
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier: q9w0mjDB5KxxTQd0cItN2LOiAIhhnPL7ti5XjI8d74A=
Subject key identifier: 12:61:AE:B6:3D:E8:5D:DA:66:40:13:A4:3D:45:AB:11:41:F9:FA:AB
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial: 01987B9D8DA3A7205C9714569A3935D8B59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number: 0C48
Signing time: Tue 05 Aug 2025 19:02:59 +0000
Manifest this update: Tue 05 Aug 2025 19:02:59 +0000
Manifest next update: Wed 06 Aug 2025 19:02:59 +0000
Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: D6bG3aP/7FWGIwPHe28um1RAVXTAsTeLs/GW4pGPS8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:8d:a3:a7:20:5c:97:14:56:9a:39:35:d8:b5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Validity
Not Before: Aug 5 19:02:59 2025 GMT
Not After : Aug 6 19:02:59 2025 GMT
Subject: CN=1261aeb63de85dda664013a43d45ab1141f9faab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:02:2b:39:d0:15:8b:c5:81:5f:48:4d:68:
e6:07:1a:a5:b3:f5:8a:f0:4a:19:99:99:36:0a:ec:
28:50:9c:9f:a8:91:c5:38:5d:a4:05:88:e0:20:a8:
25:82:96:af:5a:c4:86:76:3f:f0:ef:2e:49:35:26:
37:27:ee:ab:c4:9c:4d:f6:31:b8:7f:66:50:7f:70:
a3:0e:3e:32:5d:8d:c6:cf:14:2c:9e:ad:37:f0:ff:
9c:8a:1f:48:0b:6a:1b:2f:a2:13:db:9e:34:04:e2:
20:a9:ec:f5:60:19:fe:a3:a4:7e:1e:df:c6:69:b2:
a1:c2:0a:3a:18:cc:5c:a2:62:68:49:dc:0d:7f:11:
51:3b:c9:ac:83:6f:d3:4d:2e:cb:20:b8:ef:01:eb:
a3:5b:d4:52:35:2e:cf:86:b6:31:fa:69:3d:fb:e2:
47:67:2e:ea:44:8e:71:2b:26:4e:37:9f:c5:9e:a5:
c5:7c:a5:3a:73:9e:b0:0c:a0:58:45:d8:cf:d1:bc:
31:8f:63:e2:f9:5d:95:c0:51:99:0f:4c:da:f3:d4:
14:f8:29:6b:4b:81:3a:e4:22:ce:1e:0b:d2:4e:83:
b4:75:e1:a4:ab:eb:7f:18:a2:13:46:3a:e9:0d:e4:
04:83:ba:31:3e:6f:cf:fb:48:73:0c:4d:25:73:4f:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:AE:B6:3D:E8:5D:DA:66:40:13:A4:3D:45:AB:11:41:F9:FA:AB
X509v3 Authority Key Identifier:
keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f7:70:31:90:10:1f:8f:ce:16:26:c2:5b:8a:c4:3e:89:92:
2c:db:8e:8e:49:3e:b3:80:be:34:c2:14:b8:79:50:fe:c5:62:
06:b3:a0:76:4d:95:1e:b1:63:68:36:98:e9:f8:4c:f8:32:be:
cc:29:f2:89:55:93:17:2e:e6:37:9d:e1:05:6c:c7:73:eb:c7:
e9:a4:7d:49:02:cd:d0:d2:71:3c:73:57:b5:55:00:e2:3e:b2:
33:19:46:ce:3f:7b:6d:e3:e9:1c:f4:45:29:6a:26:fa:44:15:
64:7b:cd:83:b8:9d:75:0f:b5:54:ab:1e:db:de:c3:4a:04:ca:
15:92:0f:dd:d4:a4:6b:3e:74:e3:ad:89:22:04:65:9f:e0:b6:
f0:50:d2:4f:09:df:de:16:6b:80:d4:b4:20:a3:a2:bb:00:85:
54:51:49:27:65:0a:21:b2:4b:b9:53:ab:6d:44:6a:80:27:b6:
e9:f3:4d:66:72:0c:76:3a:8f:68:09:b3:51:e6:13:01:44:62:
26:2e:64:fd:d7:c4:aa:3b:0f:3d:c6:d2:0f:a3:f8:79:f4:d8:
45:ac:79:a4:f0:5f:3a:f1:db:8e:9a:b0:19:a6:10:fa:6a:af:
37:28:9d:5c:4b:ba:c6:bd:2a:28:8b:a6:9a:3c:92:a3:39:4f:
41:88:0c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nY2jpyBclxRWmjk12LWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzBkNjQwNzUyODUzODY0MmZiMGQzZDQzNDY2MTVmZWE3
MWRjMmUwHhcNMjUwODA1MTkwMjU5WhcNMjUwODA2MTkwMjU5WjAzMTEwLwYDVQQD
EygxMjYxYWViNjNkZTg1ZGRhNjY0MDEzYTQzZDQ1YWIxMTQxZjlmYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8MCKznQFYvFgV9ITWjmBxqls/WK
8EoZmZk2CuwoUJyfqJHFOF2kBYjgIKglgpavWsSGdj/w7y5JNSY3J+6rxJxN9jG4
f2ZQf3CjDj4yXY3GzxQsnq038P+cih9IC2obL6IT2540BOIgqez1YBn+o6R+Ht/G
abKhwgo6GMxcomJoSdwNfxFRO8msg2/TTS7LILjvAeujW9RSNS7PhrYx+mk9++JH
Zy7qRI5xKyZON5/FnqXFfKU6c56wDKBYRdjP0bwxj2Pi+V2VwFGZD0za89QU+Clr
S4E65CLOHgvSToO0deGkq+t/GKITRjrpDeQEg7oxPm/P+0hzDE0lc08mzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJhrrY96F3aZkATpD1FqxFB+fqrMB8GA1UdIwQY
MBaAFI/A1kB1KFOGQvsNPUNGYV/qcdwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NzQyODItNWY1Yy00NWU0LWJmYmYt
NDVmNTc3OWQ4Y2I0LzEvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80NzQyODItNWY1Yy00NWU0LWJmYmYtNDVmNTc3OWQ4Y2I0
LzEvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPdwMZAQ
H4/OFibCW4rEPomSLNuOjkk+s4C+NMIUuHlQ/sViBrOgdk2VHrFjaDaY6fhM+DK+
zCnyiVWTFy7mN53hBWzHc+vH6aR9SQLN0NJxPHNXtVUA4j6yMxlGzj97bePpHPRF
KWom+kQVZHvNg7iddQ+1VKse297DSgTKFZIP3dSkaz50462JIgRln+C28FDSTwnf
3hZrgNS0IKOiuwCFVFFJJ2UKIbJLuVOrbURqgCe26fNNZnIMdjqPaAmzUeYTAURi
Ji5k/dfEqjsPPcbSD6P4efTYRax5pPBfOvHbjpqwGaYQ+mqvNyidXEu6xr0qKIum
mjySozlPQYgMbQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:18 2025 by rpki-client