Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: Bx9uAoJVgS/n17O5BqZ5oS21wUQFmuDqZipQVd+Zojw=
Subject key identifier: C8:33:21:01:9E:A9:CD:A7:11:9E:6D:5E:EC:91:19:58:65:62:16:3A
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 01987450725AEF776C355AADC6B1C9F47A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 0FDC
Signing time: Mon 04 Aug 2025 09:01:25 +0000
Manifest this update: Mon 04 Aug 2025 09:01:25 +0000
Manifest next update: Tue 05 Aug 2025 09:01:25 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: 2Lr81MSXE8gdglPv8ivQdhLT1UhefJcZVlVN+Gt8EzA=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:72:5a:ef:77:6c:35:5a:ad:c6:b1:c9:f4:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Aug 4 09:01:25 2025 GMT
Not After : Aug 5 09:01:25 2025 GMT
Subject: CN=c83321019ea9cda7119e6d5eec9119586562163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:3e:33:0b:d6:df:1b:57:10:15:8a:7d:8c:
10:76:61:91:68:81:69:40:a6:96:61:5c:f2:ab:69:
ce:94:cc:d6:b5:6c:cf:25:f9:c8:ea:92:b2:64:4e:
7f:21:6a:c4:12:b6:f8:fc:40:44:22:13:6f:08:2a:
b5:eb:d4:02:4d:a8:96:fb:39:d7:62:71:a3:c0:93:
9f:0d:3d:0a:86:c1:30:90:69:25:2e:65:dc:f5:47:
fa:a8:3d:26:03:83:57:13:5e:53:22:b4:01:db:8a:
c4:7f:65:12:96:c6:65:e1:65:19:ca:20:ed:ab:3c:
83:84:68:80:16:0b:bb:41:5f:37:ad:98:4f:0b:6b:
20:0a:aa:b4:bd:b2:fe:c9:92:fd:7c:84:bf:fe:dd:
55:ab:bf:48:7e:fd:70:b9:fa:6f:31:8c:8d:f0:4e:
3d:3f:3e:d9:78:65:a9:02:0e:a6:59:5a:b6:f4:70:
75:ca:95:81:df:36:93:48:8b:f5:df:09:0a:72:d9:
69:17:28:a7:73:2d:5d:59:0a:96:02:37:f3:d8:1d:
71:d2:33:d4:86:4c:95:38:ff:83:a4:f2:09:1d:a7:
17:63:09:55:75:77:72:b5:2a:2b:0b:c4:ab:ea:69:
89:6b:43:1e:9d:96:1a:91:4d:c1:06:35:b6:c5:b5:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:33:21:01:9E:A9:CD:A7:11:9E:6D:5E:EC:91:19:58:65:62:16:3A
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:79:0d:fb:fc:a7:a2:00:f9:32:d8:89:71:6d:af:f4:39:fe:
9d:ce:c9:40:3c:22:c7:24:15:cf:54:6f:d9:f0:5d:cb:1a:7f:
34:a7:17:e5:3f:59:c1:eb:d2:76:65:ae:10:fc:4c:c0:2a:42:
47:f8:d7:65:45:f2:c0:4d:4b:87:12:a7:11:84:09:b3:7d:c3:
0c:a1:9c:59:30:99:ce:79:74:0c:c1:ba:63:84:45:54:b0:8e:
b5:91:b6:93:81:67:9f:ae:ff:5c:e1:52:71:4d:e3:ec:ac:1f:
91:d8:d2:81:f2:3a:c9:46:21:66:6b:1c:d4:32:7b:c2:8d:6f:
e1:3f:bb:09:8d:f0:26:93:9a:4a:46:19:92:17:51:80:43:18:
a4:c5:3b:da:6b:91:d1:5e:f2:51:86:88:0d:10:02:63:51:0b:
87:3a:ab:9c:a6:61:4b:2d:48:34:64:c5:b6:3f:a3:32:26:29:
66:7d:b7:11:b9:36:89:3e:06:40:ea:7c:59:ef:a4:e4:d0:86:
a8:87:b8:b9:57:7b:1b:aa:3b:5b:d0:46:fd:a0:0d:b9:26:b8:
69:c7:64:2c:37:bd:6e:8e:61:a9:b3:46:69:3a:44:0a:29:05:
fb:41:2b:00:90:11:3b:66:f0:fa:22:88:c5:83:77:03:5c:72:
bd:27:be:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UHJa73dsNVqtxrHJ9HpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzhhY2JjYzQ2ZjEzM2VmZDM5M2Y1MTE2MGZkYmI3NjA3
ZTFlMTYwHhcNMjUwODA0MDkwMTI1WhcNMjUwODA1MDkwMTI1WjAzMTEwLwYDVQQD
EyhjODMzMjEwMTllYTljZGE3MTE5ZTZkNWVlYzkxMTk1ODY1NjIxNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYI+MwvW3xtXEBWKfYwQdmGRaIFp
QKaWYVzyq2nOlMzWtWzPJfnI6pKyZE5/IWrEErb4/EBEIhNvCCq169QCTaiW+znX
YnGjwJOfDT0KhsEwkGklLmXc9Uf6qD0mA4NXE15TIrQB24rEf2USlsZl4WUZyiDt
qzyDhGiAFgu7QV83rZhPC2sgCqq0vbL+yZL9fIS//t1Vq79Ifv1wufpvMYyN8E49
Pz7ZeGWpAg6mWVq29HB1ypWB3zaTSIv13wkKctlpFyincy1dWQqWAjfz2B1x0jPU
hkyVOP+DpPIJHacXYwlVdXdytSorC8Sr6mmJa0MenZYakU3BBjW2xbXR2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgzIQGeqc2nEZ5tXuyRGVhlYhY6MB8GA1UdIwQY
MBaAFPJ4rLzEbxM+/Tk/URYP27dgfh4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYt
OTRiNTE0NDMzYzExLzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYtOTRiNTE0NDMzYzEx
LzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHkN+/yn
ogD5MtiJcW2v9Dn+nc7JQDwixyQVz1Rv2fBdyxp/NKcX5T9ZwevSdmWuEPxMwCpC
R/jXZUXywE1LhxKnEYQJs33DDKGcWTCZznl0DMG6Y4RFVLCOtZG2k4Fnn67/XOFS
cU3j7KwfkdjSgfI6yUYhZmsc1DJ7wo1v4T+7CY3wJpOaSkYZkhdRgEMYpMU72muR
0V7yUYaIDRACY1ELhzqrnKZhSy1INGTFtj+jMiYpZn23Ebk2iT4GQOp8We+k5NCG
qIe4uVd7G6o7W9BG/aANuSa4acdkLDe9bo5hqbNGaTpECikF+0ErAJARO2bw+iKI
xYN3A1xyvSe+kg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:32 2025 by rpki-client