Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: cYmqn9LcvmakfVmgPVFAQKR8sEVL0JHyQdIDDN4rgbA=
Subject key identifier: 6F:CD:1A:A3:ED:BD:48:29:19:8C:E9:5D:42:D9:A5:09:A0:AB:07:67
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 0198820C131C75E9541FFAD83C5BC6B12CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 01:01:26 +0000
Manifest this update: Thu 07 Aug 2025 01:01:26 +0000
Manifest next update: Fri 08 Aug 2025 01:01:26 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: iyxF1DGFSiT5KKFqEh+rZrFpkAlkj0V5HzEzFgUxPh0=)
2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:13:1c:75:e9:54:1f:fa:d8:3c:5b:c6:b1:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Aug 7 01:01:26 2025 GMT
Not After : Aug 8 01:01:26 2025 GMT
Subject: CN=6fcd1aa3edbd4829198ce95d42d9a509a0ab0767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:5e:d7:2f:e2:ab:81:f8:c0:17:7b:6f:e3:
10:5e:97:2a:ef:63:84:ee:6e:f3:d3:99:1e:ad:0e:
ba:f8:98:76:9c:a4:5b:f9:9d:c4:54:b4:bd:0c:b1:
9c:1b:24:f0:09:67:02:18:eb:81:36:f8:66:71:ae:
f0:70:6a:e3:64:66:0f:f4:50:b2:ae:01:b8:62:01:
e6:90:f6:22:73:4e:2e:4d:83:d6:60:03:20:24:28:
b4:1e:f3:e0:8a:d0:82:75:36:25:b1:98:20:75:3c:
a5:6d:ca:50:e5:ca:f8:60:c6:d5:ef:b2:02:3f:68:
a7:78:b8:0c:59:86:e8:c4:e4:64:70:e8:f6:8c:23:
bc:9a:12:ee:f5:25:84:02:e3:21:8b:e1:91:30:1e:
9d:91:e9:f1:e5:2d:6d:52:1c:99:ff:8d:07:81:c0:
20:ef:a0:d1:d7:07:ed:dc:c8:98:c0:c5:b7:02:6a:
0b:44:a4:55:34:89:6b:e5:e0:ce:ec:cf:b1:20:08:
80:02:91:d5:ec:60:87:c3:25:e0:0d:45:29:07:e0:
82:52:ff:6a:ef:a2:b8:06:c2:09:ab:6d:e5:ce:63:
ac:d0:07:25:65:65:4b:c2:f3:ad:cb:ca:2a:b9:0a:
b5:5d:42:26:1a:f2:b0:6d:98:a7:a7:1b:9f:83:40:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CD:1A:A3:ED:BD:48:29:19:8C:E9:5D:42:D9:A5:09:A0:AB:07:67
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:07:7c:ed:ec:0e:e2:03:40:ce:1c:c1:8f:d2:e2:3c:ce:f9:
58:44:75:f8:f0:12:8d:24:5e:52:c4:eb:4e:7d:00:4c:5b:b4:
5e:61:87:3f:c6:6e:4c:c8:9d:42:8d:2f:0a:34:74:43:1b:57:
11:83:ff:4c:c7:b8:f0:17:25:d4:a0:92:a2:7f:3b:d4:46:6c:
ca:fb:b4:ca:46:af:81:63:8c:5e:f3:4e:cd:cd:2e:46:a5:2d:
8b:da:3e:bf:c8:a3:c9:7a:10:39:9d:81:f2:7a:4d:14:3c:09:
96:3d:de:04:06:18:13:59:e8:54:ad:fc:c9:84:f7:95:56:49:
be:ff:97:70:4e:5a:ce:9d:18:d6:05:02:c6:3c:a2:30:86:41:
df:08:f8:a5:1a:5a:1f:86:83:0d:b6:dd:11:8d:12:79:72:b7:
cf:60:49:f1:ae:f6:cb:57:62:ed:b5:df:bd:26:05:7e:87:67:
86:4a:93:c0:52:48:4d:1e:26:37:f0:98:b3:ec:19:62:9c:f2:
ac:55:b9:9b:b7:bf:91:f8:94:7f:e8:ac:92:dd:a2:64:23:0a:
00:7f:bd:d0:09:ad:4f:e9:76:e9:95:65:f2:d7:6c:5a:d2:9b:
09:c0:5c:70:28:7e:fa:d4:52:08:e2:40:e2:a3:c2:3a:f4:ba:
c4:c3:d0:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCDBMcdelUH/rYPFvGsSymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTBhMjBlMzBlYzkxNWRlZDFkZjIwMDU1YWY2YjVmMjY2
NzJlYTkwHhcNMjUwODA3MDEwMTI2WhcNMjUwODA4MDEwMTI2WjAzMTEwLwYDVQQD
Eyg2ZmNkMWFhM2VkYmQ0ODI5MTk4Y2U5NWQ0MmQ5YTUwOWEwYWIwNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDVe1y/iq4H4wBd7b+MQXpcq72OE
7m7z05kerQ66+Jh2nKRb+Z3EVLS9DLGcGyTwCWcCGOuBNvhmca7wcGrjZGYP9FCy
rgG4YgHmkPYic04uTYPWYAMgJCi0HvPgitCCdTYlsZggdTylbcpQ5cr4YMbV77IC
P2ineLgMWYboxORkcOj2jCO8mhLu9SWEAuMhi+GRMB6dkenx5S1tUhyZ/40HgcAg
76DR1wft3MiYwMW3AmoLRKRVNIlr5eDO7M+xIAiAApHV7GCHwyXgDUUpB+CCUv9q
76K4BsIJq23lzmOs0AclZWVLwvOty8oquQq1XUImGvKwbZinpxufg0DGKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/NGqPtvUgpGYzpXULZpQmgqwdnMB8GA1UdIwQY
MBaAFPBQog4w7JFd7R3yAFWva18mZy6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQt
OWQzMTY3ODMxOTM0LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQtOWQzMTY3ODMxOTM0
LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAd87ewO
4gNAzhzBj9LiPM75WER1+PASjSReUsTrTn0ATFu0XmGHP8ZuTMidQo0vCjR0QxtX
EYP/TMe48Bcl1KCSon871EZsyvu0ykavgWOMXvNOzc0uRqUti9o+v8ijyXoQOZ2B
8npNFDwJlj3eBAYYE1noVK38yYT3lVZJvv+XcE5azp0Y1gUCxjyiMIZB3wj4pRpa
H4aDDbbdEY0SeXK3z2BJ8a72y1di7bXfvSYFfodnhkqTwFJITR4mN/CYs+wZYpzy
rFW5m7e/kfiUf+iskt2iZCMKAH+90AmtT+l26ZVl8tdsWtKbCcBccCh++tRSCOJA
4qPCOvS6xMPQdg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:29 2025 by rpki-client