Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: +1F1Yie0XBcQFP8xGF+ijvVg/vF9HWCipbbq03Gt67Y=
Subject key identifier: 8A:0C:21:CD:67:A5:73:E1:B1:F7:07:25:C1:4C:5D:68:25:0A:00:42
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 01987374826BBA615445CE333A52BDD71613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 062C
Signing time: Mon 04 Aug 2025 05:01:12 +0000
Manifest this update: Mon 04 Aug 2025 05:01:12 +0000
Manifest next update: Tue 05 Aug 2025 05:01:12 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: Wa2fQT+r5Rrb0I4GwfUTn1DP0v73WJ6IeWmJkwmGDRU=)
2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:82:6b:ba:61:54:45:ce:33:3a:52:bd:d7:16:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Aug 4 05:01:12 2025 GMT
Not After : Aug 5 05:01:12 2025 GMT
Subject: CN=8a0c21cd67a573e1b1f70725c14c5d68250a0042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:5c:78:6b:c4:a9:4d:ec:1b:07:21:82:6a:
84:a0:70:80:ff:d9:fd:72:ff:82:ec:67:b8:c8:b8:
5d:03:cc:9a:cb:5b:a0:ef:a7:0f:20:85:f2:9d:9d:
68:82:bc:6c:05:bd:ae:db:e7:6e:fe:8e:39:c6:bc:
5d:1f:6b:83:5a:27:72:e4:48:af:00:66:cb:e4:87:
5a:84:62:51:c0:ad:d6:29:1a:87:69:c1:a9:ec:98:
e8:dd:32:c0:de:4c:7a:0c:cc:ee:eb:f6:d6:4e:62:
42:8d:08:90:91:7c:37:14:0f:85:c2:11:ad:6f:cb:
ac:9c:75:c6:bf:16:b7:e5:a3:e6:6b:30:23:d6:6b:
9d:0a:94:f3:ed:62:bd:9f:5d:c9:eb:90:bb:5f:b1:
15:28:90:58:f4:43:a6:dd:c8:2f:6c:e4:1f:e2:14:
01:cd:85:f5:a4:7f:07:e3:fb:0a:ba:85:76:4f:5a:
15:80:32:d7:2d:4d:d4:28:ae:ee:da:3f:10:08:ba:
70:36:b8:64:53:45:bb:13:fc:02:29:4b:80:c4:14:
87:a2:9d:61:e1:ce:a1:a0:a9:c4:68:40:c3:1d:4e:
6b:dd:eb:63:c4:c4:57:7d:ff:d1:68:e6:0f:df:49:
3f:4c:a8:f3:05:a0:31:73:02:96:74:f1:e3:d2:4d:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0C:21:CD:67:A5:73:E1:B1:F7:07:25:C1:4C:5D:68:25:0A:00:42
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:42:79:7e:2e:67:7f:51:6e:a6:88:c7:38:9a:14:43:61:42:
98:d9:e3:0d:b1:46:50:6e:5c:72:99:f0:b6:aa:7d:1c:cf:81:
a1:a8:76:54:d1:e8:33:ac:30:7e:09:00:8c:b6:1c:b5:eb:0d:
0a:f8:fa:31:63:be:bf:c5:97:6a:cc:d8:ba:15:44:25:a5:19:
2e:27:c2:0c:56:24:72:00:ed:9d:8f:1e:69:3c:7d:ec:eb:4a:
d1:7e:55:d2:5f:28:38:73:8f:6b:48:c5:99:78:b4:87:0f:ce:
83:0d:a8:46:84:79:77:05:5e:8d:ff:79:36:d6:d0:c5:ed:3b:
04:15:53:6d:64:92:4e:83:3f:bd:2c:bc:bd:13:21:bb:c1:6d:
19:ee:46:9a:3d:61:4f:46:cd:27:02:a0:8b:ea:29:74:09:31:
ec:45:6e:04:ab:c5:e9:f6:1a:5b:0a:df:da:5c:6e:0b:51:ed:
fc:82:39:64:50:8a:9a:ac:94:7a:ff:a8:86:38:b4:d7:94:e9:
48:79:3d:3b:3e:29:10:9e:3f:6f:c1:23:4b:55:da:10:8b:cf:
92:89:f9:7c:d1:67:c7:95:65:35:99:83:64:91:7f:e3:19:6c:
fd:97:59:85:94:3b:e3:3c:2b:c4:fd:cc:6f:f8:d8:ed:3d:06:
96:14:6d:0d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhzdIJrumFURc4zOlK91xYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz
N2ZjNGYwHhcNMjUwODA0MDUwMTEyWhcNMjUwODA1MDUwMTEyWjAzMTEwLwYDVQQD
Eyg4YTBjMjFjZDY3YTU3M2UxYjFmNzA3MjVjMTRjNWQ2ODI1MGEwMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM9ceGvEqU3sGwchgmqEoHCA/9n9
cv+C7Ge4yLhdA8yay1ug76cPIIXynZ1ogrxsBb2u2+du/o45xrxdH2uDWidy5Eiv
AGbL5IdahGJRwK3WKRqHacGp7Jjo3TLA3kx6DMzu6/bWTmJCjQiQkXw3FA+FwhGt
b8usnHXGvxa35aPmazAj1mudCpTz7WK9n13J65C7X7EVKJBY9EOm3cgvbOQf4hQB
zYX1pH8H4/sKuoV2T1oVgDLXLU3UKK7u2j8QCLpwNrhkU0W7E/wCKUuAxBSHop1h
4c6hoKnEaEDDHU5r3etjxMRXff/RaOYP30k/TKjzBaAxcwKWdPHj0k0dwQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIoMIc1npXPhsfcHJcFMXWglCgBCMB8GA1UdIwQY
MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj
LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0
ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUJ5
fi5nf1FupojHOJoUQ2FCmNnjDbFGUG5ccpnwtqp9HM+Boah2VNHoM6wwfgkAjLYc
tesNCvj6MWO+v8WXaszYuhVEJaUZLifCDFYkcgDtnY8eaTx97OtK0X5V0l8oOHOP
a0jFmXi0hw/Ogw2oRoR5dwVejf95NtbQxe07BBVTbWSSToM/vSy8vRMhu8FtGe5G
mj1hT0bNJwKgi+opdAkx7EVuBKvF6fYaWwrf2lxuC1Ht/II5ZFCKmqyUev+ohji0
15TpSHk9Oz4pEJ4/b8EjS1XaEIvPkon5fNFnx5VlNZmDZJF/4xls/ZdZhZQ74zwr
xP3Mb/jY7T0GlhRtDQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:55 2025 by rpki-client