Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: BUlknDLFmYr209UMknPrLkqtnpBGcKiwfLgCoPtggDs=
Subject key identifier: D2:95:AA:C8:6A:AD:7D:DB:E9:AC:E6:0B:17:12:CC:0D:AE:50:FB:EB
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 01989D155B584B16F15869F984204EC6BF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 0128
Signing time: Tue 12 Aug 2025 07:01:19 +0000
Manifest this update: Tue 12 Aug 2025 07:01:19 +0000
Manifest next update: Wed 13 Aug 2025 07:01:19 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: 1KpkdeSFQhslyA5/K8E3yALHaCxyo3q2nOzEjwS1RZ4=)
2: g827ucs3EThsAfzbTT2FMhBdWaY.roa (hash: PzIDENEz83QkajYAOtSf7pvZj1/xEbuYaZgcwQILtJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:15:5b:58:4b:16:f1:58:69:f9:84:20:4e:c6:bf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Aug 12 07:01:19 2025 GMT
Not After : Aug 13 07:01:19 2025 GMT
Subject: CN=d295aac86aad7ddbe9ace60b1712cc0dae50fbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:01:4d:56:60:1b:18:6d:06:6d:9d:ac:21:
7f:78:2c:ba:1e:02:b4:ba:49:0b:4d:94:ae:66:22:
8f:99:eb:ce:63:fb:bb:18:a4:8e:c0:f0:2a:eb:23:
89:a2:88:d7:35:8f:66:93:4a:93:f8:af:b4:92:d9:
f7:e2:15:01:49:07:b9:06:e1:8f:a1:f6:8f:6e:a5:
a3:20:56:2c:68:b9:77:db:0a:c8:ea:76:c9:78:25:
b2:40:1e:79:cd:e7:74:3d:52:71:31:5e:40:8a:da:
ff:72:05:56:b5:13:f2:74:b5:25:6d:86:65:81:f7:
e0:46:cd:cb:2d:63:9a:cd:7f:de:98:27:7f:9a:2a:
d2:95:d9:7a:76:7f:53:9b:fe:92:e7:97:f1:40:97:
7b:79:80:6f:c4:ac:8f:61:b2:9d:36:a9:10:33:e9:
ea:67:8e:e1:a8:fc:b0:ad:02:2e:e5:09:65:95:29:
5c:1a:2c:35:29:32:6e:5c:2f:b7:21:2f:f3:14:eb:
23:94:4e:bc:e3:0d:d2:f8:3b:01:84:f2:d0:a0:e8:
9f:94:c4:a7:56:b8:0a:7a:c5:fd:73:85:13:97:f0:
72:b5:04:e7:cc:4d:3a:6a:96:d7:62:b2:0e:63:3a:
c6:56:e0:ac:be:a5:3f:67:8f:50:05:1a:00:07:a4:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:AA:C8:6A:AD:7D:DB:E9:AC:E6:0B:17:12:CC:0D:AE:50:FB:EB
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:85:5e:6b:d9:dc:c2:52:8c:df:f8:4f:c5:b1:c7:b4:bc:7d:
e2:eb:90:06:1d:64:e5:6e:bd:7e:0c:74:af:95:1f:21:c8:80:
2f:e1:29:0b:d7:b3:1f:74:b2:71:29:fe:2d:c9:f4:2b:59:56:
9a:bd:73:78:43:16:35:ff:a3:69:06:08:7a:13:17:a7:51:fa:
7a:22:16:1d:d1:33:77:9d:54:dc:83:8c:65:b5:a4:b0:18:a6:
12:a4:b8:03:1c:35:f4:87:0e:53:e7:5b:91:d9:96:49:ba:de:
5f:11:94:85:6b:4d:d2:fa:e3:99:82:35:8d:a2:32:1c:5f:11:
e7:25:0f:af:f6:96:bf:f2:92:39:14:e9:a7:3c:9b:cf:a3:2d:
79:e1:d1:98:9a:55:62:b5:7a:31:6b:23:ea:41:8a:11:2f:df:
ab:21:d6:bf:54:56:b2:be:9c:5d:a9:ae:5a:5e:62:b7:97:c2:
d3:a1:0a:f3:5a:e1:6f:b4:b1:e4:94:e4:67:c7:2d:c5:ab:fd:
14:40:ff:2f:c8:ec:90:34:61:81:b5:8e:67:d4:82:f9:7c:6f:
5b:5c:94:c4:44:d8:ec:f7:eb:e1:b6:ba:6d:21:0f:cb:df:cd:
dd:fe:12:39:4c:1a:d3:cb:24:d2:ed:9b:f1:a6:a1:03:3b:70:
1b:59:16:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZidFVtYSxbxWGn5hCBOxr8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGI3MzRkZjRmYTZhZWUxMmVhOTkwNjU3YjAzNWExNjJi
NGE5ZTYwHhcNMjUwODEyMDcwMTE5WhcNMjUwODEzMDcwMTE5WjAzMTEwLwYDVQQD
EyhkMjk1YWFjODZhYWQ3ZGRiZTlhY2U2MGIxNzEyY2MwZGFlNTBmYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8sBTVZgGxhtBm2drCF/eCy6HgK0
ukkLTZSuZiKPmevOY/u7GKSOwPAq6yOJoojXNY9mk0qT+K+0ktn34hUBSQe5BuGP
ofaPbqWjIFYsaLl32wrI6nbJeCWyQB55zed0PVJxMV5Aitr/cgVWtRPydLUlbYZl
gffgRs3LLWOazX/emCd/mirSldl6dn9Tm/6S55fxQJd7eYBvxKyPYbKdNqkQM+nq
Z47hqPywrQIu5QlllSlcGiw1KTJuXC+3IS/zFOsjlE684w3S+DsBhPLQoOiflMSn
VrgKesX9c4UTl/BytQTnzE06apbXYrIOYzrGVuCsvqU/Z49QBRoAB6QLnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKVqshqrX3b6azmCxcSzA2uUPvrMB8GA1UdIwQY
MBaAFPELc030+mruEuqZBlewNaFitKnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmIt
ZTE1MjUwMzkyODg3LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmItZTE1MjUwMzkyODg3
LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoVea9nc
wlKM3/hPxbHHtLx94uuQBh1k5W69fgx0r5UfIciAL+EpC9ezH3SycSn+Lcn0K1lW
mr1zeEMWNf+jaQYIehMXp1H6eiIWHdEzd51U3IOMZbWksBimEqS4Axw19IcOU+db
kdmWSbreXxGUhWtN0vrjmYI1jaIyHF8R5yUPr/aWv/KSORTppzybz6MteeHRmJpV
YrV6MWsj6kGKES/fqyHWv1RWsr6cXamuWl5it5fC06EK81rhb7Sx5JTkZ8ctxav9
FED/L8jskDRhgbWOZ9SC+XxvW1yUxETY7Pfr4ba6bSEPy9/N3f4SOUwa08sk0u2b
8aahAztwG1kWFQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:33:59 2025 by rpki-client