Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: oFKhvw93Y+ssxx+IAkved+HwBq67OiS2TysDIhlW4HQ=
Subject key identifier: 95:F7:B5:F4:CC:F9:73:DC:CF:16:B3:05:F7:D1:69:52:31:E1:6C:B5
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 01988D6B0A3092AE25616C62DE750F7958D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 06E5
Signing time: Sat 09 Aug 2025 06:00:58 +0000
Manifest this update: Sat 09 Aug 2025 06:00:58 +0000
Manifest next update: Sun 10 Aug 2025 06:00:58 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: 5xPbtMe+DegTTE9oOXwIoUqcVgoGri65Na9DifZdLzg=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:0a:30:92:ae:25:61:6c:62:de:75:0f:79:58:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Aug 9 06:00:58 2025 GMT
Not After : Aug 10 06:00:58 2025 GMT
Subject: CN=95f7b5f4ccf973dccf16b305f7d1695231e16cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:97:48:a2:49:77:64:3a:a2:75:a4:22:5f:d4:
a8:5a:64:cf:de:5e:91:0d:1a:ed:a0:bc:4c:57:ba:
61:0a:29:88:aa:1d:bc:5e:73:64:98:8e:4f:5f:db:
e0:17:b5:41:15:f7:bf:bc:ed:8a:6c:10:ab:5d:4e:
87:b2:cc:03:3c:21:7d:76:98:3b:0a:42:f5:bf:d2:
fa:92:3c:a9:92:c2:0c:91:73:da:0f:58:ab:e5:49:
c0:0a:b0:ad:b2:2f:5b:a8:c7:14:f7:40:56:a2:97:
16:87:79:ce:b5:c9:04:a5:37:9b:6a:0e:35:11:fc:
73:39:b7:fb:d3:0f:a1:0a:9f:71:3c:d5:b9:f2:18:
83:6d:b3:22:4e:95:f9:46:c5:b9:1e:26:81:ef:75:
60:80:7d:02:34:0e:d3:2a:98:18:b2:b3:1d:09:45:
cb:dd:37:61:a4:76:c9:65:e2:df:09:b8:66:c9:79:
b0:ed:1b:36:b2:ef:94:29:52:cc:87:b0:a1:cf:e6:
a3:ca:60:d4:98:b4:6a:8e:8b:3d:65:48:68:34:d8:
55:88:0f:35:87:60:9c:61:68:0c:43:32:04:e2:c0:
c9:48:b6:e1:9e:88:a3:a9:13:fd:7d:62:e4:75:1a:
c1:34:78:2d:3c:e4:3e:6d:4e:4e:a6:c8:be:fe:6d:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F7:B5:F4:CC:F9:73:DC:CF:16:B3:05:F7:D1:69:52:31:E1:6C:B5
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:aa:9e:7d:b8:ed:5e:55:07:42:3a:15:67:a1:ce:b4:fd:7c:
b2:77:1e:0a:04:20:67:b5:5f:ac:18:76:c7:db:8a:92:63:0e:
6b:a3:ca:3f:bd:dd:b3:3e:ef:ae:8a:24:97:c7:92:03:fa:e8:
bd:03:cf:1b:61:1f:c6:9d:d0:e1:92:5d:80:09:03:1e:f2:b5:
16:ac:fb:61:1c:4c:41:2a:76:97:63:52:f0:0f:87:76:5f:fb:
e6:65:25:46:4a:e8:bb:20:5a:55:3e:ad:56:4e:67:a2:0f:38:
f8:c4:1d:3a:47:f1:cb:87:70:ef:cd:c3:b6:1d:38:60:cd:b5:
41:56:13:c7:bc:a7:a4:ea:b2:95:32:7e:14:c4:96:a0:7f:68:
1f:d4:61:08:01:5c:1e:33:ef:95:98:55:f2:a8:81:2e:6b:fa:
dd:9e:28:20:d2:36:24:07:45:42:f3:c1:29:6e:f1:d2:8f:4a:
d5:a3:fc:82:bc:71:4f:4e:8d:19:5b:00:2d:6d:ec:27:14:a9:
4a:c3:5f:0d:44:58:ba:bf:20:36:34:38:ce:6f:e9:5f:2e:49:
c2:2d:b3:f5:28:80:d2:77:5b:07:72:2f:94:1f:40:f4:db:2c:
f0:3c:24:48:d1:fc:6e:c6:e0:3d:d1:6a:3b:28:39:02:a5:05:
09:be:c3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNawowkq4lYWxi3nUPeVjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1
ZGQ1N2UwHhcNMjUwODA5MDYwMDU4WhcNMjUwODEwMDYwMDU4WjAzMTEwLwYDVQQD
Eyg5NWY3YjVmNGNjZjk3M2RjY2YxNmIzMDVmN2QxNjk1MjMxZTE2Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpdIokl3ZDqidaQiX9SoWmTP3l6R
DRrtoLxMV7phCimIqh28XnNkmI5PX9vgF7VBFfe/vO2KbBCrXU6HsswDPCF9dpg7
CkL1v9L6kjypksIMkXPaD1ir5UnACrCtsi9bqMcU90BWopcWh3nOtckEpTebag41
EfxzObf70w+hCp9xPNW58hiDbbMiTpX5RsW5HiaB73VggH0CNA7TKpgYsrMdCUXL
3TdhpHbJZeLfCbhmyXmw7Rs2su+UKVLMh7Chz+ajymDUmLRqjos9ZUhoNNhViA81
h2CcYWgMQzIE4sDJSLbhnoijqRP9fWLkdRrBNHgtPOQ+bU5Opsi+/m3C4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJX3tfTM+XPczxazBffRaVIx4Wy1MB8GA1UdIwQY
MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt
NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl
LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqqefbjt
XlUHQjoVZ6HOtP18snceCgQgZ7VfrBh2x9uKkmMOa6PKP73dsz7vrookl8eSA/ro
vQPPG2Efxp3Q4ZJdgAkDHvK1Fqz7YRxMQSp2l2NS8A+Hdl/75mUlRkrouyBaVT6t
Vk5nog84+MQdOkfxy4dw783Dth04YM21QVYTx7ynpOqylTJ+FMSWoH9oH9RhCAFc
HjPvlZhV8qiBLmv63Z4oINI2JAdFQvPBKW7x0o9K1aP8grxxT06NGVsALW3sJxSp
SsNfDURYur8gNjQ4zm/pXy5Jwi2z9SiA0ndbB3IvlB9A9Nss8DwkSNH8bsbgPdFq
Oyg5AqUFCb7D7g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:38 2025 by rpki-client