Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: xNUQeIHxW6n13fZoH/uhc4/5XFf2DdaxNRlMMTAAsuk=
Subject key identifier: 06:79:BA:F2:EC:99:01:B8:21:7E:87:D1:4E:BC:6C:8F:89:ED:0C:33
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 01987ABFF61D7C1AF3CC2E2A00BE566A0CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 07BF
Signing time: Tue 05 Aug 2025 15:00:57 +0000
Manifest this update: Tue 05 Aug 2025 15:00:57 +0000
Manifest next update: Wed 06 Aug 2025 15:00:57 +0000
Files and hashes: 1: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: vILj+RYf2hqo58xbzAYqwDimBcl/J8esx4owR3B2c/w=)
2: DReP9bc0zwfbsr8Nie7Lz--WV3I.roa (hash: bjq88usQ48nTatb5B4QsLmgQZv99AHE50C/OVUr97Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:f6:1d:7c:1a:f3:cc:2e:2a:00:be:56:6a:0c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Aug 5 15:00:57 2025 GMT
Not After : Aug 6 15:00:57 2025 GMT
Subject: CN=0679baf2ec9901b8217e87d14ebc6c8f89ed0c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:94:89:98:cb:c3:c4:aa:7d:3c:53:d8:08:
76:36:36:4c:25:41:0d:a1:b0:c8:a2:25:1e:49:56:
84:37:5d:68:c8:2c:1c:66:c0:cf:46:3b:9c:e9:00:
ba:49:92:e4:54:4f:96:ec:ed:da:35:45:7f:16:59:
b9:61:3c:63:29:ba:a8:4d:97:0d:5e:c2:d8:e9:3b:
72:23:64:a9:fe:a7:e7:ca:b1:cb:ae:f4:ba:9b:83:
a2:6d:92:1d:58:3e:f8:4b:33:2a:5b:96:3a:6d:3c:
3b:c1:4c:7c:02:f2:bf:e5:57:d1:6c:1e:2a:b5:72:
19:cf:92:50:7a:c8:03:51:99:11:00:fb:d8:cc:eb:
df:46:d4:db:32:45:61:44:e3:1c:bd:74:c3:85:1e:
98:00:f7:45:9c:eb:53:d3:be:6a:e7:ec:5d:f5:f6:
91:ac:bb:70:78:ee:62:70:3d:a5:b7:5c:0e:81:59:
a5:17:05:dc:c9:4f:71:77:19:1b:d4:e1:87:9a:da:
3e:5f:27:75:36:48:a4:73:fb:7e:b3:63:1a:b5:37:
93:59:d2:02:38:02:de:c0:90:20:77:55:74:5a:3f:
01:ca:d3:b3:2b:e4:9a:81:d1:7a:51:30:af:5a:6b:
73:aa:46:78:12:87:80:e5:d3:75:2c:08:0e:3a:ab:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:BA:F2:EC:99:01:B8:21:7E:87:D1:4E:BC:6C:8F:89:ED:0C:33
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e7:50:86:81:a0:ba:39:4c:fe:4d:1b:e1:b6:58:38:29:85:
ff:77:67:2c:83:67:2d:0d:fe:64:5b:1b:23:e2:4e:53:7f:98:
c0:a0:b2:78:6e:0b:0e:8a:10:10:f2:b0:a7:1d:31:c3:5f:19:
a7:ae:d3:47:fd:b9:d9:a0:e1:70:7f:27:51:f9:ac:bc:d2:78:
96:b2:3c:36:08:80:8b:f9:27:fe:18:f8:61:e2:8d:6f:b8:a2:
00:01:45:bf:da:24:99:a3:69:23:60:34:13:9e:b8:80:5a:f3:
8c:83:36:71:f8:09:e6:35:47:26:ac:a2:9d:6d:a5:3a:18:9c:
e2:9a:c9:57:47:67:cc:df:43:96:a4:de:b3:b2:ba:3e:ce:7d:
06:9a:7b:44:33:00:de:c8:5d:45:1e:ae:72:f7:ec:da:13:e7:
25:c6:1d:b5:51:ec:5d:75:b5:89:b8:b9:f2:63:d1:33:1f:30:
41:33:84:ea:97:e2:b9:f6:21:b2:a8:6a:e8:93:3b:67:22:7e:
8e:b4:7f:cc:0c:a2:38:7c:b6:78:38:e1:6e:3b:1c:bd:91:89:
78:0c:ad:ba:f1:5b:16:53:39:63:58:07:09:b2:d0:d5:52:86:
44:32:03:d0:0e:1a:0b:48:75:b5:17:5a:6b:60:d3:db:6a:85:
03:df:82:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6v/YdfBrzzC4qAL5WagynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzA3NDc5Zjk5MWI1MDQzYjdkMzdmN2Y4ZmQ5MDQ2NmEy
YWJmMjcwHhcNMjUwODA1MTUwMDU3WhcNMjUwODA2MTUwMDU3WjAzMTEwLwYDVQQD
EygwNjc5YmFmMmVjOTkwMWI4MjE3ZTg3ZDE0ZWJjNmM4Zjg5ZWQwYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1WUiZjLw8SqfTxT2Ah2NjZMJUEN
obDIoiUeSVaEN11oyCwcZsDPRjuc6QC6SZLkVE+W7O3aNUV/Flm5YTxjKbqoTZcN
XsLY6TtyI2Sp/qfnyrHLrvS6m4OibZIdWD74SzMqW5Y6bTw7wUx8AvK/5VfRbB4q
tXIZz5JQesgDUZkRAPvYzOvfRtTbMkVhROMcvXTDhR6YAPdFnOtT075q5+xd9faR
rLtweO5icD2lt1wOgVmlFwXcyU9xdxkb1OGHmto+Xyd1Nkikc/t+s2MatTeTWdIC
OALewJAgd1V0Wj8BytOzK+SagdF6UTCvWmtzqkZ4EoeA5dN1LAgOOqttewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ5uvLsmQG4IX6H0U68bI+J7QwzMB8GA1UdIwQY
MBaAFPEwdHn5kbUEO3039/j9kEZqKr8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgt
YjZhYTBiODkyMGU1LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgtYjZhYTBiODkyMGU1
LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGedQhoGg
ujlM/k0b4bZYOCmF/3dnLINnLQ3+ZFsbI+JOU3+YwKCyeG4LDooQEPKwpx0xw18Z
p67TR/252aDhcH8nUfmsvNJ4lrI8NgiAi/kn/hj4YeKNb7iiAAFFv9okmaNpI2A0
E564gFrzjIM2cfgJ5jVHJqyinW2lOhic4prJV0dnzN9DlqTes7K6Ps59Bpp7RDMA
3shdRR6ucvfs2hPnJcYdtVHsXXW1ibi58mPRMx8wQTOE6pfiufYhsqhq6JM7ZyJ+
jrR/zAyiOHy2eDjhbjscvZGJeAytuvFbFlM5Y1gHCbLQ1VKGRDID0A4aC0h1tRda
a2DT22qFA9+CGg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:45:41 2025 by rpki-client