Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
File: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft (raw, json)
Hash identifier: UcGdvHdZZIqFwDd9vBUkUD1QOYMdy7tghRYz1mv6n3Y=
Subject key identifier: 66:5E:5B:17:57:05:A9:B0:C1:F8:17:81:EC:F2:86:57:7A:9A:39:6A
Authority key identifier: F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
Certificate issuer: /CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Certificate serial: 019872CF8088AEAEF8BEA0317B58F5A77AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
Manifest number: 54
Signing time: Mon 04 Aug 2025 02:00:58 +0000
Manifest this update: Mon 04 Aug 2025 02:00:58 +0000
Manifest next update: Tue 05 Aug 2025 02:00:58 +0000
Files and hashes: 1: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl (hash: qgop4JxBtyrN69sEateHmwUuNx+BYi6+OFwak3S3WmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:80:88:ae:ae:f8:be:a0:31:7b:58:f5:a7:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Validity
Not Before: Aug 4 02:00:58 2025 GMT
Not After : Aug 5 02:00:58 2025 GMT
Subject: CN=665e5b175705a9b0c1f81781ecf286577a9a396a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:29:62:71:ad:0d:b0:1e:60:b2:52:ed:88:
b7:68:41:3b:10:46:09:ae:ba:d4:a3:6b:a0:ef:f1:
c1:2c:f5:15:65:88:45:a4:5e:be:d9:36:7e:ff:10:
a3:40:7a:bd:b0:4a:65:de:2b:1c:11:bd:d0:eb:ec:
58:ce:55:df:c5:4a:6d:c8:5b:8a:e0:e4:81:ed:98:
c0:70:36:f2:34:67:62:87:e9:1e:50:df:c2:12:c6:
96:f6:a9:a1:88:76:d8:8f:9a:61:28:a3:c3:96:62:
c8:5f:b8:77:de:b9:8a:86:07:33:27:1f:bf:cc:ca:
3d:28:e7:cd:24:b9:a1:ba:20:1e:ed:32:69:40:3c:
31:b0:f4:ba:7b:a5:09:3c:70:36:9a:bc:c7:62:9c:
08:74:69:33:4b:15:0d:2e:e1:5a:28:9d:2a:ed:55:
ee:66:d1:4a:fb:3f:39:d9:c5:2d:32:f0:9e:ba:d4:
60:64:2b:68:39:78:24:a9:99:94:99:03:64:19:96:
2b:fa:71:eb:f0:bf:2a:d8:4a:f4:5d:60:d3:76:54:
c2:f9:f5:b0:67:af:05:bd:b5:07:da:6d:9a:4e:ef:
4c:82:28:78:87:95:bc:80:57:99:90:14:a2:75:a3:
95:29:21:2e:2c:d6:f6:72:7f:40:60:bf:2c:0e:0b:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:5B:17:57:05:A9:B0:C1:F8:17:81:EC:F2:86:57:7A:9A:39:6A
X509v3 Authority Key Identifier:
keyid:F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:70:8d:2f:fc:c9:ff:f7:51:5f:58:f6:4c:e5:69:3e:dd:36:
08:cb:98:6b:2c:2f:ff:93:91:b2:35:e8:c8:1f:c3:25:f5:e9:
07:8d:43:0a:85:12:08:84:71:6c:25:ec:39:ea:56:13:60:4a:
f8:6a:2e:d8:64:7a:e9:88:bf:77:a9:ee:1c:a5:e5:02:9d:b9:
43:50:68:6a:25:72:65:49:0c:a2:d0:96:44:4a:69:4b:e5:65:
71:3d:e9:9a:ed:88:f0:e7:5e:2a:ce:fe:17:30:81:06:53:01:
16:bb:43:e1:55:99:fe:7e:de:3e:33:38:df:55:c4:cb:06:34:
38:33:f2:ed:93:dc:7d:a1:ca:35:e9:ca:f0:31:88:92:be:f8:
28:8e:dc:cf:65:5b:9e:f3:6c:98:55:54:2e:d1:93:b1:ba:c1:
a1:89:b3:d5:05:7c:6e:11:6f:28:47:e4:81:3d:78:88:da:3c:
71:44:23:ec:37:7b:4b:b1:89:ee:e8:19:61:a4:4c:ec:ed:5e:
bb:8a:b9:4a:63:79:36:f5:0c:f3:36:20:f8:3a:4f:75:8f:54:
da:77:0e:7a:1a:88:ac:e1:1e:50:cc:62:60:ff:63:d8:a8:0a:
86:e9:d5:88:e4:43:d1:aa:28:dc:b7:06:44:f3:dc:5e:a1:d8:
72:d6:84:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz4CIrq74vqAxe1j1p3qvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmRkMGRmYzIxZmNiMmY0MWM4NDFkMzU4OTY5MWIyMmI5
ZWVhMDUwHhcNMjUwODA0MDIwMDU4WhcNMjUwODA1MDIwMDU4WjAzMTEwLwYDVQQD
Eyg2NjVlNWIxNzU3MDVhOWIwYzFmODE3ODFlY2YyODY1NzdhOWEzOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wQpYnGtDbAeYLJS7Yi3aEE7EEYJ
rrrUo2ug7/HBLPUVZYhFpF6+2TZ+/xCjQHq9sEpl3iscEb3Q6+xYzlXfxUptyFuK
4OSB7ZjAcDbyNGdih+keUN/CEsaW9qmhiHbYj5phKKPDlmLIX7h33rmKhgczJx+/
zMo9KOfNJLmhuiAe7TJpQDwxsPS6e6UJPHA2mrzHYpwIdGkzSxUNLuFaKJ0q7VXu
ZtFK+z852cUtMvCeutRgZCtoOXgkqZmUmQNkGZYr+nHr8L8q2Er0XWDTdlTC+fWw
Z68FvbUH2m2aTu9Mgih4h5W8gFeZkBSidaOVKSEuLNb2cn9AYL8sDguaZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZeWxdXBamwwfgXgezyhld6mjlqMB8GA1UdIwQY
MBaAFPK90N/CH8svQchB01iWkbIrnuoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHIzUTM4SWZ5eTlCeUVIVFdKYVJzaXVlNmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jYWE5YTItMGJlMi00ODI1LTg1NTgt
NDBmOTBkOGM3NGUyLzEvOHIzUTM4SWZ5eTlCeUVIVFdKYVJzaXVlNmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jYWE5YTItMGJlMi00ODI1LTg1NTgtNDBmOTBkOGM3NGUy
LzEvOHIzUTM4SWZ5eTlCeUVIVFdKYVJzaXVlNmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3CNL/zJ
//dRX1j2TOVpPt02CMuYaywv/5ORsjXoyB/DJfXpB41DCoUSCIRxbCXsOepWE2BK
+Gou2GR66Yi/d6nuHKXlAp25Q1BoaiVyZUkMotCWREppS+VlcT3pmu2I8OdeKs7+
FzCBBlMBFrtD4VWZ/n7ePjM431XEywY0ODPy7ZPcfaHKNenK8DGIkr74KI7cz2Vb
nvNsmFVULtGTsbrBoYmz1QV8bhFvKEfkgT14iNo8cUQj7Dd7S7GJ7ugZYaRM7O1e
u4q5SmN5NvUM8zYg+DpPdY9U2ncOehqIrOEeUMxiYP9j2KgKhunViORD0aoo3LcG
RPPcXqHYctaEKQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:50 2025 by rpki-client