Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: 7WgkXFDVq8jfqhK4rRH9kyeJT87J2TrYVCfI9LZaZI8=
Subject key identifier: 02:2C:7B:2F:40:35:BE:3A:B6:A8:44:7F:7C:B3:44:44:56:AB:D4:DF
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 0197703E7D5480D6F923DA9279250D984EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0D1E
Signing time: Sat 14 Jun 2025 21:00:32 +0000
Manifest this update: Sat 14 Jun 2025 21:00:32 +0000
Manifest next update: Sun 15 Jun 2025 21:00:32 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: ho1HBOmjmMiZwrluzfkH87pKJa5xmj1CF/oFMJphkCE=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:7d:54:80:d6:f9:23:da:92:79:25:0d:98:4e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Jun 14 21:00:32 2025 GMT
Not After : Jun 15 21:00:32 2025 GMT
Subject: CN=022c7b2f4035be3ab6a8447f7cb3444456abd4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:06:e9:80:49:75:2e:ee:eb:ce:a6:a5:5b:bc:
23:b9:73:62:27:4a:c4:4c:bf:9d:1a:0a:04:c6:8b:
7b:9d:3d:0c:55:34:5f:b3:2f:5f:7e:7c:04:b0:ec:
9d:49:45:98:dc:da:58:b8:1e:7e:3f:59:16:17:a0:
75:f7:12:87:fe:4f:28:ab:c4:c8:d0:ad:8b:95:47:
11:b7:9d:28:73:b2:df:58:6e:5e:23:99:10:f3:43:
3a:c9:38:a7:05:57:26:b8:8c:ba:9d:94:a4:df:18:
7a:1c:9e:1b:fa:00:7f:2b:c4:c7:d0:6a:37:77:12:
d6:03:a8:c3:e0:56:54:c5:45:be:76:4f:50:43:84:
17:9e:db:79:2d:6a:02:5c:52:43:b1:5a:61:f3:77:
92:a6:97:3c:b2:6f:30:93:67:6f:c9:de:2a:2f:43:
ca:14:68:42:62:20:56:38:17:e9:22:1f:d7:b2:37:
63:a7:45:7c:0f:c6:59:52:d3:a5:6d:7c:77:6e:1b:
57:5a:85:ec:ce:bc:41:cd:cf:9c:49:f7:d1:0f:e4:
4e:01:71:30:3b:b2:9b:61:10:40:fc:0f:52:dd:76:
2a:18:a7:9d:fd:90:4d:f8:35:3a:43:50:ac:f1:ee:
02:dc:5b:f6:2e:a3:91:9c:bf:cb:b1:f4:6c:34:72:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2C:7B:2F:40:35:BE:3A:B6:A8:44:7F:7C:B3:44:44:56:AB:D4:DF
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ce:70:0f:fd:10:ef:a3:e9:29:45:8d:e9:f5:48:44:9c:2c:
b6:77:71:95:99:f4:b2:d1:a7:e1:83:0d:46:fe:59:40:77:81:
cb:85:5b:a4:79:10:d2:47:13:7d:64:cc:09:4a:bc:c9:42:7c:
0e:d1:1b:fe:9e:8a:e7:a9:ff:d9:49:69:38:78:41:e6:d6:15:
13:94:a7:ad:bb:a7:c8:ce:00:61:27:e2:df:46:2b:05:88:63:
e3:aa:8d:8a:cf:78:f4:27:7f:42:c8:48:2e:0d:07:70:20:4b:
b4:2e:b5:4a:4a:06:4f:29:50:f1:6a:be:cf:c8:7c:de:6f:a5:
51:46:ea:c9:e5:1b:46:aa:f7:66:d6:e1:c1:1b:f0:b2:27:a7:
b3:2e:5a:e7:26:5d:61:01:8a:67:51:18:b9:92:37:78:01:06:
c2:2b:f0:be:38:18:41:52:a6:30:5e:75:ce:2d:91:dc:7f:14:
9a:4c:75:da:0a:23:0a:32:3c:74:3d:a6:b0:18:84:2a:7b:1e:
ad:fe:8a:22:5e:42:02:dd:7e:e5:5d:81:5f:c5:47:96:47:10:
a2:fc:85:a3:61:59:42:8e:33:99:0e:34:44:65:56:83:ef:5e:
07:e7:7b:ed:72:07:7b:9d:fc:82:85:f8:82:be:7e:43:f7:ab:
d3:d9:a8:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPn1UgNb5I9qSeSUNmE7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1
Y2MxMDMwHhcNMjUwNjE0MjEwMDMyWhcNMjUwNjE1MjEwMDMyWjAzMTEwLwYDVQQD
EygwMjJjN2IyZjQwMzViZTNhYjZhODQ0N2Y3Y2IzNDQ0NDU2YWJkNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AbpgEl1Lu7rzqalW7wjuXNiJ0rE
TL+dGgoExot7nT0MVTRfsy9ffnwEsOydSUWY3NpYuB5+P1kWF6B19xKH/k8oq8TI
0K2LlUcRt50oc7LfWG5eI5kQ80M6yTinBVcmuIy6nZSk3xh6HJ4b+gB/K8TH0Go3
dxLWA6jD4FZUxUW+dk9QQ4QXntt5LWoCXFJDsVph83eSppc8sm8wk2dvyd4qL0PK
FGhCYiBWOBfpIh/Xsjdjp0V8D8ZZUtOlbXx3bhtXWoXszrxBzc+cSffRD+ROAXEw
O7KbYRBA/A9S3XYqGKed/ZBN+DU6Q1Cs8e4C3Fv2LqORnL/LsfRsNHKbowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIsey9ANb46tqhEf3yzRERWq9TfMB8GA1UdIwQY
MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct
ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj
LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEM5wD/0Q
76PpKUWN6fVIRJwstndxlZn0stGn4YMNRv5ZQHeBy4VbpHkQ0kcTfWTMCUq8yUJ8
DtEb/p6K56n/2UlpOHhB5tYVE5SnrbunyM4AYSfi30YrBYhj46qNis949Cd/QshI
Lg0HcCBLtC61SkoGTylQ8Wq+z8h83m+lUUbqyeUbRqr3ZtbhwRvwsiensy5a5yZd
YQGKZ1EYuZI3eAEGwivwvjgYQVKmMF51zi2R3H8Umkx12gojCjI8dD2msBiEKnse
rf6KIl5CAt1+5V2BX8VHlkcQovyFo2FZQo4zmQ40RGVWg+9eB+d77XIHe538goX4
gr5+Q/er09mooA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:35 2025 by rpki-client