
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: C1uavZFj0zimAaiDTK7U8gW3WYYMvUPvuY9ncoVh/6Y=
Subject key identifier: A7:25:1F:D5:B5:3D:33:B7:EE:46:97:13:10:1B:77:51:6A:0B:C1:AD
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 01988C8F42CEA03DC52CC71E5C1FACFAADCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 03A2
Signing time: Sat 09 Aug 2025 02:00:55 +0000
Manifest this update: Sat 09 Aug 2025 02:00:55 +0000
Manifest next update: Sun 10 Aug 2025 02:00:55 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: QCpigKqHe1uVaiwqtEZm/NylL8wmTYepIIwJgYSpQfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:42:ce:a0:3d:c5:2c:c7:1e:5c:1f:ac:fa:ad:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Aug 9 02:00:55 2025 GMT
Not After : Aug 10 02:00:55 2025 GMT
Subject: CN=a7251fd5b53d33b7ee469713101b77516a0bc1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:1d:94:2e:72:c5:7d:49:65:73:1d:d2:46:
69:57:40:da:85:3d:c8:32:b2:0f:ab:96:f2:74:7d:
ab:68:4d:e7:90:0e:e2:d9:90:be:84:e1:f9:73:d0:
c2:2f:81:a2:6c:ca:fe:6b:a5:cf:d2:1b:f6:32:ef:
12:64:3e:18:2b:1a:93:26:b1:9d:fa:0a:98:bc:79:
9a:67:98:42:ea:72:07:61:3c:c2:d1:23:4b:eb:fb:
3b:18:73:34:42:26:08:c9:6c:9b:7f:13:60:87:b7:
54:8b:7e:70:07:45:40:a1:19:9e:18:d9:55:9f:a6:
00:94:2e:f5:b8:33:4b:c7:b8:6e:41:02:21:69:b1:
a1:1c:b9:dd:25:1a:4a:a4:01:a2:43:5a:c3:27:a0:
33:84:c9:62:13:90:5c:c3:3e:78:0a:b3:d3:12:b4:
84:ac:82:60:74:39:a3:50:a1:3d:06:ea:61:61:ee:
49:78:9d:56:ff:94:4b:17:6f:27:c1:d7:e5:bf:42:
5d:ab:a9:ff:eb:d0:4b:f6:ea:62:19:9b:7d:d9:9a:
6f:3a:8a:56:55:73:a0:7e:03:c2:cc:34:56:ac:10:
cf:d1:93:0b:59:a0:fe:90:3e:11:de:f5:a1:dc:39:
bf:5a:9b:c6:7b:15:0d:b2:b9:ee:ef:dd:c5:01:d7:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:25:1F:D5:B5:3D:33:B7:EE:46:97:13:10:1B:77:51:6A:0B:C1:AD
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:83:e2:d9:74:79:0b:8a:86:94:5e:c3:03:0d:1b:6f:40:5c:
de:14:84:0c:db:0a:ec:b7:16:4b:43:02:c8:00:45:c1:d6:52:
61:05:28:1e:c0:e7:33:00:0d:60:4e:10:4a:65:af:20:9f:a1:
83:c1:6c:fb:96:a4:63:43:54:19:ba:0b:09:70:1d:29:0d:b1:
d4:4d:c7:82:cb:d7:d6:32:38:2f:c2:9d:f6:16:11:84:26:f6:
8f:28:08:3b:8a:a0:aa:95:e7:dd:b7:69:31:d6:f2:91:da:1e:
6b:3f:d1:58:36:6d:05:8d:14:a9:47:5a:c2:92:f2:86:6a:b0:
56:bf:81:84:41:6b:49:40:83:68:e0:44:d5:d1:b3:36:54:90:
ce:0b:ec:3a:69:f8:e2:58:6b:89:55:4f:9c:ec:85:e4:0d:58:
60:5f:d8:c7:48:7f:d2:de:2e:f8:29:bc:65:89:3b:23:66:d7:
4c:ea:f9:d5:ec:79:28:4a:cb:ba:f1:3d:30:6d:52:16:d6:b0:
ee:8f:70:0a:f1:36:d2:af:d6:e9:10:6f:31:08:6b:c0:ce:aa:
40:40:1a:f0:3b:88:10:0a:d2:72:59:26:fb:ad:04:ad:90:19:
37:f3:c8:11:f5:dc:e2:91:fb:0b:71:45:47:97:ee:d9:e2:d8:
ca:9a:d1:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMj0LOoD3FLMceXB+s+q3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWYyMDZmZTMwODVkOTk0M2NiNmEwNjNkYzk3ZTBkZWI3
ZjQzODQwHhcNMjUwODA5MDIwMDU1WhcNMjUwODEwMDIwMDU1WjAzMTEwLwYDVQQD
EyhhNzI1MWZkNWI1M2QzM2I3ZWU0Njk3MTMxMDFiNzc1MTZhMGJjMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO8dlC5yxX1JZXMd0kZpV0DahT3I
MrIPq5bydH2raE3nkA7i2ZC+hOH5c9DCL4GibMr+a6XP0hv2Mu8SZD4YKxqTJrGd
+gqYvHmaZ5hC6nIHYTzC0SNL6/s7GHM0QiYIyWybfxNgh7dUi35wB0VAoRmeGNlV
n6YAlC71uDNLx7huQQIhabGhHLndJRpKpAGiQ1rDJ6AzhMliE5Bcwz54CrPTErSE
rIJgdDmjUKE9BuphYe5JeJ1W/5RLF28nwdflv0Jdq6n/69BL9upiGZt92ZpvOopW
VXOgfgPCzDRWrBDP0ZMLWaD+kD4R3vWh3Dm/WpvGexUNsrnu793FAddLGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKclH9W1PTO37kaXExAbd1FqC8GtMB8GA1UdIwQY
MBaAFETvIG/jCF2ZQ8tqBj3Jfg3rf0OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQt
ZmJkNTBjZDg4ZWM0LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQtZmJkNTBjZDg4ZWM0
LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIPi2XR5
C4qGlF7DAw0bb0Bc3hSEDNsK7LcWS0MCyABFwdZSYQUoHsDnMwANYE4QSmWvIJ+h
g8Fs+5akY0NUGboLCXAdKQ2x1E3HgsvX1jI4L8Kd9hYRhCb2jygIO4qgqpXn3bdp
Mdbykdoeaz/RWDZtBY0UqUdawpLyhmqwVr+BhEFrSUCDaOBE1dGzNlSQzgvsOmn4
4lhriVVPnOyF5A1YYF/Yx0h/0t4u+Cm8ZYk7I2bXTOr51ex5KErLuvE9MG1SFtaw
7o9wCvE20q/W6RBvMQhrwM6qQEAa8DuIEArSclkm+60ErZAZN/PIEfXc4pH7C3FF
R5fu2eLYyprRYg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:47 2025 by rpki-client