Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: 5bHwomrH6kxi3DM3S+UJXGp8RZxx+OWMxmDutlTj7c8=
Subject key identifier: AE:95:F2:CC:01:E8:61:8D:18:F1:B9:94:63:2A:3F:C7:6F:A9:19:33
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 01988EED531D2D1B2EB3D2635B46972BDF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 13:02:54 +0000
Manifest this update: Sat 09 Aug 2025 13:02:54 +0000
Manifest next update: Sun 10 Aug 2025 13:02:54 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: 0UHdtRPX8jOSGZEuJ9qJRqFvIhVz47hONy8vOmqbxqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:53:1d:2d:1b:2e:b3:d2:63:5b:46:97:2b:df:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Aug 9 13:02:54 2025 GMT
Not After : Aug 10 13:02:54 2025 GMT
Subject: CN=ae95f2cc01e8618d18f1b994632a3fc76fa91933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:bb:cd:07:e1:18:ae:9b:f4:25:e8:8b:8e:
cc:56:6c:ac:6f:07:fe:b7:aa:e2:66:f0:03:05:b0:
3a:b2:b4:b3:8e:c5:35:d3:6d:16:b2:8a:ea:fe:b1:
9a:ca:88:bf:f7:21:dd:e4:57:6a:02:03:46:a4:55:
9e:5d:c8:5a:5e:66:80:f8:0b:e6:3b:4c:ce:c6:4d:
00:ef:9a:93:57:91:60:28:8c:e5:be:54:63:6e:04:
71:24:63:ad:c8:97:bf:49:e4:8d:df:10:44:14:ec:
a5:34:a9:44:c3:11:9e:76:7f:7f:4c:6a:a9:d0:91:
d3:1e:00:37:f4:0d:d5:96:54:52:ec:be:16:ee:22:
5d:68:62:76:a2:6c:b9:71:03:48:3e:e4:4d:2e:68:
84:f8:fd:5a:43:2a:2e:d9:ae:59:06:0b:b0:0f:b3:
ef:e8:5d:19:09:ff:e2:a7:2f:18:d1:cf:ef:7e:be:
bc:ed:77:b7:af:f8:71:90:b1:42:da:61:cf:8d:6d:
17:ea:d7:42:90:44:31:b1:b9:ea:a0:64:be:16:b5:
8d:15:09:3b:31:20:52:d4:07:d9:41:a3:ae:74:cf:
eb:46:bf:44:47:66:4e:eb:6f:34:c0:b0:20:f4:9d:
7b:2c:1e:97:1e:15:47:71:dc:e3:9d:4c:52:ed:81:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:F2:CC:01:E8:61:8D:18:F1:B9:94:63:2A:3F:C7:6F:A9:19:33
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6c:af:00:ca:43:7d:e1:a9:70:10:8d:c6:72:6b:4e:d8:f3:
ca:df:25:a0:9a:02:70:72:06:e6:e4:08:46:fd:cc:a8:eb:89:
0d:78:e6:ad:88:32:6a:28:72:83:aa:e8:18:75:d5:0c:43:0b:
9f:82:e3:d2:89:c5:c6:5b:b2:df:f7:af:f7:32:0e:0e:44:73:
fd:8d:f4:66:af:e7:eb:b1:ef:26:a9:03:40:dd:89:83:f1:73:
43:cd:1f:e6:47:c4:f7:e4:e8:72:44:54:58:7e:3e:c8:9a:c5:
31:ad:64:79:74:7e:1b:3b:82:e0:ff:5d:3d:e2:27:8f:df:75:
87:a3:ac:d1:94:4e:35:bb:84:88:5a:09:da:7c:79:f6:08:73:
26:70:35:fd:6c:25:55:f5:21:11:a9:15:8f:8d:28:aa:11:cf:
77:c4:f6:ed:7d:f2:7b:ce:15:d2:6c:f4:37:6f:7c:a0:c6:e5:
45:8d:76:c9:cd:38:66:d5:ce:bd:06:c8:55:5e:fa:c2:a0:13:
5b:35:53:60:2a:77:fe:9d:66:b0:4d:4c:9c:8d:2a:c3:32:e0:
6e:26:7b:9b:26:c0:8c:ea:0e:93:ec:c5:fc:56:b9:e6:6a:64:
6e:0f:2a:0a:3b:42:e4:c9:74:b1:bd:93:51:4f:c1:d9:37:2f:
97:0b:5e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7VMdLRsus9JjW0aXK9+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWVlNjlmODlmMjQ1MmRjYWU4OTgyOTQ3YjJkMTQ2OTUz
Nzk2N2IwHhcNMjUwODA5MTMwMjU0WhcNMjUwODEwMTMwMjU0WjAzMTEwLwYDVQQD
EyhhZTk1ZjJjYzAxZTg2MThkMThmMWI5OTQ2MzJhM2ZjNzZmYTkxOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNu7zQfhGK6b9CXoi47MVmysbwf+
t6riZvADBbA6srSzjsU1020Wsorq/rGayoi/9yHd5FdqAgNGpFWeXchaXmaA+Avm
O0zOxk0A75qTV5FgKIzlvlRjbgRxJGOtyJe/SeSN3xBEFOylNKlEwxGedn9/TGqp
0JHTHgA39A3VllRS7L4W7iJdaGJ2omy5cQNIPuRNLmiE+P1aQyou2a5ZBguwD7Pv
6F0ZCf/ipy8Y0c/vfr687Xe3r/hxkLFC2mHPjW0X6tdCkEQxsbnqoGS+FrWNFQk7
MSBS1AfZQaOudM/rRr9ER2ZO6280wLAg9J17LB6XHhVHcdzjnUxS7YEfewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6V8swB6GGNGPG5lGMqP8dvqRkzMB8GA1UdIwQY
MBaAFPPu5p+J8kUtyuiYKUey0UaVN5Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTIt
N2M0MjcyMzRkNWZmLzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTItN2M0MjcyMzRkNWZm
LzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGyvAMpD
feGpcBCNxnJrTtjzyt8loJoCcHIG5uQIRv3MqOuJDXjmrYgyaihyg6roGHXVDEML
n4Lj0onFxluy3/ev9zIODkRz/Y30Zq/n67HvJqkDQN2Jg/FzQ80f5kfE9+TockRU
WH4+yJrFMa1keXR+GzuC4P9dPeInj991h6Os0ZRONbuEiFoJ2nx59ghzJnA1/Wwl
VfUhEakVj40oqhHPd8T27X3ye84V0mz0N298oMblRY12yc04ZtXOvQbIVV76wqAT
WzVTYCp3/p1msE1MnI0qwzLgbiZ7mybAjOoOk+zF/Fa55mpkbg8qCjtC5Ml0sb2T
UU/B2TcvlwteBA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:57 2025 by rpki-client