Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: wct61xh/E58NRMw7WKqGya3jkmb+vptm0d59GSDwkyw=
Subject key identifier: 7D:32:2A:85:B8:35:78:8D:E2:2C:6D:56:C6:79:5C:BC:63:3A:81:10
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 019894122504577A78B2EA2887AC32ECFDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0EE6
Signing time: Sun 10 Aug 2025 13:01:13 +0000
Manifest this update: Sun 10 Aug 2025 13:01:13 +0000
Manifest next update: Mon 11 Aug 2025 13:01:13 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: FeUcuIDIRA6Nv67x9poaY7WO9DX+oIe80pHr+Z7w/VY=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:25:04:57:7a:78:b2:ea:28:87:ac:32:ec:fd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Aug 10 13:01:13 2025 GMT
Not After : Aug 11 13:01:13 2025 GMT
Subject: CN=7d322a85b835788de22c6d56c6795cbc633a8110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:45:6d:bb:9b:01:bc:10:b9:e6:89:71:73:
92:e8:2b:f4:67:1c:34:8f:99:13:d8:cf:95:f0:59:
93:d2:cb:63:a9:40:c4:d8:d4:4a:f7:ca:ee:92:84:
33:fd:f0:4e:8d:16:b4:79:5d:cf:07:3a:18:be:22:
8d:d8:aa:0e:24:df:4f:f4:8a:30:71:5e:ef:82:95:
ee:b0:11:6a:87:70:e2:d0:e4:fd:1e:1b:e3:93:54:
c1:d8:ab:6e:61:75:eb:bf:49:f3:c2:d1:fa:45:b7:
94:3f:5d:23:67:80:86:a9:3d:01:ff:a5:29:b2:ef:
21:54:be:25:54:34:69:b1:45:f0:0c:9d:97:35:36:
56:92:e0:92:54:3b:86:d5:01:5b:8f:9b:bd:61:ee:
05:f8:3c:ba:1f:b3:2e:69:6b:75:f9:13:8d:f3:66:
1a:79:c0:a3:7a:70:1f:84:61:18:3a:2c:94:c3:5f:
42:bc:2f:b9:2f:fd:ec:7a:f3:83:be:3b:d1:c8:35:
32:4c:85:93:57:24:0f:81:42:1b:84:ee:ec:87:82:
3f:bf:af:f6:d9:e5:29:73:45:71:e5:16:b3:e2:cc:
e2:3d:c7:91:5e:55:8e:58:d5:5c:40:71:39:c6:e8:
77:bd:b4:f9:e7:f0:8c:72:5d:78:d6:c4:8a:42:bd:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:2A:85:B8:35:78:8D:E2:2C:6D:56:C6:79:5C:BC:63:3A:81:10
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:64:44:2b:90:98:75:d6:2c:58:82:5a:b6:29:e4:32:95:
bb:5b:70:8c:51:9e:9d:76:17:00:b3:4b:2b:1f:d0:34:e4:87:
11:51:27:d1:60:41:66:8a:59:f6:c0:9d:bf:d6:41:ce:40:2b:
cc:4e:e1:3c:ca:44:3a:28:b6:dc:ad:c4:59:0a:cc:4f:71:9d:
16:4c:cb:e4:7e:5e:2c:92:d6:52:d4:52:bb:18:7a:e2:c1:ea:
eb:aa:e1:7a:dd:ed:04:91:00:60:76:58:03:b5:7a:e1:9e:30:
a2:b3:87:7e:36:ef:0c:df:7e:7d:8c:63:cd:9e:25:69:b5:70:
e7:46:d3:28:70:ac:12:84:41:81:f2:1c:4e:04:c7:61:ab:64:
be:69:47:b2:99:5f:24:b6:f4:8b:e7:c7:22:66:26:7a:5e:2d:
97:93:d0:5c:ba:ac:3d:b8:e4:ef:30:28:30:9e:06:08:3b:d4:
de:e1:fa:2c:a3:4b:35:4d:37:22:4f:2f:15:a2:42:a6:43:2c:
aa:34:a7:92:fe:57:16:6d:b6:34:d0:d4:6e:60:09:80:4f:fb:
04:fc:63:67:fb:71:ba:43:8d:2f:a1:50:02:d8:2c:f4:1e:bf:
ad:f9:ab:99:c2:58:11:d7:33:f4:97:a3:b4:67:62:88:ad:00:
f7:20:3c:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEiUEV3p4suooh6wy7P3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi
ODgzYzQwHhcNMjUwODEwMTMwMTEzWhcNMjUwODExMTMwMTEzWjAzMTEwLwYDVQQD
Eyg3ZDMyMmE4NWI4MzU3ODhkZTIyYzZkNTZjNjc5NWNiYzYzM2E4MTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWhFbbubAbwQueaJcXOS6Cv0Zxw0
j5kT2M+V8FmT0stjqUDE2NRK98rukoQz/fBOjRa0eV3PBzoYviKN2KoOJN9P9Iow
cV7vgpXusBFqh3Di0OT9Hhvjk1TB2KtuYXXrv0nzwtH6RbeUP10jZ4CGqT0B/6Up
su8hVL4lVDRpsUXwDJ2XNTZWkuCSVDuG1QFbj5u9Ye4F+Dy6H7MuaWt1+RON82Ya
ecCjenAfhGEYOiyUw19CvC+5L/3sevODvjvRyDUyTIWTVyQPgUIbhO7sh4I/v6/2
2eUpc0Vx5Raz4sziPceRXlWOWNVcQHE5xuh3vbT55/CMcl141sSKQr1FswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0yKoW4NXiN4ixtVsZ5XLxjOoEQMB8GA1UdIwQY
MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt
OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz
LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj9kRCuQ
mHXWLFiCWrYp5DKVu1twjFGenXYXALNLKx/QNOSHEVEn0WBBZopZ9sCdv9ZBzkAr
zE7hPMpEOii23K3EWQrMT3GdFkzL5H5eLJLWUtRSuxh64sHq66rhet3tBJEAYHZY
A7V64Z4worOHfjbvDN9+fYxjzZ4labVw50bTKHCsEoRBgfIcTgTHYatkvmlHsplf
JLb0i+fHImYmel4tl5PQXLqsPbjk7zAoMJ4GCDvU3uH6LKNLNU03Ik8vFaJCpkMs
qjSnkv5XFm22NNDUbmAJgE/7BPxjZ/txukONL6FQAtgs9B6/rfmrmcJYEdcz9Jej
tGdiiK0A9yA8iA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:31 2025 by rpki-client