Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier: JChKJOddB2q8jnjeCiHgsgWo9DyDUxsAVgO5KhwuEqE=
Subject key identifier: 8A:8D:36:61:F3:21:84:BD:94:94:99:8C:E5:47:93:FA:C2:38:03:C7
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 01987C092C5C7DB7038681F3D2F907A649C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number: 0713
Signing time: Tue 05 Aug 2025 21:00:32 +0000
Manifest this update: Tue 05 Aug 2025 21:00:32 +0000
Manifest next update: Wed 06 Aug 2025 21:00:32 +0000
Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: BzwUIA/L/AyrztJS4AU3SGtMTLYatpLWpPSLFa+Cv8M=)
2: VJcC3DZjVaOocdNxvr3eh-uH0lw.roa (hash: S/FApMeQF+bI8dQe3+ptgHneEZT+L8zmVlOAZBtIFyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:2c:5c:7d:b7:03:86:81:f3:d2:f9:07:a6:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Aug 5 21:00:32 2025 GMT
Not After : Aug 6 21:00:32 2025 GMT
Subject: CN=8a8d3661f32184bd9494998ce54793fac23803c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:03:57:03:bf:89:bb:de:10:67:70:b6:b1:
ac:4a:c6:91:03:80:1c:4a:b1:95:13:43:26:e2:35:
d8:5f:a1:85:1d:55:4f:54:1b:8a:06:9a:8d:48:cd:
a9:a1:e1:39:50:ec:98:ee:f7:a5:31:d7:e9:3a:1a:
b9:db:a7:7d:df:75:a9:3c:fc:bb:85:5c:d0:b1:42:
2d:e4:83:2b:b6:79:74:02:b0:19:1d:2e:ac:64:99:
f9:ff:04:15:07:d0:00:fd:a9:3c:53:bc:0c:46:84:
c8:fc:8d:93:53:f6:e5:ee:13:93:cf:f0:3e:3b:3f:
bf:52:c6:d1:1f:81:3f:b5:9e:0c:61:c1:45:e6:5a:
b5:82:ee:5e:cc:38:73:a3:f5:4c:69:1c:aa:49:18:
ff:f8:a5:fe:4d:e2:a2:90:ab:02:37:00:d0:64:e5:
ca:cc:a7:4a:48:79:a0:17:b2:4a:ab:cb:af:7d:54:
78:28:e2:3e:64:b2:25:69:fc:24:38:8c:dd:95:f3:
ae:e0:ac:c1:85:0e:62:c9:61:7f:77:60:ef:58:3e:
a4:9f:65:87:2f:16:35:bb:d0:06:2f:cb:c3:02:82:
77:9b:24:c6:58:18:51:6e:43:2f:44:cd:e0:34:84:
7a:24:c8:48:5e:88:28:d3:89:e5:91:19:59:ba:66:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8D:36:61:F3:21:84:BD:94:94:99:8C:E5:47:93:FA:C2:38:03:C7
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c8:48:aa:30:8c:43:02:54:ba:5f:54:9d:7d:cf:c4:eb:80:
42:ef:3c:bc:9b:dd:53:ed:00:d7:9b:4a:f5:3c:78:fe:26:16:
69:31:5e:21:16:82:94:a4:71:00:da:fd:ae:e9:82:b4:84:f8:
5a:7f:db:b9:73:f8:94:db:30:5b:b3:50:70:15:73:d0:bf:91:
20:ce:d8:fa:b2:2f:36:9b:4f:0c:7b:2f:63:de:90:20:01:f6:
74:5d:f2:eb:ba:1d:09:99:50:52:2d:02:a2:76:b8:fa:a9:47:
48:12:1a:ca:ba:86:1f:26:94:d9:b0:20:83:dc:bb:ee:70:e2:
0c:65:df:60:0b:25:91:50:df:ce:ef:d1:b8:d6:cd:4d:7e:41:
e9:3a:3d:a9:cc:ad:ae:ab:25:20:1d:ff:86:4c:28:87:31:aa:
a8:e3:54:2f:45:ef:68:29:e5:37:67:19:a0:36:9a:e6:8d:15:
9c:91:54:ee:86:08:80:57:b5:23:59:32:6c:81:32:c3:f8:30:
a7:ea:a7:0d:4d:d1:af:31:1b:94:3b:93:6d:54:7a:71:1d:35:
eb:f5:ea:2e:7b:7d:d4:db:9a:12:c8:a7:05:51:4b:50:3e:04:
20:05:dc:29:e4:71:0e:11:3f:cc:0d:55:54:eb:98:17:79:2d:
e3:63:48:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CSxcfbcDhoHz0vkHpknAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5
ZTY1YTEwHhcNMjUwODA1MjEwMDMyWhcNMjUwODA2MjEwMDMyWjAzMTEwLwYDVQQD
Eyg4YThkMzY2MWYzMjE4NGJkOTQ5NDk5OGNlNTQ3OTNmYWMyMzgwM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSYDVwO/ibveEGdwtrGsSsaRA4Ac
SrGVE0Mm4jXYX6GFHVVPVBuKBpqNSM2poeE5UOyY7velMdfpOhq526d933WpPPy7
hVzQsUIt5IMrtnl0ArAZHS6sZJn5/wQVB9AA/ak8U7wMRoTI/I2TU/bl7hOTz/A+
Oz+/UsbRH4E/tZ4MYcFF5lq1gu5ezDhzo/VMaRyqSRj/+KX+TeKikKsCNwDQZOXK
zKdKSHmgF7JKq8uvfVR4KOI+ZLIlafwkOIzdlfOu4KzBhQ5iyWF/d2DvWD6kn2WH
LxY1u9AGL8vDAoJ3myTGWBhRbkMvRM3gNIR6JMhIXogo04nlkRlZumbo8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqNNmHzIYS9lJSZjOVHk/rCOAPHMB8GA1UdIwQY
MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct
YmQyYjNhYmFlMTIxLzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx
LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMhIqjCM
QwJUul9UnX3PxOuAQu88vJvdU+0A15tK9Tx4/iYWaTFeIRaClKRxANr9rumCtIT4
Wn/buXP4lNswW7NQcBVz0L+RIM7Y+rIvNptPDHsvY96QIAH2dF3y67odCZlQUi0C
ona4+qlHSBIayrqGHyaU2bAgg9y77nDiDGXfYAslkVDfzu/RuNbNTX5B6To9qcyt
rqslIB3/hkwohzGqqONUL0XvaCnlN2cZoDaa5o0VnJFU7oYIgFe1I1kybIEyw/gw
p+qnDU3RrzEblDuTbVR6cR016/XqLnt91NuaEsinBVFLUD4EIAXcKeRxDhE/zA1V
VOuYF3kt42NInQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:49 2025 by rpki-client