Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: /lDXCHUQEbZtHA87Tixn55yAOYWekM4N4KuyZXO4wbA=
Subject key identifier: 87:85:42:01:E3:8B:2C:CA:06:35:D7:1C:7B:DD:33:31:31:AF:3F:AA
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 019881680A4A370C6D5801D50E1AC39396C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 09ED
Signing time: Wed 06 Aug 2025 22:02:15 +0000
Manifest this update: Wed 06 Aug 2025 22:02:15 +0000
Manifest next update: Thu 07 Aug 2025 22:02:15 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: Ew8y92wEJn9fftXTzx6Q1RxAGHcbri65FXVNR3KEmtA=)
2: tRxgXr9YQwTbEh2NqyL9M68npkQ.roa (hash: QcuVE9jeWpJsMM52+9+6n7mFIjZuC9lNEDcWkB7O3NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:0a:4a:37:0c:6d:58:01:d5:0e:1a:c3:93:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: Aug 6 22:02:15 2025 GMT
Not After : Aug 7 22:02:15 2025 GMT
Subject: CN=87854201e38b2cca0635d71c7bdd333131af3faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:1c:f8:18:4c:ea:a0:4c:11:05:3d:3e:d3:
0e:ef:d0:c8:81:5e:8c:4d:c1:9a:99:d9:78:e9:f9:
92:42:a9:59:4c:24:62:a6:e9:1d:b2:07:d9:f5:b3:
f3:82:3f:f3:96:d8:43:da:8d:7a:87:de:b6:74:4a:
09:53:51:cb:af:6e:fb:2a:c2:6b:f5:4c:3b:6c:5b:
dc:31:77:f7:53:36:e3:c9:96:64:19:c8:ec:6d:97:
ef:43:bd:dd:e7:7e:38:c2:e1:d7:e5:0f:d4:16:54:
e5:49:da:ea:3f:0e:38:12:36:b7:ee:fa:39:79:80:
8b:f1:11:a6:d2:3c:29:29:12:e2:aa:44:fa:a8:ee:
a3:65:54:f7:0a:02:27:8e:86:ad:f7:26:ba:12:08:
a0:c8:5b:ad:50:bd:4f:b8:a8:5d:c2:c0:e1:7c:d8:
ed:12:b6:41:2f:22:ee:33:da:5e:c5:73:15:0d:c0:
e2:fe:72:c3:f6:b6:d1:55:43:a3:af:03:6b:a6:36:
9a:c6:63:81:45:69:66:6d:87:e4:1d:51:70:84:fd:
1d:65:51:71:1d:7b:10:7e:d3:67:fe:37:90:ad:4d:
6f:0b:c5:59:ad:d7:48:a2:e7:0b:73:51:19:89:28:
b5:b5:f7:8d:35:a3:22:71:e4:ea:13:11:14:54:4f:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:42:01:E3:8B:2C:CA:06:35:D7:1C:7B:DD:33:31:31:AF:3F:AA
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d9:f9:fc:dd:a8:3d:42:33:11:13:ca:1e:2e:05:ec:c0:1b:
94:da:7c:c3:9b:28:1d:b2:c4:7a:04:3d:60:bc:23:d8:99:32:
f4:38:d1:50:e9:3e:b9:87:40:72:85:07:4f:76:79:1e:1b:f2:
dd:69:af:de:1b:ad:85:2c:eb:c0:8a:00:24:c0:a5:9e:9f:60:
93:e3:15:b1:49:7e:76:bd:39:2d:4f:d3:79:8c:4a:39:44:28:
d9:1e:bd:cb:0d:51:ca:52:2c:21:3c:c1:e3:78:f8:12:03:5d:
06:de:fe:07:c4:ef:44:5b:b3:be:85:37:40:07:ec:c4:23:25:
f2:d3:73:32:84:28:89:3d:ff:4d:b1:d8:71:b6:c3:b6:1d:46:
32:cf:6f:e4:3b:1e:65:29:32:77:2e:91:76:a4:db:76:bd:90:
6f:e2:bd:68:64:20:e5:a7:69:87:36:8b:2e:41:f9:a2:8c:82:
41:bf:54:83:b6:8e:56:f6:ba:25:8e:ca:23:16:f7:bc:69:57:
14:c1:da:02:cd:7a:67:8a:97:df:b9:59:91:69:9d:08:73:ba:
d1:31:c8:f1:71:5f:92:33:5e:19:fb:de:11:ed:91:0e:0e:d2:
c7:42:f6:31:b1:8e:91:35:8a:d0:fe:56:40:e3:8d:4c:db:71:
eb:c5:62:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaApKNwxtWAHVDhrDk5bAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMWYyODlhMDBhMWIxMTViN2YzYTRkMWI4MDExYmY5MGQx
YTJmNzIwHhcNMjUwODA2MjIwMjE1WhcNMjUwODA3MjIwMjE1WjAzMTEwLwYDVQQD
Eyg4Nzg1NDIwMWUzOGIyY2NhMDYzNWQ3MWM3YmRkMzMzMTMxYWYzZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm4c+BhM6qBMEQU9PtMO79DIgV6M
TcGamdl46fmSQqlZTCRipukdsgfZ9bPzgj/zlthD2o16h962dEoJU1HLr277KsJr
9Uw7bFvcMXf3UzbjyZZkGcjsbZfvQ73d5344wuHX5Q/UFlTlSdrqPw44Eja37vo5
eYCL8RGm0jwpKRLiqkT6qO6jZVT3CgInjoat9ya6EgigyFutUL1PuKhdwsDhfNjt
ErZBLyLuM9pexXMVDcDi/nLD9rbRVUOjrwNrpjaaxmOBRWlmbYfkHVFwhP0dZVFx
HXsQftNn/jeQrU1vC8VZrddIoucLc1EZiSi1tfeNNaMiceTqExEUVE+7bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeFQgHjiyzKBjXXHHvdMzExrz+qMB8GA1UdIwQY
MBaAFPEfKJoAobEVt/Ok0bgBG/kNGi9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjct
NzRlODQ5NjcxNjhiLzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjctNzRlODQ5NjcxNjhi
LzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtn5/N2o
PUIzERPKHi4F7MAblNp8w5soHbLEegQ9YLwj2Jky9DjRUOk+uYdAcoUHT3Z5Hhvy
3Wmv3huthSzrwIoAJMClnp9gk+MVsUl+dr05LU/TeYxKOUQo2R69yw1RylIsITzB
43j4EgNdBt7+B8TvRFuzvoU3QAfsxCMl8tNzMoQoiT3/TbHYcbbDth1GMs9v5Dse
ZSkydy6RdqTbdr2Qb+K9aGQg5adphzaLLkH5ooyCQb9Ug7aOVva6JY7KIxb3vGlX
FMHaAs16Z4qX37lZkWmdCHO60THI8XFfkjNeGfveEe2RDg7Sx0L2MbGOkTWK0P5W
QOONTNtx68Vi4A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:19 2025 by rpki-client