
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: a1BRs1/xnatuG60y8dHp8/qXB9PYWTjvY4HNX8I6/Rc=
Subject key identifier: F4:AD:E0:B7:D4:B0:A4:31:AF:85:DE:53:E6:48:F4:7A:B7:56:79:61
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 01988B45AFE34AE4B438D503FDEA314B3F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0D1A
Signing time: Fri 08 Aug 2025 20:00:56 +0000
Manifest this update: Fri 08 Aug 2025 20:00:56 +0000
Manifest next update: Sat 09 Aug 2025 20:00:56 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 1o3IHoOhAXHevzifkMT3Nc1VfWwRcZjLXwpoeWyLdBg=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:af:e3:4a:e4:b4:38:d5:03:fd:ea:31:4b:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Aug 8 20:00:56 2025 GMT
Not After : Aug 9 20:00:56 2025 GMT
Subject: CN=f4ade0b7d4b0a431af85de53e648f47ab7567961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:c5:2e:2a:2f:05:3e:d0:fa:75:7c:d9:9f:
d3:a9:8c:b9:07:01:01:a5:02:c1:e9:48:db:18:7a:
ac:c6:f9:fb:bd:b5:70:db:e7:35:3a:22:83:63:a6:
84:9d:ee:d8:7f:53:7e:0c:90:1e:ca:7f:27:d7:d4:
eb:b0:0d:7b:80:ba:cb:c7:a0:4f:62:91:80:8b:1f:
45:67:15:cb:97:a3:2d:f4:e3:f3:c5:79:d0:38:8b:
1e:2d:dc:34:aa:3c:4f:54:7c:81:a5:27:93:cf:8d:
07:fd:59:19:49:3b:4a:24:2c:50:3e:21:0f:3b:6b:
44:09:f4:50:43:64:fe:ed:ea:cf:f4:2c:3f:cb:74:
e6:0d:b5:84:aa:b0:1a:bd:18:9f:46:2b:40:55:95:
54:21:6e:e2:0f:4f:33:09:d3:db:48:fc:e7:f1:2d:
b8:87:43:b2:52:f7:13:13:9c:de:e9:f9:31:4c:10:
d9:55:96:73:d6:0d:b1:39:a2:6d:ca:17:f2:e4:d8:
e6:07:cf:a3:eb:39:db:f5:03:ad:d2:b6:d0:29:29:
b9:1f:43:e5:68:13:ad:41:9d:fb:85:0a:fd:5d:88:
d1:0d:5a:99:85:92:e9:fe:59:40:72:9e:fa:62:24:
db:0d:37:09:5d:bd:99:0a:0a:14:9c:1d:ec:2a:3a:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AD:E0:B7:D4:B0:A4:31:AF:85:DE:53:E6:48:F4:7A:B7:56:79:61
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:db:f7:06:fd:35:4c:1a:89:a9:76:45:d4:39:a4:d1:a2:
84:58:ac:63:0c:a2:24:42:22:9d:91:39:3d:16:fd:e7:37:7f:
e2:d5:20:1d:5a:60:3c:f5:cd:1e:e4:bc:6a:74:aa:a8:25:b7:
f7:4f:d6:30:11:bf:53:87:43:1d:08:b3:4b:fc:a5:e6:18:39:
c5:22:e2:14:9f:7c:8b:2c:1c:4e:a5:02:65:5e:81:01:13:3e:
a1:4b:f4:62:cc:1a:43:c4:51:94:5c:27:3e:82:fe:4d:6d:61:
77:76:13:45:9f:61:7a:3e:cb:3d:52:16:00:e5:96:6a:95:cf:
9a:ae:08:90:46:8d:27:29:70:ea:0a:19:86:20:c7:7a:09:55:
cc:45:78:ff:e2:61:28:07:e8:35:b3:23:36:da:a6:cc:40:b4:
1c:a7:0e:27:2e:67:c4:17:6b:82:f1:9a:7e:6c:12:57:7c:d8:
8b:80:e8:cc:5f:cf:54:46:64:ea:3e:bf:0b:e6:43:a5:f7:90:
42:1d:08:dc:b1:8a:9e:3e:86:ac:a1:4b:da:57:95:bb:3f:7f:
df:0f:d1:6a:fc:eb:89:77:b1:40:5f:d7:b2:0e:dc:56:25:71:
02:c4:05:eb:50:ed:80:6f:34:c8:26:85:c4:62:d7:8f:25:c0:
4e:9c:20:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRa/jSuS0ONUD/eoxSz+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl
ODI2ZDQwHhcNMjUwODA4MjAwMDU2WhcNMjUwODA5MjAwMDU2WjAzMTEwLwYDVQQD
EyhmNGFkZTBiN2Q0YjBhNDMxYWY4NWRlNTNlNjQ4ZjQ3YWI3NTY3OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm/FLiovBT7Q+nV82Z/TqYy5BwEB
pQLB6UjbGHqsxvn7vbVw2+c1OiKDY6aEne7Yf1N+DJAeyn8n19TrsA17gLrLx6BP
YpGAix9FZxXLl6Mt9OPzxXnQOIseLdw0qjxPVHyBpSeTz40H/VkZSTtKJCxQPiEP
O2tECfRQQ2T+7erP9Cw/y3TmDbWEqrAavRifRitAVZVUIW7iD08zCdPbSPzn8S24
h0OyUvcTE5ze6fkxTBDZVZZz1g2xOaJtyhfy5NjmB8+j6znb9QOt0rbQKSm5H0Pl
aBOtQZ37hQr9XYjRDVqZhZLp/llAcp76YiTbDTcJXb2ZCgoUnB3sKjr0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSt4LfUsKQxr4XeU+ZI9Hq3VnlhMB8GA1UdIwQY
MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt
M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0
LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3Hb9wb9
NUwaial2RdQ5pNGihFisYwyiJEIinZE5PRb95zd/4tUgHVpgPPXNHuS8anSqqCW3
90/WMBG/U4dDHQizS/yl5hg5xSLiFJ98iywcTqUCZV6BARM+oUv0YswaQ8RRlFwn
PoL+TW1hd3YTRZ9hej7LPVIWAOWWapXPmq4IkEaNJylw6goZhiDHeglVzEV4/+Jh
KAfoNbMjNtqmzEC0HKcOJy5nxBdrgvGafmwSV3zYi4DozF/PVEZk6j6/C+ZDpfeQ
Qh0I3LGKnj6GrKFL2leVuz9/3w/RavzriXexQF/Xsg7cViVxAsQF61DtgG80yCaF
xGLXjyXATpwgvQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:44 2025 by rpki-client