
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: +/yzRtpJaBJj2UmqD117lnXk9d4eodM4lpcrkz1YFzo=
Subject key identifier: 80:55:15:6F:D9:B9:48:41:E5:D9:C7:4C:E1:CD:E6:1C:DF:E3:59:40
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 01988B7CC8EBC02A5FA9F372219587DC4240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0D31
Signing time: Fri 08 Aug 2025 21:01:07 +0000
Manifest this update: Fri 08 Aug 2025 21:01:07 +0000
Manifest next update: Sat 09 Aug 2025 21:01:07 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: e2F8xW43Wr+zjdjxmTPiYG4055IL19vE3JgG9Ci03zo=)
2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:c8:eb:c0:2a:5f:a9:f3:72:21:95:87:dc:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Aug 8 21:01:07 2025 GMT
Not After : Aug 9 21:01:07 2025 GMT
Subject: CN=8055156fd9b94841e5d9c74ce1cde61cdfe35940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:f9:c9:c2:00:bf:d5:9b:4c:07:9b:43:b0:
b2:d5:3e:aa:94:6b:76:b4:63:f9:27:ff:b6:e7:f6:
49:e8:71:d3:b9:c1:72:25:fd:31:88:84:94:35:5c:
b8:e2:55:18:91:45:82:75:25:05:f4:3a:d2:0e:63:
71:74:dd:bf:58:b9:72:83:f3:45:31:09:b3:0b:41:
0c:c9:67:7e:1b:b5:95:21:ff:ea:93:bb:cb:84:7b:
f3:89:5d:ef:53:d3:a6:61:eb:72:2b:b0:25:df:87:
5f:88:99:3c:7e:a1:04:3e:59:9c:1e:cd:7b:05:d2:
ca:7c:c6:85:3d:89:59:6c:a2:00:ce:7e:29:36:02:
1a:51:15:3e:e3:27:94:44:36:7a:78:f3:71:5c:e4:
de:d2:5a:ce:88:93:8a:43:54:83:0b:97:0d:6b:da:
7a:04:8b:70:77:b5:d7:20:ad:a9:a9:fc:56:33:a3:
c9:c9:13:f3:d2:1e:f3:f0:bd:f0:ec:24:b4:24:fb:
b7:46:4b:10:ae:69:1c:75:cd:f2:71:62:b5:68:dc:
92:9b:05:03:24:46:d8:6f:8f:b5:d8:c0:93:4e:02:
29:cb:12:a3:b1:87:17:b5:51:8c:5b:7c:3e:18:ad:
af:42:aa:b2:e4:2e:8a:46:b1:a5:94:39:58:34:a0:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:15:6F:D9:B9:48:41:E5:D9:C7:4C:E1:CD:E6:1C:DF:E3:59:40
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0a:47:fd:c5:35:4c:d6:d1:c0:94:d2:2b:d4:c3:29:2b:cf:
be:68:eb:99:b5:f7:59:a1:19:26:ee:e9:80:d5:e0:ec:da:bc:
5f:1d:66:51:01:d7:a1:e9:a1:b4:f4:f9:b0:18:99:fc:2f:3a:
d4:56:a1:bd:9c:8b:72:ea:f7:0a:f5:43:71:aa:0e:ca:79:13:
df:ba:6d:ff:57:29:5c:c3:35:f2:e6:e2:02:9e:4d:82:cc:5c:
11:26:1c:fd:19:c6:7a:da:6a:b0:7a:d5:06:14:6e:ab:9c:74:
27:05:2c:48:02:54:ab:62:9f:26:70:17:d9:c5:94:0c:7a:21:
d5:75:b4:02:0c:16:92:0b:9c:0b:d0:29:83:f5:2c:92:9d:48:
c2:38:9a:35:81:6f:db:4a:b1:50:57:57:b7:ef:69:f1:43:79:
42:c2:0b:d3:38:27:04:94:c1:1e:1d:c4:5e:52:29:a4:d6:96:
f2:8f:8b:7c:e4:f1:42:f4:1d:7e:c3:3d:4e:8b:11:56:76:8d:
bd:03:c8:0e:68:97:02:39:7c:2c:ea:41:de:69:f8:c0:a8:cc:
fe:80:5c:13:c8:78:d3:e5:b2:72:c5:40:2c:bd:30:de:61:1a:
1b:3b:b4:38:c1:64:0b:9c:73:bc:af:cb:a4:c5:0a:86:c1:88:
1e:fc:9c:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfMjrwCpfqfNyIZWH3EJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMTUwYjNhOTQxOTYyN2ZkYmNkYjY1ODBlODc4YTFjOWZh
MGNjNTgwHhcNMjUwODA4MjEwMTA3WhcNMjUwODA5MjEwMTA3WjAzMTEwLwYDVQQD
Eyg4MDU1MTU2ZmQ5Yjk0ODQxZTVkOWM3NGNlMWNkZTYxY2RmZTM1OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOf5ycIAv9WbTAebQ7Cy1T6qlGt2
tGP5J/+25/ZJ6HHTucFyJf0xiISUNVy44lUYkUWCdSUF9DrSDmNxdN2/WLlyg/NF
MQmzC0EMyWd+G7WVIf/qk7vLhHvziV3vU9OmYetyK7Al34dfiJk8fqEEPlmcHs17
BdLKfMaFPYlZbKIAzn4pNgIaURU+4yeURDZ6ePNxXOTe0lrOiJOKQ1SDC5cNa9p6
BItwd7XXIK2pqfxWM6PJyRPz0h7z8L3w7CS0JPu3RksQrmkcdc3ycWK1aNySmwUD
JEbYb4+12MCTTgIpyxKjsYcXtVGMW3w+GK2vQqqy5C6KRrGllDlYNKAGYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBVFW/ZuUhB5dnHTOHN5hzf41lAMB8GA1UdIwQY
MBaAFPAVCzqUGWJ/2822WA6HihyfoMxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMt
ZWRjNWFiOTk1ZGJmLzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMtZWRjNWFiOTk1ZGJm
LzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMApH/cU1
TNbRwJTSK9TDKSvPvmjrmbX3WaEZJu7pgNXg7Nq8Xx1mUQHXoemhtPT5sBiZ/C86
1FahvZyLcur3CvVDcaoOynkT37pt/1cpXMM18ubiAp5NgsxcESYc/RnGetpqsHrV
BhRuq5x0JwUsSAJUq2KfJnAX2cWUDHoh1XW0AgwWkgucC9Apg/Uskp1IwjiaNYFv
20qxUFdXt+9p8UN5QsIL0zgnBJTBHh3EXlIppNaW8o+LfOTxQvQdfsM9TosRVnaN
vQPIDmiXAjl8LOpB3mn4wKjM/oBcE8h40+WycsVALL0w3mEaGzu0OMFkC5xzvK/L
pMUKhsGIHvycUg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:53 2025 by rpki-client