Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: bn6a3HnJZ9/gSmE9EOtBISm847r4ifnFoliH7T/ay2c=
Subject key identifier: 99:91:55:43:76:AB:CA:1A:B0:62:E3:9C:20:BF:3D:0F:65:AB:E1:FD
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 0198816874E48D8742CAE3689A9EE1170DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 079D
Signing time: Wed 06 Aug 2025 22:02:42 +0000
Manifest this update: Wed 06 Aug 2025 22:02:42 +0000
Manifest next update: Thu 07 Aug 2025 22:02:42 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: gLJi6fphLCFMlpCBMF9EZKs/pjzkJjviuuxVXNQ2Ois=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:74:e4:8d:87:42:ca:e3:68:9a:9e:e1:17:0d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Aug 6 22:02:42 2025 GMT
Not After : Aug 7 22:02:42 2025 GMT
Subject: CN=9991554376abca1ab062e39c20bf3d0f65abe1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:cc:1d:3b:50:a8:f4:e9:10:18:8e:d6:34:
36:15:28:7d:40:5e:f1:34:65:95:8b:0d:5a:65:aa:
53:0f:e5:a7:80:81:c4:86:97:e8:f9:48:e7:5e:ad:
d7:a6:59:8f:82:7b:dc:d7:78:93:ee:b8:05:41:9b:
7c:c3:a0:1a:07:10:d0:54:35:db:6d:7e:ff:88:ad:
ad:b2:5c:0f:c5:2a:2f:53:4e:7f:33:5d:9c:aa:78:
d3:f8:b4:cb:1a:37:72:70:c7:23:b6:32:e1:69:d1:
57:b8:83:92:28:2a:2a:d4:52:7b:bc:c8:48:56:36:
04:2b:85:60:35:b2:00:22:ef:95:43:04:73:0d:b7:
a9:9c:4a:52:40:0b:3d:76:5f:07:76:67:7a:d7:1f:
2d:ee:96:08:a3:77:e7:7f:57:85:ba:d1:a9:69:7a:
a0:d7:b7:1c:d1:18:85:de:5a:5c:8a:c4:6d:dc:b6:
80:4c:59:a7:35:41:0a:58:a1:f6:b2:34:0f:60:c4:
c1:14:83:12:83:14:6b:8d:41:0a:a1:ce:b0:ae:ee:
a5:30:ae:73:8c:f2:87:b6:4a:5f:ef:7b:5e:8c:41:
43:26:23:5f:f6:24:eb:04:c0:5e:4e:ce:bf:91:56:
cf:34:91:bb:81:e5:12:b8:df:a3:56:79:89:f2:e1:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:55:43:76:AB:CA:1A:B0:62:E3:9C:20:BF:3D:0F:65:AB:E1:FD
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:19:e3:af:1c:4a:de:a5:40:a0:d1:d1:36:93:a1:d3:e7:9f:
7c:38:ae:0c:f0:fd:1a:1a:a0:38:21:ff:1a:97:05:ab:98:c1:
50:8a:6e:30:c9:fc:65:24:b6:ed:73:a5:36:33:24:6d:08:60:
35:bb:a6:02:62:ff:f4:b2:ba:e2:dc:1a:a7:a1:0b:73:6e:4e:
2e:92:3d:dc:a8:5b:31:5e:c9:ce:37:97:7c:14:70:84:99:87:
1d:76:57:67:da:e3:9c:31:16:5d:25:aa:43:69:98:77:d3:4c:
af:e8:71:78:16:cb:c8:18:f1:41:f8:1d:d4:70:67:34:23:3c:
37:b1:a9:ad:83:92:cc:ab:0b:f2:f8:a6:48:5a:6b:23:5a:1c:
25:87:f0:ae:05:34:32:43:1f:95:12:ff:4f:1d:74:c0:7f:97:
2c:37:30:d1:cf:78:d6:9b:d0:3f:bd:ac:f4:0d:e9:28:58:b9:
95:4b:77:13:bd:5c:1c:54:22:91:97:81:14:42:e5:43:2d:c4:
59:47:bc:16:c5:fa:c4:b6:77:cf:8f:ed:ee:a0:b0:19:6a:d8:
57:94:87:97:1e:c3:57:16:f4:e2:f1:34:71:3f:11:f7:70:02:
16:e0:90:16:5d:4b:8a:57:e3:8a:75:79:74:fe:ae:4c:a3:1f:
26:a2:f1:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaHTkjYdCyuNomp7hFw2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy
NTQ0MjkwHhcNMjUwODA2MjIwMjQyWhcNMjUwODA3MjIwMjQyWjAzMTEwLwYDVQQD
Eyg5OTkxNTU0Mzc2YWJjYTFhYjA2MmUzOWMyMGJmM2QwZjY1YWJlMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy/MHTtQqPTpEBiO1jQ2FSh9QF7x
NGWViw1aZapTD+WngIHEhpfo+UjnXq3XplmPgnvc13iT7rgFQZt8w6AaBxDQVDXb
bX7/iK2tslwPxSovU05/M12cqnjT+LTLGjdycMcjtjLhadFXuIOSKCoq1FJ7vMhI
VjYEK4VgNbIAIu+VQwRzDbepnEpSQAs9dl8Hdmd61x8t7pYIo3fnf1eFutGpaXqg
17cc0RiF3lpcisRt3LaATFmnNUEKWKH2sjQPYMTBFIMSgxRrjUEKoc6wru6lMK5z
jPKHtkpf73tejEFDJiNf9iTrBMBeTs6/kVbPNJG7geUSuN+jVnmJ8uEZLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmRVUN2q8oasGLjnCC/PQ9lq+H9MB8GA1UdIwQY
MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt
NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw
LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRnjrxxK
3qVAoNHRNpOh0+effDiuDPD9GhqgOCH/GpcFq5jBUIpuMMn8ZSS27XOlNjMkbQhg
NbumAmL/9LK64twap6ELc25OLpI93KhbMV7JzjeXfBRwhJmHHXZXZ9rjnDEWXSWq
Q2mYd9NMr+hxeBbLyBjxQfgd1HBnNCM8N7GprYOSzKsL8vimSFprI1ocJYfwrgU0
MkMflRL/Tx10wH+XLDcw0c941pvQP72s9A3pKFi5lUt3E71cHFQikZeBFELlQy3E
WUe8FsX6xLZ3z4/t7qCwGWrYV5SHlx7DVxb04vE0cT8R93ACFuCQFl1LilfjinV5
dP6uTKMfJqLx5A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:02 2025 by rpki-client