Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: PZA9Yin5zQYdAuHUBdyGTjTvox4K5fjuv6zcSM5wLCU=
Subject key identifier: 66:13:EA:D6:EA:BA:E6:CE:28:F8:A8:DB:AD:AC:38:E4:D2:DF:15:52
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 01978A355C447E78C6339908A4C5310067E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 99
Signing time: Thu 19 Jun 2025 22:00:42 +0000
Manifest this update: Thu 19 Jun 2025 22:00:42 +0000
Manifest next update: Fri 20 Jun 2025 22:00:42 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: aCoYndJjXsFHL2tLD/qXQh1EQR+/mZZxUpbokbpJT0w=)
2: c13kxnbsyODzPHyzkeCp6V26ajY.roa (hash: 5unbD6+O2W5c+EmMfdgbVE1U7HYHEYdfAi2loQA1vSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:35:5c:44:7e:78:c6:33:99:08:a4:c5:31:00:67:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Jun 19 22:00:42 2025 GMT
Not After : Jun 20 22:00:42 2025 GMT
Subject: CN=6613ead6eabae6ce28f8a8dbadac38e4d2df1552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:e5:d3:58:b5:17:60:ee:bc:a5:c5:97:ee:
18:83:e9:02:e2:81:e0:16:9b:2a:ad:a9:27:b6:fd:
52:be:1b:2c:e5:10:28:a6:64:ae:8d:cc:fa:e2:1e:
6c:ec:db:58:96:75:2f:8b:0c:03:d9:75:bb:3e:a5:
ab:47:59:6e:3e:b7:8f:13:2f:e2:86:78:da:ab:9e:
c3:3f:86:f5:a6:7e:1b:47:8b:e2:c4:75:6e:d5:ad:
4a:e9:af:85:ea:2b:b2:9b:51:25:07:be:e8:72:1e:
82:38:d9:a8:3e:ab:7c:d6:fb:4c:b6:8f:5d:3d:4b:
9e:e3:1c:d6:43:0d:62:24:72:c3:3d:12:77:aa:42:
02:4a:53:9f:59:c8:0f:fa:27:94:1d:bd:3e:0b:ed:
7f:96:e1:34:43:ce:b3:30:87:42:75:cd:9c:65:32:
46:c7:88:ae:a6:f5:70:a7:8f:d2:24:e8:e0:00:24:
31:cb:22:f3:8c:87:9c:fa:bb:9c:e2:28:ef:79:c9:
5b:99:6d:23:8b:73:6d:cc:d5:92:61:3f:c9:f8:2e:
10:3e:41:56:72:88:0d:a7:f4:68:a4:64:62:cb:c5:
58:33:ec:8c:df:95:a3:42:7e:df:6e:1c:e3:31:ae:
1e:4b:43:40:33:30:0a:a0:54:c0:fa:6f:42:67:8d:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:EA:D6:EA:BA:E6:CE:28:F8:A8:DB:AD:AC:38:E4:D2:DF:15:52
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6b:2e:1c:0f:83:99:e2:4b:27:e9:33:7a:d0:3e:1f:fd:21:
fb:8c:8a:7f:1d:2b:88:4f:aa:e5:22:15:5e:d4:2a:80:5a:44:
b8:c4:b7:44:d4:e7:0b:48:1f:5d:23:38:4a:8e:2f:5e:0c:70:
4e:6c:38:6a:90:99:37:8e:99:3b:c1:75:43:bf:6b:44:b4:85:
8d:98:e9:75:07:b6:ed:99:f6:23:98:0c:aa:15:89:a5:8a:ef:
6f:a5:e4:86:71:48:13:5b:44:b0:32:9c:88:f5:94:25:1f:a4:
a9:a2:61:61:96:13:dc:fa:35:59:2f:b8:52:3a:d6:aa:c4:1b:
f2:dd:c1:73:43:a4:78:1b:70:41:74:d8:3e:1f:10:3a:fa:f9:
27:ef:e7:44:c2:ce:b9:cd:c7:f9:07:ba:1d:65:31:bf:11:a2:
ba:97:eb:92:42:38:bd:97:dd:4f:6c:51:8d:8c:9a:fb:93:41:
8a:24:59:b0:bb:60:73:0a:60:f5:da:39:04:ef:8c:cc:d0:33:
7f:f8:62:84:d2:2e:ad:f2:3c:a8:f6:9a:0b:51:98:02:f2:3d:
ae:ff:7a:5a:78:b5:f8:c8:2d:9f:96:ed:27:86:8c:7e:c6:9d:
90:be:2d:80:c2:c9:15:7b:03:41:c5:aa:96:e1:0f:85:63:e8:
ca:e8:77:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeKNVxEfnjGM5kIpMUxAGfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGI3MzRkZjRmYTZhZWUxMmVhOTkwNjU3YjAzNWExNjJi
NGE5ZTYwHhcNMjUwNjE5MjIwMDQyWhcNMjUwNjIwMjIwMDQyWjAzMTEwLwYDVQQD
Eyg2NjEzZWFkNmVhYmFlNmNlMjhmOGE4ZGJhZGFjMzhlNGQyZGYxNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W3l01i1F2DuvKXFl+4Yg+kC4oHg
Fpsqrakntv1Svhss5RAopmSujcz64h5s7NtYlnUviwwD2XW7PqWrR1luPrePEy/i
hnjaq57DP4b1pn4bR4vixHVu1a1K6a+F6iuym1ElB77och6CONmoPqt81vtMto9d
PUue4xzWQw1iJHLDPRJ3qkICSlOfWcgP+ieUHb0+C+1/luE0Q86zMIdCdc2cZTJG
x4iupvVwp4/SJOjgACQxyyLzjIec+ruc4ijveclbmW0ji3NtzNWSYT/J+C4QPkFW
cogNp/RopGRiy8VYM+yM35WjQn7fbhzjMa4eS0NAMzAKoFTA+m9CZ407OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYT6tbquubOKPio262sOOTS3xVSMB8GA1UdIwQY
MBaAFPELc030+mruEuqZBlewNaFitKnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmIt
ZTE1MjUwMzkyODg3LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmItZTE1MjUwMzkyODg3
LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWsuHA+D
meJLJ+kzetA+H/0h+4yKfx0riE+q5SIVXtQqgFpEuMS3RNTnC0gfXSM4So4vXgxw
Tmw4apCZN46ZO8F1Q79rRLSFjZjpdQe27Zn2I5gMqhWJpYrvb6XkhnFIE1tEsDKc
iPWUJR+kqaJhYZYT3Po1WS+4UjrWqsQb8t3Bc0OkeBtwQXTYPh8QOvr5J+/nRMLO
uc3H+Qe6HWUxvxGiupfrkkI4vZfdT2xRjYya+5NBiiRZsLtgcwpg9do5BO+MzNAz
f/hihNIurfI8qPaaC1GYAvI9rv96Wni1+Mgtn5btJ4aMfsadkL4tgMLJFXsDQcWq
luEPhWPoyuh3pA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 02:55:48 2025 by rpki-client