
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: zXSlyGMpxViuTRxDVVDcBp195S7sIPMAPGbh+1ZEGy4=
Subject key identifier: C6:77:DF:BA:9F:BF:EC:F0:78:1C:CA:A7:73:7F:46:65:3F:4D:0D:9F
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 01987C40BF91E80BB64D368D4FA5E8294568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 1064
Signing time: Tue 05 Aug 2025 22:01:14 +0000
Manifest this update: Tue 05 Aug 2025 22:01:14 +0000
Manifest next update: Wed 06 Aug 2025 22:01:14 +0000
Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: D+fvS8J3ra42h1VLM8PPv8Wrny1isnAPDoeQQeCp0OE=)
3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:bf:91:e8:0b:b6:4d:36:8d:4f:a5:e8:29:45:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Aug 5 22:01:14 2025 GMT
Not After : Aug 6 22:01:14 2025 GMT
Subject: CN=c677dfba9fbfecf0781ccaa7737f46653f4d0d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:43:c9:19:f8:32:74:14:0c:e2:09:26:11:
f4:88:8e:b3:b0:14:19:7d:38:df:30:6a:bc:7d:e2:
fe:f8:57:5a:e6:81:31:89:b5:8d:10:d1:a8:d2:32:
05:b3:a0:16:d4:9c:81:4f:89:f9:2e:d5:3c:cf:12:
e5:ad:47:85:7d:0d:ff:cd:b5:68:86:b1:31:77:9e:
a4:90:26:1e:0e:cc:10:4e:98:ee:c9:8b:7a:d0:4d:
c2:77:b4:0b:28:98:d0:4d:8a:f6:54:7c:0d:90:d0:
54:45:8b:f7:33:32:18:d7:da:be:f7:35:20:71:dd:
23:a3:7d:dd:f5:5a:63:b6:ea:bd:40:82:a9:60:0e:
50:c5:f1:55:f8:66:6a:13:3c:b6:71:ab:9d:ec:6c:
f1:3b:e5:a5:2f:f7:00:cb:41:87:83:60:b1:8b:fe:
7a:6a:41:0e:b3:5f:bc:cd:bb:f0:1c:e3:1a:da:84:
72:d8:24:e1:90:d5:b5:d7:9b:8a:5c:40:f9:81:48:
45:5e:a6:41:a3:06:10:36:d1:b1:7c:13:e5:f0:ad:
72:ab:c9:10:34:7b:3f:ec:97:38:1e:ab:f1:cc:cf:
77:2a:0a:83:2a:ee:44:d5:ce:b5:9b:70:59:69:2e:
ea:2e:b9:4e:3d:35:18:78:7f:35:27:97:b8:68:f5:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:77:DF:BA:9F:BF:EC:F0:78:1C:CA:A7:73:7F:46:65:3F:4D:0D:9F
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c2:a3:b3:e7:3e:56:1b:48:3d:94:56:13:49:5d:3e:4b:3c:
c9:a0:43:2c:e6:97:fe:c5:07:60:96:66:70:fb:b7:8f:b6:eb:
60:2f:a6:77:e3:e7:1f:c9:80:ca:b7:c8:25:59:54:16:8e:e3:
46:2f:30:4c:c9:99:0e:9d:f8:b2:a5:9e:9f:35:f5:92:a3:d2:
1d:62:4e:b1:f1:25:a4:71:57:f7:50:86:00:4b:f8:d5:78:83:
9e:35:92:90:4c:8d:f3:2a:2c:46:36:1a:b5:7e:65:99:a6:04:
c8:97:ea:60:44:49:a2:54:61:26:db:f0:b4:cb:3e:55:e6:52:
80:d2:b4:df:e6:1e:63:14:d1:6e:06:72:45:6c:88:7d:32:e2:
2f:20:3a:ad:d8:68:48:24:88:1d:0e:1e:2f:94:d8:cb:4e:ee:
a6:90:fb:cb:3d:0b:f0:29:8c:56:0f:cc:b9:f1:59:3d:80:7a:
a3:e6:29:64:e6:e2:dc:92:84:d4:33:c9:f2:cc:1d:0a:97:1e:
f9:5a:19:ba:3b:9e:e3:4b:76:ac:4a:b9:aa:8f:26:68:be:b9:
db:b1:45:06:b7:90:43:b2:99:26:f0:84:c3:4f:f5:1c:1d:5c:
2f:56:28:a9:e8:04:eb:c7:bb:d2:de:71:71:76:e1:06:b1:cc:
59:ea:82:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QL+R6Au2TTaNT6XoKUVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjUwODA1MjIwMTE0WhcNMjUwODA2MjIwMTE0WjAzMTEwLwYDVQQD
EyhjNjc3ZGZiYTlmYmZlY2YwNzgxY2NhYTc3MzdmNDY2NTNmNGQwZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA141DyRn4MnQUDOIJJhH0iI6zsBQZ
fTjfMGq8feL++Fda5oExibWNENGo0jIFs6AW1JyBT4n5LtU8zxLlrUeFfQ3/zbVo
hrExd56kkCYeDswQTpjuyYt60E3Cd7QLKJjQTYr2VHwNkNBURYv3MzIY19q+9zUg
cd0jo33d9Vpjtuq9QIKpYA5QxfFV+GZqEzy2caud7GzxO+WlL/cAy0GHg2Cxi/56
akEOs1+8zbvwHOMa2oRy2CThkNW115uKXED5gUhFXqZBowYQNtGxfBPl8K1yq8kQ
NHs/7Jc4HqvxzM93KgqDKu5E1c61m3BZaS7qLrlOPTUYeH81J5e4aPWMtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ337qfv+zweBzKp3N/RmU/TQ2fMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsKjs+c+
VhtIPZRWE0ldPks8yaBDLOaX/sUHYJZmcPu3j7brYC+md+PnH8mAyrfIJVlUFo7j
Ri8wTMmZDp34sqWenzX1kqPSHWJOsfElpHFX91CGAEv41XiDnjWSkEyN8yosRjYa
tX5lmaYEyJfqYERJolRhJtvwtMs+VeZSgNK03+YeYxTRbgZyRWyIfTLiLyA6rdho
SCSIHQ4eL5TYy07uppD7yz0L8CmMVg/MufFZPYB6o+YpZObi3JKE1DPJ8swdCpce
+VoZujue40t2rEq5qo8maL6527FFBreQQ7KZJvCEw0/1HB1cL1YoqegE68e70t5x
cXbhBrHMWeqCKw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:34 2025 by rpki-client