Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: JUAPqrBLCOlo6pWiplA7y2oydk1Bodm/yCg5z1Pg6bs=
Subject key identifier: A3:98:D5:7E:A6:FF:89:8F:06:E5:90:91:C5:41:DF:00:3A:CA:EA:0F
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 0198A1965E72410029671866A3033AC8DD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 162D
Signing time: Wed 13 Aug 2025 04:00:42 +0000
Manifest this update: Wed 13 Aug 2025 04:00:42 +0000
Manifest next update: Thu 14 Aug 2025 04:00:42 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: b/kE6Drdual+onqmuhY31bZUHbJZ91MciCVqKwvrrSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:5e:72:41:00:29:67:18:66:a3:03:3a:c8:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Aug 13 04:00:42 2025 GMT
Not After : Aug 14 04:00:42 2025 GMT
Subject: CN=a398d57ea6ff898f06e59091c541df003acaea0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:7c:d3:81:09:bb:e6:ad:3c:89:96:f9:f1:
33:0c:d5:1a:ad:57:0e:2b:87:fb:15:59:3b:61:d6:
71:63:22:38:84:2b:fd:9b:fd:f6:b5:75:de:b8:5b:
f3:23:b4:8a:cd:30:2b:3d:0e:ec:69:6a:ca:b0:f6:
d1:f9:11:f7:43:f9:a4:0d:da:00:94:4d:a6:2b:df:
9a:73:9d:6d:66:20:55:e3:53:84:01:ee:78:d7:4d:
c0:23:73:99:cb:35:01:13:3e:88:69:30:b1:d9:21:
a9:67:99:71:ba:15:0b:0e:1b:96:7e:6a:c7:43:46:
82:a9:9b:c1:6c:0d:4f:fb:48:16:8b:c0:a3:76:72:
d3:b3:c9:c0:9d:c9:3a:56:94:f9:16:4d:e0:06:e2:
5e:82:24:31:f4:1d:1d:d7:95:fc:85:fb:5d:07:d1:
09:07:ac:68:39:5b:98:d4:03:12:8f:96:70:88:d6:
5b:f3:9b:45:cf:98:2a:a6:b2:2f:e9:d5:d7:d9:4a:
b1:e5:7c:66:f5:d5:0b:eb:99:ba:87:01:26:16:61:
e4:96:04:90:28:39:a0:19:ec:ec:a7:8e:87:19:54:
22:f8:47:1d:42:c6:f7:de:f8:4a:d3:ea:78:42:07:
ed:24:12:bf:25:8b:ff:6b:cf:be:dc:cd:16:f8:66:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:98:D5:7E:A6:FF:89:8F:06:E5:90:91:C5:41:DF:00:3A:CA:EA:0F
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:59:fd:9c:ce:39:92:59:5b:44:5d:42:e9:46:12:63:30:d1:
eb:54:43:65:96:16:d6:dd:c5:3f:a3:42:06:05:d8:20:87:4b:
23:ba:a9:e2:83:f4:0a:69:39:27:84:b5:5e:ba:1c:76:eb:5c:
e1:ad:bb:4b:38:17:6c:46:c0:83:ed:74:61:b0:26:d7:df:81:
29:03:c0:2e:03:4c:3f:34:54:fc:83:43:7c:60:03:35:c8:a5:
a1:cf:d5:5b:17:51:9e:10:77:bb:13:66:5b:05:00:2c:f2:66:
e3:20:29:68:19:1c:53:ea:4c:5b:99:2f:23:0d:16:c9:ff:a3:
e0:a0:c0:b1:e4:69:2d:f2:c9:15:79:d0:f6:2f:2d:64:84:cb:
d6:36:b9:a3:e7:bb:24:a3:22:1a:fb:1d:cc:1f:f2:14:7c:e6:
75:6d:b0:5f:90:7b:3b:77:fe:64:df:ff:b6:ed:73:18:4a:c6:
8a:6e:00:8d:d3:80:e6:21:32:f4:a4:a6:ad:18:32:69:e9:e6:
bc:c4:a1:47:58:1d:ae:62:07:0b:0d:b7:62:19:4c:13:e1:27:
86:b4:9e:9c:c0:ce:f4:4a:29:5d:bb:66:7a:6f:15:ae:d6:f6:
5d:e7:cc:c1:5b:e5:05:23:d6:93:3c:1f:58:60:54:30:85:06:
40:3a:58:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihll5yQQApZxhmowM6yN2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYWMwY2U3MDBiMTdkNDk5ZTg5OGVjN2ExNDczMDQwNTE1
N2M0NzgwHhcNMjUwODEzMDQwMDQyWhcNMjUwODE0MDQwMDQyWjAzMTEwLwYDVQQD
EyhhMzk4ZDU3ZWE2ZmY4OThmMDZlNTkwOTFjNTQxZGYwMDNhY2FlYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDV804EJu+atPImW+fEzDNUarVcO
K4f7FVk7YdZxYyI4hCv9m/32tXXeuFvzI7SKzTArPQ7saWrKsPbR+RH3Q/mkDdoA
lE2mK9+ac51tZiBV41OEAe54103AI3OZyzUBEz6IaTCx2SGpZ5lxuhULDhuWfmrH
Q0aCqZvBbA1P+0gWi8CjdnLTs8nAnck6VpT5Fk3gBuJegiQx9B0d15X8hftdB9EJ
B6xoOVuY1AMSj5ZwiNZb85tFz5gqprIv6dXX2Uqx5Xxm9dUL65m6hwEmFmHklgSQ
KDmgGezsp46HGVQi+EcdQsb33vhK0+p4QgftJBK/JYv/a8++3M0W+GY7nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOY1X6m/4mPBuWQkcVB3wA6yuoPMB8GA1UdIwQY
MBaAFPCsDOcAsX1JnomOx6FHMEBRV8R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84ZmIyYTYtY2FlNS00ZjM5LWE4NTgt
N2U0NmNjMzcwMWI5LzEvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84ZmIyYTYtY2FlNS00ZjM5LWE4NTgtN2U0NmNjMzcwMWI5
LzEvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANln9nM45
kllbRF1C6UYSYzDR61RDZZYW1t3FP6NCBgXYIIdLI7qp4oP0Cmk5J4S1Xrocdutc
4a27SzgXbEbAg+10YbAm19+BKQPALgNMPzRU/INDfGADNciloc/VWxdRnhB3uxNm
WwUALPJm4yApaBkcU+pMW5kvIw0Wyf+j4KDAseRpLfLJFXnQ9i8tZITL1ja5o+e7
JKMiGvsdzB/yFHzmdW2wX5B7O3f+ZN//tu1zGErGim4AjdOA5iEy9KSmrRgyaenm
vMShR1gdrmIHCw23YhlME+EnhrSenMDO9EopXbtmem8Vrtb2XefMwVvlBSPWkzwf
WGBUMIUGQDpYlA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:46 2025 by rpki-client