Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: Yayf/paXNVg63AiR/FOrGgiZChT+HP9NY+D0DX8a0EA=
Subject key identifier: 00:32:D4:8D:8B:C7:20:DA:9A:B5:1E:85:30:ED:74:36:50:AF:63:A6
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 019896A4DC483BBBB76FCBEC5256311171D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 01:00:43 +0000
Manifest this update: Mon 11 Aug 2025 01:00:43 +0000
Manifest next update: Tue 12 Aug 2025 01:00:43 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: daEOtNTUEuN6YQ3JklZjffvoAG8B1kmusrJ8LYYTZRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:dc:48:3b:bb:b7:6f:cb:ec:52:56:31:11:71:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Aug 11 01:00:43 2025 GMT
Not After : Aug 12 01:00:43 2025 GMT
Subject: CN=0032d48d8bc720da9ab51e8530ed743650af63a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:2b:ed:60:13:a8:62:8a:74:fc:22:fa:44:
5c:63:98:d2:07:cc:b9:ac:62:45:c5:58:b5:e8:79:
e3:d4:29:b1:f4:52:a5:82:af:1c:b2:04:0f:49:aa:
ce:69:6a:a8:8c:fb:da:33:bc:9a:eb:fa:97:ba:5b:
a5:55:8e:2b:c6:89:25:9f:b9:40:5a:b9:b9:b1:66:
ff:b5:09:ff:ba:07:af:68:de:8c:b2:35:92:23:5e:
ad:d1:2e:2f:0a:90:a9:87:43:a3:bb:c5:14:f5:fe:
0b:3b:05:53:5e:8c:bc:6d:03:66:c8:7b:dd:3d:c9:
ce:b0:fd:ec:37:c3:d0:0c:d4:62:f3:dd:7d:ce:b7:
af:82:fb:ed:e0:26:af:a3:ac:d5:4d:4c:6a:9b:a1:
d1:8a:1c:0d:ff:d7:f2:ff:6b:55:44:45:fb:a4:b5:
e2:9c:38:f0:16:35:47:a1:9d:22:5c:15:03:12:e7:
35:dd:37:88:d1:58:1b:86:aa:de:35:dd:0d:0c:01:
f9:9d:f0:fa:2d:54:d7:55:34:c8:1e:fc:cd:30:81:
09:6c:5f:76:e9:49:10:e8:05:d0:ed:be:10:88:80:
24:7e:41:c5:d0:ae:4e:5f:6d:14:43:e7:c9:af:39:
47:66:44:9f:54:37:8e:33:06:c1:51:e6:3e:3b:49:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:D4:8D:8B:C7:20:DA:9A:B5:1E:85:30:ED:74:36:50:AF:63:A6
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c1:dd:4d:00:35:64:11:6e:06:57:b7:3b:41:5d:e7:7c:86:
26:6e:85:55:43:0b:34:b0:dd:57:f3:b1:26:24:a5:01:c7:28:
76:e2:1f:b1:60:af:2c:bc:1b:c2:6b:2f:c7:d5:d6:3c:b8:09:
56:52:63:83:ee:86:b8:a0:f2:3d:7e:70:fe:7b:c0:07:cf:7d:
b0:93:41:8c:67:2f:bb:f0:98:2a:42:e9:a6:f5:4b:2f:7f:21:
aa:b3:6b:a1:f5:22:cf:23:7e:c9:0d:10:d1:5a:49:ff:fb:4b:
1c:6e:1a:99:b8:5e:f4:d8:41:de:bd:93:a0:d6:e0:66:d1:20:
09:20:1f:22:7c:46:d5:14:ad:ab:f0:38:38:5d:b5:9a:79:76:
cd:16:d8:4b:b1:a2:00:20:f5:00:98:6b:17:7e:a5:88:23:d0:
90:d6:64:a6:70:e8:28:fa:d5:6a:df:5a:b7:c6:b6:3e:1a:d4:
c7:b9:dd:66:c2:64:eb:c2:d0:cd:24:af:ad:3e:03:12:1c:c5:
b1:6e:d8:06:43:58:70:ef:8d:b9:01:33:d8:53:10:50:f6:c0:
11:b1:d2:4a:6e:e4:f1:d7:4e:6e:49:5b:44:04:c3:52:34:a9:
2b:11:1a:53:43:0e:f5:bb:d2:f8:cc:09:01:cd:23:18:09:36:
37:f4:44:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpNxIO7u3b8vsUlYxEXHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzgwODUxOWYyYjA4MDQ1YzdmYjQxYTYxZmRhNGUwOWU1
MTg5MWIwHhcNMjUwODExMDEwMDQzWhcNMjUwODEyMDEwMDQzWjAzMTEwLwYDVQQD
EygwMDMyZDQ4ZDhiYzcyMGRhOWFiNTFlODUzMGVkNzQzNjUwYWY2M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Ir7WATqGKKdPwi+kRcY5jSB8y5
rGJFxVi16Hnj1Cmx9FKlgq8csgQPSarOaWqojPvaM7ya6/qXululVY4rxokln7lA
Wrm5sWb/tQn/ugevaN6MsjWSI16t0S4vCpCph0Oju8UU9f4LOwVTXoy8bQNmyHvd
PcnOsP3sN8PQDNRi8919zrevgvvt4Cavo6zVTUxqm6HRihwN/9fy/2tVREX7pLXi
nDjwFjVHoZ0iXBUDEuc13TeI0VgbhqreNd0NDAH5nfD6LVTXVTTIHvzNMIEJbF92
6UkQ6AXQ7b4QiIAkfkHF0K5OX20UQ+fJrzlHZkSfVDeOMwbBUeY+O0mcEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAy1I2LxyDamrUehTDtdDZQr2OmMB8GA1UdIwQY
MBaAFPJ4CFGfKwgEXH+0GmH9pOCeUYkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjct
NTg1NWMxZDE0YzliLzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjctNTg1NWMxZDE0Yzli
LzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcHdTQA1
ZBFuBle3O0Fd53yGJm6FVUMLNLDdV/OxJiSlAccoduIfsWCvLLwbwmsvx9XWPLgJ
VlJjg+6GuKDyPX5w/nvAB899sJNBjGcvu/CYKkLppvVLL38hqrNrofUizyN+yQ0Q
0VpJ//tLHG4ambhe9NhB3r2ToNbgZtEgCSAfInxG1RStq/A4OF21mnl2zRbYS7Gi
ACD1AJhrF36liCPQkNZkpnDoKPrVat9at8a2PhrUx7ndZsJk68LQzSSvrT4DEhzF
sW7YBkNYcO+NuQEz2FMQUPbAEbHSSm7k8ddObklbRATDUjSpKxEaU0MO9bvS+MwJ
Ac0jGAk2N/REeQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:51:55 2025 by rpki-client