Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: c9CozNIFHRrvMoPJUZonkrccBCKB4+W+sapMUqV1A5s=
Subject key identifier: 07:47:5C:F6:55:C8:2D:58:E0:85:57:6D:EF:91:01:D9:2E:31:88:70
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019879AE02A8BF26F5E446D23666582EBD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 10:01:43 +0000
Manifest this update: Tue 05 Aug 2025 10:01:43 +0000
Manifest next update: Wed 06 Aug 2025 10:01:43 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: iC/wfC+qy1mILC8vLdrrI8+4+kc6e4z3NgjwGdRGYN0=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:02:a8:bf:26:f5:e4:46:d2:36:66:58:2e:bd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Aug 5 10:01:43 2025 GMT
Not After : Aug 6 10:01:43 2025 GMT
Subject: CN=07475cf655c82d58e085576def9101d92e318870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:81:e6:5c:bd:e0:4b:b6:93:cb:e6:ed:6e:
c4:19:0d:79:4e:5e:74:c7:c6:86:dd:6a:4f:ed:74:
f0:b4:9a:24:67:5f:7b:40:b0:df:5d:0b:94:86:26:
5a:69:fa:c6:32:5a:1a:c4:0d:a3:50:7f:12:c1:ba:
f1:e3:3b:55:29:dd:af:4f:2b:aa:14:8b:7e:c2:39:
b0:8c:6d:ce:ce:d3:7b:1d:7c:9a:d5:29:ad:9e:48:
ae:c6:29:80:b6:88:b1:26:ee:f1:d0:0f:18:a1:56:
40:48:14:2c:bf:29:6f:a6:44:8d:08:fa:c8:7b:3c:
09:81:21:cf:41:1f:df:10:e4:61:55:e5:07:ce:15:
72:2e:9b:33:e8:fb:0e:f2:fc:3d:57:53:b0:cd:57:
bc:d2:a9:20:97:60:d7:ad:02:45:1e:ad:89:22:82:
30:fc:d9:90:aa:32:ca:e7:c9:ad:ef:94:aa:32:c4:
c6:c2:7e:f5:a9:c1:b2:20:91:a2:f5:66:0e:bd:aa:
21:1c:7b:d6:50:f2:f5:9e:3b:f4:ad:88:e6:b5:f8:
17:51:57:e3:23:93:47:90:04:c1:9e:a7:d2:25:d8:
bb:83:6f:a8:96:3d:65:44:64:75:67:c6:0c:6b:33:
45:13:96:92:b1:4c:ef:38:17:00:bf:7c:44:aa:d0:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:5C:F6:55:C8:2D:58:E0:85:57:6D:EF:91:01:D9:2E:31:88:70
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c6:ac:67:c9:a6:d1:e5:bc:f9:ab:58:78:62:2d:99:e4:78:
11:f8:7f:78:d3:6b:65:e8:6e:50:fc:38:82:a1:31:d7:8c:07:
f5:cd:fd:ae:30:ac:57:6b:17:8b:17:8a:44:5e:50:10:c6:64:
d0:46:38:d0:65:fd:ad:01:6d:fb:38:ca:bb:4a:06:7f:9c:29:
ed:11:b8:35:14:4b:41:aa:2e:0f:af:a2:de:67:fd:5b:27:71:
6c:90:bd:ca:9d:42:80:d4:97:8e:ac:d1:3a:e6:ed:d4:86:0f:
16:c7:5b:50:72:62:bc:9c:5f:de:27:e8:0c:65:a5:2f:57:15:
31:3a:4c:53:5a:f3:4d:e7:0a:03:bc:54:3f:34:07:29:e1:86:
95:b3:62:2c:74:37:34:5b:5a:21:54:92:c7:71:7d:68:aa:67:
09:26:29:40:96:ac:46:09:2d:f3:4f:e4:f0:6c:1b:0d:7c:4b:
2a:9e:05:e8:db:c4:ff:7a:0e:e0:de:9a:07:f4:6b:cb:73:1a:
7f:99:cc:33:10:66:70:04:c1:59:a5:80:7f:a7:f1:12:a2:eb:
b1:bd:be:20:50:e1:ef:f8:c0:57:ef:f2:0f:1f:f0:6c:48:53:
ad:35:f8:c6:07:5a:97:04:6b:94:ba:ac:ee:b3:5e:6b:8a:84:
28:44:fa:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rgKovyb15EbSNmZYLr0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjY4MWNhYTFkMzdlNTg5OWJhMjdkZmJjMzY5NjBlMDZi
NWQzZjIwHhcNMjUwODA1MTAwMTQzWhcNMjUwODA2MTAwMTQzWjAzMTEwLwYDVQQD
EygwNzQ3NWNmNjU1YzgyZDU4ZTA4NTU3NmRlZjkxMDFkOTJlMzE4ODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYGB5ly94Eu2k8vm7W7EGQ15Tl50
x8aG3WpP7XTwtJokZ197QLDfXQuUhiZaafrGMloaxA2jUH8Swbrx4ztVKd2vTyuq
FIt+wjmwjG3OztN7HXya1SmtnkiuximAtoixJu7x0A8YoVZASBQsvylvpkSNCPrI
ezwJgSHPQR/fEORhVeUHzhVyLpsz6PsO8vw9V1OwzVe80qkgl2DXrQJFHq2JIoIw
/NmQqjLK58mt75SqMsTGwn71qcGyIJGi9WYOvaohHHvWUPL1njv0rYjmtfgXUVfj
I5NHkATBnqfSJdi7g2+olj1lRGR1Z8YMazNFE5aSsUzvOBcAv3xEqtDHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdHXPZVyC1Y4IVXbe+RAdkuMYhwMB8GA1UdIwQY
MBaAFPJmgcqh035Ymbon37w2lg4GtdPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMt
NjQwNzVjMmFlNDYzLzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMtNjQwNzVjMmFlNDYz
LzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMasZ8mm
0eW8+atYeGItmeR4Efh/eNNrZehuUPw4gqEx14wH9c39rjCsV2sXixeKRF5QEMZk
0EY40GX9rQFt+zjKu0oGf5wp7RG4NRRLQaouD6+i3mf9WydxbJC9yp1CgNSXjqzR
Oubt1IYPFsdbUHJivJxf3ifoDGWlL1cVMTpMU1rzTecKA7xUPzQHKeGGlbNiLHQ3
NFtaIVSSx3F9aKpnCSYpQJasRgkt80/k8GwbDXxLKp4F6NvE/3oO4N6aB/Rry3Ma
f5nMMxBmcATBWaWAf6fxEqLrsb2+IFDh7/jAV+/yDx/wbEhTrTX4xgdalwRrlLqs
7rNea4qEKET69g==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:35 2025 by rpki-client