Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: LB1EljdbTA9y5iNWGRJVp21kqwLusnVQhzUcyCK3bRU=
Subject key identifier: 65:C9:BB:8A:60:25:22:AF:3F:F2:0F:0C:DF:3C:E0:01:70:10:99:A8
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019872CF81EC4A3C03F1D78D9A65D7065FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0A83
Signing time: Mon 04 Aug 2025 02:00:58 +0000
Manifest this update: Mon 04 Aug 2025 02:00:58 +0000
Manifest next update: Tue 05 Aug 2025 02:00:58 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: o2/0xDaa8fYlsd7sK0twb3FwL8EjNXpGGvO7d2+Mw5U=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:81:ec:4a:3c:03:f1:d7:8d:9a:65:d7:06:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Aug 4 02:00:58 2025 GMT
Not After : Aug 5 02:00:58 2025 GMT
Subject: CN=65c9bb8a602522af3ff20f0cdf3ce001701099a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:3e:94:de:9f:19:fb:80:4b:94:63:f4:fd:
77:b4:6f:b2:bb:1a:04:7f:8d:6d:47:ee:26:dd:e1:
4a:ba:eb:65:d3:63:bf:c0:33:e6:22:ed:52:59:0b:
ae:7e:0f:ef:02:79:a6:a1:6d:6c:7b:f7:77:db:4b:
f6:4d:e4:7e:2f:a5:d9:fc:fe:ae:26:4a:b9:f7:fd:
6f:c5:db:a5:8b:cf:5e:d4:74:4c:7f:d4:3c:c0:65:
76:2e:f1:05:e7:be:8e:dc:cd:6b:5d:19:3b:98:db:
d7:e1:3a:50:c7:05:30:dd:84:f6:c3:4d:2f:f6:6f:
bb:6d:e3:64:61:99:96:05:5e:ac:ec:e3:f5:a8:e2:
9a:4d:09:31:8d:1e:4a:24:94:0f:2b:98:28:62:9d:
de:5d:a2:13:d2:43:e7:32:96:a0:c6:8f:29:77:1f:
89:38:cf:82:12:05:1a:6c:bd:54:5b:a7:15:6a:46:
c4:24:69:ca:29:1d:be:71:6f:f6:86:f4:4d:fa:5c:
06:43:a8:a7:af:ca:ed:ab:fe:1e:0e:2f:a6:b7:6f:
89:67:8c:d9:f8:4a:02:3d:5a:68:e0:f5:1c:b4:60:
c5:4b:da:ca:5a:de:92:c0:e9:4d:56:36:77:00:ff:
1f:dc:6d:1f:52:92:24:bd:78:a7:bd:a6:e7:48:ca:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:BB:8A:60:25:22:AF:3F:F2:0F:0C:DF:3C:E0:01:70:10:99:A8
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e3:71:9c:36:10:fb:04:58:2b:1f:ee:54:ea:d9:05:18:11:
72:a9:c0:65:2b:ab:45:7c:65:90:54:89:78:60:63:91:ff:80:
3b:c0:d5:0e:3f:99:05:b1:c0:af:c3:18:17:a1:e6:48:6e:c2:
b6:ed:b1:b5:1d:1d:80:b3:9c:f5:14:1c:65:12:ce:01:23:4f:
77:af:99:cd:a5:e3:9f:07:9e:88:48:65:78:10:96:03:a6:70:
90:77:6f:2b:f1:d2:b9:75:01:1e:67:e7:9a:49:21:67:cf:6d:
1b:21:e0:06:a9:2e:e4:a0:d1:de:08:57:56:3f:99:72:d3:52:
e3:1b:e1:ea:9c:cf:6f:b4:2c:25:5f:19:db:6a:58:a6:09:fe:
1c:c6:3e:61:31:25:91:9a:15:a8:eb:f3:c5:c1:dd:ac:b5:a1:
8e:31:94:2d:2c:1e:fd:8f:cc:76:92:c8:46:84:41:b9:6b:34:
5b:9e:11:87:44:2e:6a:56:7b:c3:6b:c5:b3:70:ce:8a:ba:fc:
62:4f:8c:7b:91:9a:62:c9:ff:a9:61:e0:53:6f:06:e8:5d:fd:
28:ec:1a:d7:06:c9:eb:e1:9b:18:03:2c:cc:63:17:0b:b6:2a:
2e:7c:b1:ce:d4:08:d9:01:ee:c6:ba:d1:1e:96:c9:ae:cb:79:
ad:29:d2:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz4HsSjwD8deNmmXXBl+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzcxZGYxNmRkMGI0N2NkMGFmOTcxZjE0ZDFkY2E2ZDgy
MDZiYjEwHhcNMjUwODA0MDIwMDU4WhcNMjUwODA1MDIwMDU4WjAzMTEwLwYDVQQD
Eyg2NWM5YmI4YTYwMjUyMmFmM2ZmMjBmMGNkZjNjZTAwMTcwMTA5OWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3k+lN6fGfuAS5Rj9P13tG+yuxoE
f41tR+4m3eFKuutl02O/wDPmIu1SWQuufg/vAnmmoW1se/d320v2TeR+L6XZ/P6u
Jkq59/1vxduli89e1HRMf9Q8wGV2LvEF576O3M1rXRk7mNvX4TpQxwUw3YT2w00v
9m+7beNkYZmWBV6s7OP1qOKaTQkxjR5KJJQPK5goYp3eXaIT0kPnMpagxo8pdx+J
OM+CEgUabL1UW6cVakbEJGnKKR2+cW/2hvRN+lwGQ6inr8rtq/4eDi+mt2+JZ4zZ
+EoCPVpo4PUctGDFS9rKWt6SwOlNVjZ3AP8f3G0fUpIkvXinvabnSMrCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXJu4pgJSKvP/IPDN884AFwEJmoMB8GA1UdIwQY
MBaAFAvHHfFt0LR80K+XHxTR3KbYIGuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2It
NWI0OTNhYTA3MjY4LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2ItNWI0OTNhYTA3MjY4
LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+NxnDYQ
+wRYKx/uVOrZBRgRcqnAZSurRXxlkFSJeGBjkf+AO8DVDj+ZBbHAr8MYF6HmSG7C
tu2xtR0dgLOc9RQcZRLOASNPd6+ZzaXjnweeiEhleBCWA6ZwkHdvK/HSuXUBHmfn
mkkhZ89tGyHgBqku5KDR3ghXVj+ZctNS4xvh6pzPb7QsJV8Z22pYpgn+HMY+YTEl
kZoVqOvzxcHdrLWhjjGULSwe/Y/MdpLIRoRBuWs0W54Rh0QualZ7w2vFs3DOirr8
Yk+Me5GaYsn/qWHgU28G6F39KOwa1wbJ6+GbGAMszGMXC7YqLnyxztQI2QHuxrrR
HpbJrst5rSnS1A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:20 2025 by rpki-client