Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: M8ZSTDfegVBPN1n7/ROzBoTWlwMhnMgBrS95AyO+ZY0=
Subject key identifier: 69:0D:44:78:31:DE:49:4A:2D:B9:CE:0A:F9:07:14:7C:B2:47:5B:BE
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 01988FFE5EEB700C43B9003D5979637F253C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 18:01:08 +0000
Manifest this update: Sat 09 Aug 2025 18:01:08 +0000
Manifest next update: Sun 10 Aug 2025 18:01:08 +0000
Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: JAXWo9taen6kHWrsqlY72TPx0sQM57AKwxyQD2MqZj4=)
2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:5e:eb:70:0c:43:b9:00:3d:59:79:63:7f:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Aug 9 18:01:08 2025 GMT
Not After : Aug 10 18:01:08 2025 GMT
Subject: CN=690d447831de494a2db9ce0af907147cb2475bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:b5:a1:fb:3a:54:1c:ca:f1:6f:5f:0b:00:
f2:83:80:80:ea:1c:98:6b:9d:84:d3:14:12:58:27:
f9:4a:5b:3d:dd:60:bb:4d:ae:d9:b0:84:bc:84:27:
bf:48:a8:2c:56:58:1e:89:52:19:79:5b:94:e5:fb:
da:99:a7:b1:37:30:4d:25:fb:88:21:b9:8e:11:6e:
35:5d:2c:66:50:43:4e:e9:2e:11:1d:0c:d9:65:10:
c5:7a:40:fd:b7:40:ea:6f:ea:71:e3:b8:fb:d0:f2:
82:aa:d5:b6:6c:33:5f:64:ac:90:72:80:02:cd:0f:
64:ca:80:5c:99:15:ff:f7:ca:79:b0:66:17:71:02:
a6:76:e4:f8:3d:f7:3b:fa:ab:d2:03:48:8c:4d:88:
6c:b6:f6:4d:76:06:51:46:b1:77:8b:ff:90:e1:a3:
ac:aa:6a:de:85:ca:aa:5a:30:d2:f5:37:2d:b1:c9:
cc:9a:cd:67:36:cb:75:94:33:79:58:5a:e9:99:22:
5b:2a:1d:96:62:22:ae:04:55:c6:6d:33:65:4c:32:
5d:f0:cd:ea:16:6e:cb:20:89:da:41:e9:ac:43:71:
fe:4a:28:52:69:b1:17:2d:d8:ff:54:f6:6c:b7:4e:
2e:b8:74:aa:28:c2:18:d9:61:5d:0f:f9:bc:1b:c9:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:44:78:31:DE:49:4A:2D:B9:CE:0A:F9:07:14:7C:B2:47:5B:BE
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:92:b7:78:b7:48:10:ae:93:ec:75:08:fa:43:3c:44:eb:c1:
03:7d:c3:20:9a:6e:ce:bb:56:10:c6:78:e2:57:77:25:e8:e4:
1e:5f:fb:b4:f2:4b:0e:31:91:c8:4b:6f:6a:68:77:ad:96:7b:
c6:6a:fa:eb:84:c9:36:f0:6b:a7:c3:3c:a9:d1:39:3d:98:57:
6c:3a:80:5c:ef:4d:8b:4e:96:c9:cf:46:7d:ee:19:fc:ed:0e:
22:45:dd:e7:0b:4e:2b:34:ab:26:61:29:1e:89:28:ee:be:6e:
e3:83:b5:46:5b:35:89:48:86:92:55:cf:92:34:fe:9f:00:42:
b4:fe:54:08:3b:5e:11:ed:1d:a9:ec:5d:8b:63:12:74:9d:0e:
b5:95:86:53:de:83:3c:a3:4c:a3:f8:b2:ba:9c:56:cc:36:fa:
61:bc:c7:af:f1:92:12:e4:59:39:a4:ed:c5:fd:f0:83:02:d9:
54:29:99:2c:bc:7d:29:ec:f1:00:19:8c:b1:03:df:6f:e0:7e:
aa:c6:46:20:2d:7d:0a:4b:9b:45:f4:83:56:cd:98:25:37:62:
fa:f7:83:a1:f3:28:9d:6a:ad:4c:84:c5:45:ad:bf:be:e6:d9:
96:9b:db:ea:eb:a9:00:3d:f0:73:58:02:fe:be:3a:b9:b5:bd:
6d:7d:50:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/l7rcAxDuQA9WXljfyU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZGU4ZWJkZGQwODQxNjNhOTBiOWFlNTAzOTdiMmRiNDlj
YjE3YWQwHhcNMjUwODA5MTgwMTA4WhcNMjUwODEwMTgwMTA4WjAzMTEwLwYDVQQD
Eyg2OTBkNDQ3ODMxZGU0OTRhMmRiOWNlMGFmOTA3MTQ3Y2IyNDc1YmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpW1ofs6VBzK8W9fCwDyg4CA6hyY
a52E0xQSWCf5Sls93WC7Ta7ZsIS8hCe/SKgsVlgeiVIZeVuU5fvamaexNzBNJfuI
IbmOEW41XSxmUENO6S4RHQzZZRDFekD9t0Dqb+px47j70PKCqtW2bDNfZKyQcoAC
zQ9kyoBcmRX/98p5sGYXcQKmduT4Pfc7+qvSA0iMTYhstvZNdgZRRrF3i/+Q4aOs
qmrehcqqWjDS9TctscnMms1nNst1lDN5WFrpmSJbKh2WYiKuBFXGbTNlTDJd8M3q
Fm7LIInaQemsQ3H+SihSabEXLdj/VPZst04uuHSqKMIY2WFdD/m8G8mHAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkNRHgx3klKLbnOCvkHFHyyR1u+MB8GA1UdIwQY
MBaAFPLejr3dCEFjqQua5QOXsttJyxetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGIt
YWYxYWMwZjAwNDE3LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGItYWYxYWMwZjAwNDE3
LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpK3eLdI
EK6T7HUI+kM8ROvBA33DIJpuzrtWEMZ44ld3JejkHl/7tPJLDjGRyEtvamh3rZZ7
xmr664TJNvBrp8M8qdE5PZhXbDqAXO9Ni06Wyc9Gfe4Z/O0OIkXd5wtOKzSrJmEp
Hoko7r5u44O1Rls1iUiGklXPkjT+nwBCtP5UCDteEe0dqexdi2MSdJ0OtZWGU96D
PKNMo/iyupxWzDb6YbzHr/GSEuRZOaTtxf3wgwLZVCmZLLx9KezxABmMsQPfb+B+
qsZGIC19CkubRfSDVs2YJTdi+veDofMonWqtTITFRa2/vubZlpvb6uupAD3wc1gC
/r46ubW9bX1QaQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:44:05 2025 by rpki-client