Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: 9U78XySWx46fuktM4dhWYO+VCRsgDaldr5g8zz51Rf0=
Subject key identifier: BF:66:40:36:35:43:D9:62:A4:37:D8:4D:73:F6:00:56:8A:29:B2:3F
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 01988166ED7CD9865F6D3BB19A1055DEE62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:01:03 +0000
Manifest this update: Wed 06 Aug 2025 22:01:03 +0000
Manifest next update: Thu 07 Aug 2025 22:01:03 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: OL0G5FnQeTPGsR+f7lMoIgQcRYYrbFYaK9bj2zlT6/k=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:ed:7c:d9:86:5f:6d:3b:b1:9a:10:55:de:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Aug 6 22:01:03 2025 GMT
Not After : Aug 7 22:01:03 2025 GMT
Subject: CN=bf6640363543d962a437d84d73f600568a29b23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:05:3d:7c:c0:40:38:8a:4b:b2:a4:60:a9:
2a:4f:f8:e8:8e:84:a6:27:b5:25:34:68:50:4c:1e:
ce:e7:23:7f:dc:bd:93:48:87:cb:73:aa:50:53:bf:
ba:d8:05:62:c9:e6:03:c3:41:36:fc:dc:2e:f2:d8:
80:04:7b:e0:16:ed:84:aa:b6:3c:02:53:3d:1e:7d:
a4:50:6a:ad:5d:5d:49:eb:13:8f:d7:07:3b:9a:9e:
a3:8d:d3:7c:27:8b:87:33:e0:32:26:a0:2b:01:1a:
ef:b9:73:74:2a:cd:8d:22:04:3f:03:3a:74:1c:7d:
85:06:56:39:b9:19:7b:7c:d7:38:9e:c5:28:e2:d0:
e4:27:da:e7:04:83:cc:c7:e6:aa:69:61:aa:80:23:
c1:5a:a3:1b:64:b3:49:cb:f9:0c:01:bd:e5:96:63:
77:b2:aa:0a:a2:a3:3b:65:4b:7c:a2:08:6e:c5:f4:
e2:a6:4c:0b:fe:ea:95:ea:6d:47:4a:62:b0:0b:b2:
ec:de:0b:63:da:cf:76:56:f5:dc:54:23:3f:55:f7:
0b:39:15:3d:97:3a:52:eb:f2:12:cc:cb:5a:fa:6b:
f2:8f:9f:d9:56:d0:7f:37:9a:5c:c6:a7:c8:01:f6:
09:67:0c:b6:f4:58:15:6b:42:77:ad:46:b2:73:ea:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:40:36:35:43:D9:62:A4:37:D8:4D:73:F6:00:56:8A:29:B2:3F
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a4:35:ed:f2:5f:bf:a7:0f:41:76:c3:77:5d:ab:3a:a5:24:
6d:18:89:b7:f0:0e:9b:40:77:57:b0:c0:14:2a:ae:16:f4:f5:
c6:a1:2e:77:5c:6d:1c:f6:31:f0:e1:a4:0f:8e:0b:20:c4:b6:
ed:c9:da:7d:da:e7:60:1f:53:1d:f0:ff:3a:f3:cf:97:87:e1:
11:e5:90:34:44:2e:11:cd:51:e1:e6:e9:d8:a4:9e:12:1e:d5:
21:f4:54:da:5f:9b:82:54:53:f7:ec:f0:0c:c9:0d:0c:e2:02:
12:de:93:7c:fc:54:8c:b2:b5:44:f3:39:a6:87:ab:66:83:38:
2d:6c:b7:4c:36:af:d5:c0:75:67:32:c1:03:65:4e:3b:81:79:
b3:f5:0e:33:2a:4d:49:ec:b1:38:79:e3:c1:64:b9:ba:98:b2:
bc:07:e9:0c:df:f6:54:ba:1e:a9:65:5a:e2:68:e7:a5:82:b7:
77:c2:d5:c9:35:3f:61:89:3a:44:25:85:40:15:e1:ff:af:96:
10:ef:21:de:27:22:de:19:95:a3:f2:0d:10:b3:c8:1c:b5:fb:
b8:b8:30:d9:24:c0:f3:52:38:10:c0:6e:07:e0:c5:b7:e9:b1:
d1:dd:95:cb:62:9e:54:2a:e4:e5:12:d8:29:93:f6:2e:95:a1:
18:09:23:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZu182YZfbTuxmhBV3uYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzBkNWIxMDZiODFhOTI5MjRlYTJiYzUxMzlmYmI1ZWUx
MTg2ZGQwHhcNMjUwODA2MjIwMTAzWhcNMjUwODA3MjIwMTAzWjAzMTEwLwYDVQQD
EyhiZjY2NDAzNjM1NDNkOTYyYTQzN2Q4NGQ3M2Y2MDA1NjhhMjliMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGgFPXzAQDiKS7KkYKkqT/jojoSm
J7UlNGhQTB7O5yN/3L2TSIfLc6pQU7+62AViyeYDw0E2/Nwu8tiABHvgFu2EqrY8
AlM9Hn2kUGqtXV1J6xOP1wc7mp6jjdN8J4uHM+AyJqArARrvuXN0Ks2NIgQ/Azp0
HH2FBlY5uRl7fNc4nsUo4tDkJ9rnBIPMx+aqaWGqgCPBWqMbZLNJy/kMAb3llmN3
sqoKoqM7ZUt8oghuxfTipkwL/uqV6m1HSmKwC7Ls3gtj2s92VvXcVCM/VfcLORU9
lzpS6/ISzMta+mvyj5/ZVtB/N5pcxqfIAfYJZwy29FgVa0J3rUayc+pzZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9mQDY1Q9lipDfYTXP2AFaKKbI/MB8GA1UdIwQY
MBaAFNPA1bEGuBqSkk6ivFE5+7XuEYbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYt
YmM1MTA0YTM4NWUyLzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYtYmM1MTA0YTM4NWUy
LzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaQ17fJf
v6cPQXbDd12rOqUkbRiJt/AOm0B3V7DAFCquFvT1xqEud1xtHPYx8OGkD44LIMS2
7cnafdrnYB9THfD/OvPPl4fhEeWQNEQuEc1R4ebp2KSeEh7VIfRU2l+bglRT9+zw
DMkNDOICEt6TfPxUjLK1RPM5poerZoM4LWy3TDav1cB1ZzLBA2VOO4F5s/UOMypN
SeyxOHnjwWS5upiyvAfpDN/2VLoeqWVa4mjnpYK3d8LVyTU/YYk6RCWFQBXh/6+W
EO8h3ici3hmVo/INELPIHLX7uLgw2STA81I4EMBuB+DFt+mx0d2Vy2KeVCrk5RLY
KZP2LpWhGAkjHw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:00:31 2025 by rpki-client