Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: kkASTRN4iTVFF7+7xHnxrCNMNHBwwnCkvVrY4ZiMWpc=
Subject key identifier: 7E:5C:66:60:7B:F7:F2:F3:2B:78:86:AD:E6:5C:AC:C3:59:DE:06:8F
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 01988A32D27A2AE65256A0F0D6519B68455D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0C7E
Signing time: Fri 08 Aug 2025 15:00:43 +0000
Manifest this update: Fri 08 Aug 2025 15:00:43 +0000
Manifest next update: Sat 09 Aug 2025 15:00:43 +0000
Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: TeLsceLy2+BbggF130N0E6/q8jYpEgavdWnNTz5F8sg=)
3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:d2:7a:2a:e6:52:56:a0:f0:d6:51:9b:68:45:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Aug 8 15:00:43 2025 GMT
Not After : Aug 9 15:00:43 2025 GMT
Subject: CN=7e5c66607bf7f2f32b7886ade65cacc359de068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:c1:aa:88:e6:e1:0d:43:dc:12:c1:f8:bc:
7f:e5:77:63:ed:1a:ac:c4:01:4b:d4:be:a6:2a:24:
bb:2b:56:fd:12:4a:4b:e5:95:d7:ae:fd:e8:20:8c:
29:3f:e3:ad:98:15:c4:1c:59:9d:52:e2:49:2f:05:
d6:ea:fb:97:f6:7a:ed:59:be:5d:a7:75:d3:cf:12:
26:3f:0f:d4:ed:15:9e:4b:87:86:37:e0:2d:ce:95:
3b:55:fd:93:0d:25:90:89:62:f6:9d:af:50:bf:cd:
c2:a0:5c:26:c8:e8:ba:81:fe:89:d2:2f:cb:43:df:
a9:ab:8f:38:38:07:7d:8e:52:cb:18:57:4f:bd:ea:
49:4c:91:d9:9e:a7:38:a5:73:6b:1d:a3:33:b5:27:
9f:84:a5:9b:dc:79:4e:46:af:c6:ba:d4:95:1e:b5:
e4:2f:23:93:77:70:c6:23:7f:bd:c6:31:d7:72:f9:
e0:eb:71:27:3f:9d:2b:f7:37:7b:7a:e4:7c:bc:08:
e6:47:f9:4e:2e:f5:ef:14:8a:47:34:50:2f:d8:83:
da:ba:14:55:ad:51:3a:49:7d:9d:63:b6:b3:7b:83:
62:77:e2:cb:cf:a6:19:52:c6:dc:a0:58:9c:d7:8f:
70:44:c8:8f:1b:38:4c:e4:27:07:98:90:ec:65:bc:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:66:60:7B:F7:F2:F3:2B:78:86:AD:E6:5C:AC:C3:59:DE:06:8F
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:42:08:8c:e9:ec:fd:0c:6b:24:b0:38:45:f8:19:40:12:6c:
5d:36:c7:e0:e9:84:56:61:f1:e7:b8:15:1e:9f:63:4d:39:af:
bf:84:d7:58:d8:24:76:a6:76:1f:f6:db:ba:f6:19:e0:35:32:
8d:fc:42:eb:77:7c:67:5a:a0:e0:76:07:42:9f:c5:3f:37:e6:
14:3c:91:7e:b4:e4:56:99:e1:1f:1c:59:ac:23:93:a6:de:08:
83:b7:70:86:ba:69:86:f2:7f:aa:9f:8a:38:bf:2f:58:f9:8f:
75:b2:53:3c:47:26:6e:1c:be:cf:ff:82:f5:67:cf:09:15:24:
53:ac:db:8c:e7:85:b7:af:96:47:1f:66:c6:a4:e2:95:66:2a:
1a:b5:2f:92:a9:0d:cf:34:82:d5:a3:db:76:00:87:6a:91:a6:
e8:73:3c:4b:29:a8:93:2e:20:1c:b4:52:3a:87:b2:73:e6:d5:
67:c1:bc:58:b5:60:ae:f0:18:3f:d9:65:74:c6:47:3e:ef:a9:
58:cc:7c:80:59:d1:9a:07:de:c7:b8:37:ca:fd:38:38:b7:83:
5d:19:5c:bc:1e:72:d2:11:30:ab:8a:63:05:09:b2:78:e9:c4:
e1:5c:6c:3e:1c:90:2a:25:e0:9d:dd:1b:3f:7f:a9:f3:e9:b5:
0c:f3:76:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKMtJ6KuZSVqDw1lGbaEVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0
NjM3NDIwHhcNMjUwODA4MTUwMDQzWhcNMjUwODA5MTUwMDQzWjAzMTEwLwYDVQQD
Eyg3ZTVjNjY2MDdiZjdmMmYzMmI3ODg2YWRlNjVjYWNjMzU5ZGUwNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmjBqojm4Q1D3BLB+Lx/5Xdj7Rqs
xAFL1L6mKiS7K1b9EkpL5ZXXrv3oIIwpP+OtmBXEHFmdUuJJLwXW6vuX9nrtWb5d
p3XTzxImPw/U7RWeS4eGN+AtzpU7Vf2TDSWQiWL2na9Qv83CoFwmyOi6gf6J0i/L
Q9+pq484OAd9jlLLGFdPvepJTJHZnqc4pXNrHaMztSefhKWb3HlORq/GutSVHrXk
LyOTd3DGI3+9xjHXcvng63EnP50r9zd7euR8vAjmR/lOLvXvFIpHNFAv2IPauhRV
rVE6SX2dY7aze4Nid+LLz6YZUsbcoFic149wRMiPGzhM5CcHmJDsZbw6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5cZmB79/LzK3iGreZcrMNZ3gaPMB8GA1UdIwQY
MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt
MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh
LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEIIjOns
/QxrJLA4RfgZQBJsXTbH4OmEVmHx57gVHp9jTTmvv4TXWNgkdqZ2H/bbuvYZ4DUy
jfxC63d8Z1qg4HYHQp/FPzfmFDyRfrTkVpnhHxxZrCOTpt4Ig7dwhrpphvJ/qp+K
OL8vWPmPdbJTPEcmbhy+z/+C9WfPCRUkU6zbjOeFt6+WRx9mxqTilWYqGrUvkqkN
zzSC1aPbdgCHapGm6HM8Symoky4gHLRSOoeyc+bVZ8G8WLVgrvAYP9lldMZHPu+p
WMx8gFnRmgfex7g3yv04OLeDXRlcvB5y0hEwq4pjBQmyeOnE4VxsPhyQKiXgnd0b
P3+p8+m1DPN2HA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:35 2025 by rpki-client