Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: eJ5tB1XVPlX2zfQmehl98MCOBC8VTM7tlaNu+D+TCFM=
Subject key identifier: A9:31:7A:04:34:8B:E7:26:7E:AF:4E:B1:9B:69:4D:72:9E:06:9E:CD
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 019872987F7262F1DD3B914C88C2C80BA1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 128A
Signing time: Mon 04 Aug 2025 01:00:53 +0000
Manifest this update: Mon 04 Aug 2025 01:00:53 +0000
Manifest next update: Tue 05 Aug 2025 01:00:53 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: BesvRNHu+EjPM6vTDBSGpildgrTViLX/ZsNt00OjGWM=)
2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:7f:72:62:f1:dd:3b:91:4c:88:c2:c8:0b:a1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Aug 4 01:00:53 2025 GMT
Not After : Aug 5 01:00:53 2025 GMT
Subject: CN=a9317a04348be7267eaf4eb19b694d729e069ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:e8:3f:82:70:19:81:ce:2f:87:ac:45:30:
35:47:7a:92:09:cb:d6:c5:6a:3d:00:d6:77:c3:7b:
6f:38:6c:5b:0b:ef:d1:bc:8c:15:46:41:dd:07:eb:
87:fb:b1:c6:5b:37:34:32:5b:42:56:01:05:2f:e6:
f2:76:4f:73:72:dc:1c:cf:81:c3:f5:73:e9:c8:44:
75:f1:7b:c7:73:bc:4f:e8:a1:cb:d3:88:d5:6d:c6:
58:8c:02:22:df:9d:05:e5:3c:02:b0:cb:24:a0:fb:
32:c2:7c:11:d2:0e:59:6d:88:de:ec:1c:54:fc:5c:
a1:0e:7a:1e:01:fe:e8:be:03:c6:92:6d:92:97:6b:
a2:48:63:bb:35:7f:b3:72:a9:f5:27:04:e9:21:df:
a8:84:f4:fc:b4:f5:3a:d0:30:6b:54:3b:2b:2b:64:
84:71:58:d1:19:0d:10:c8:01:57:53:c4:3a:d9:a9:
2c:29:e6:8b:a0:c0:83:ae:ff:99:e6:4c:8f:e5:65:
59:cf:28:3e:b3:e3:2d:47:02:27:b9:b7:bf:a7:a8:
3a:fe:22:31:54:c3:7a:49:73:21:cb:4c:92:52:7c:
4b:86:2c:8a:5c:57:65:e9:03:46:d4:3b:b0:46:dc:
0f:4a:62:5c:ab:03:60:61:29:a6:b6:75:a7:01:4b:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:31:7A:04:34:8B:E7:26:7E:AF:4E:B1:9B:69:4D:72:9E:06:9E:CD
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:24:2d:0a:ef:4f:d0:6c:55:5b:f0:72:32:1a:ad:7f:c7:db:
1c:f2:90:08:22:b1:ac:7e:f7:8d:38:29:e6:8b:ff:02:e1:e4:
57:7a:84:93:54:55:f8:c2:4d:4b:af:bd:b1:85:a8:1a:81:f8:
86:bb:d2:5e:93:07:76:e1:b0:f6:4f:47:86:ab:ca:1b:1c:d6:
5b:fa:98:ae:bb:80:68:ad:f9:37:10:77:8b:bb:06:c2:93:f6:
61:58:a1:2a:ac:95:02:37:17:b4:aa:2c:cc:10:10:22:0f:ac:
57:a9:24:8d:68:28:b2:a1:da:5c:b5:96:a4:11:27:aa:f6:3c:
20:08:91:78:e0:44:22:5c:80:c7:ba:2d:d4:e9:1f:bf:0c:7c:
b3:c2:8f:5d:3e:1c:94:cb:6f:4c:4b:3d:1a:70:4a:47:d8:64:
4d:85:41:ba:4d:f9:ec:86:a5:9d:e5:2a:10:50:af:36:55:8d:
73:11:10:b5:76:73:d6:87:56:37:59:28:45:71:b9:ae:e8:d4:
c6:20:fc:c6:f3:39:38:99:1a:dc:7f:83:54:ba:6a:07:d2:3c:
9b:05:5e:5f:9c:5a:d4:b7:43:0e:6f:89:e6:d9:d4:e1:48:e6:
c0:23:a0:01:e6:24:d4:17:2f:7c:15:bf:4f:6a:ea:ba:c0:e9:
6c:a4:bf:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymH9yYvHdO5FMiMLIC6HdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw
MGJhNjgwHhcNMjUwODA0MDEwMDUzWhcNMjUwODA1MDEwMDUzWjAzMTEwLwYDVQQD
EyhhOTMxN2EwNDM0OGJlNzI2N2VhZjRlYjE5YjY5NGQ3MjllMDY5ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvzoP4JwGYHOL4esRTA1R3qSCcvW
xWo9ANZ3w3tvOGxbC+/RvIwVRkHdB+uH+7HGWzc0MltCVgEFL+bydk9zctwcz4HD
9XPpyER18XvHc7xP6KHL04jVbcZYjAIi350F5TwCsMskoPsywnwR0g5ZbYje7BxU
/FyhDnoeAf7ovgPGkm2Sl2uiSGO7NX+zcqn1JwTpId+ohPT8tPU60DBrVDsrK2SE
cVjRGQ0QyAFXU8Q62aksKeaLoMCDrv+Z5kyP5WVZzyg+s+MtRwInube/p6g6/iIx
VMN6SXMhy0ySUnxLhiyKXFdl6QNG1DuwRtwPSmJcqwNgYSmmtnWnAUsJUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkxegQ0i+cmfq9OsZtpTXKeBp7NMB8GA1UdIwQY
MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt
MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy
LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCQtCu9P
0GxVW/ByMhqtf8fbHPKQCCKxrH73jTgp5ov/AuHkV3qEk1RV+MJNS6+9sYWoGoH4
hrvSXpMHduGw9k9HhqvKGxzWW/qYrruAaK35NxB3i7sGwpP2YVihKqyVAjcXtKos
zBAQIg+sV6kkjWgosqHaXLWWpBEnqvY8IAiReOBEIlyAx7ot1Okfvwx8s8KPXT4c
lMtvTEs9GnBKR9hkTYVBuk357IalneUqEFCvNlWNcxEQtXZz1odWN1koRXG5rujU
xiD8xvM5OJka3H+DVLpqB9I8mwVeX5xa1LdDDm+J5tnU4UjmwCOgAeYk1BcvfBW/
T2rqusDpbKS/Gw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:07 2025 by rpki-client