJzhvSCdwhOZNSDgLRCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAt
MmY4MGEwYTAyMDZhLzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAtMmY4MGEwYTAyMDZh
LzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+C3S1cf
GculcUttI8UHYd6voH3o+qjW5F8XjxYt081Gr7XRHSDNAfy4TsYcE9L854bqoXLt
8cmpibaenNUVrfqvkeUl4/DdrVa9ySr46QSyH+7p8pwPNe2vCwEjRkATvCvE2zvE
EKrHK0lqkgGRE96QQBUOo3hayHfxucqh8QrMvJEU4sW37vuqJKgrSbtfWlf2Rgah
pE+6k9RNiEeQKIOFfQx8IqRbZ5n0nmFXhplvNNgCrPhA9oZQ4KqT1LvH5bADtx0a
Ut8p4Ysoq9vu3ONe/JDHCVSrZz0NS5cUDf6ySRfn1O3Dy4prbck+Q8zQMQeMwErM
oTDL2jwlhG66YQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:49:56 2025 by rpki-client