Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: b/Vfd0K1kyixdje6XRR0bvfLaq1TAZcnMoeyssuFZZo=
Subject key identifier: B1:1C:16:EB:E6:27:BD:18:89:66:22:58:97:2F:62:25:E4:8F:66:13
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 0198A04D8A944F7B3024D65A858901555A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0853
Signing time: Tue 12 Aug 2025 22:01:32 +0000
Manifest this update: Tue 12 Aug 2025 22:01:32 +0000
Manifest next update: Wed 13 Aug 2025 22:01:32 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: jfEA+LYg/xVjY7vlt/Goj37tjJuZPFgb0hsePBDBv9A=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:8a:94:4f:7b:30:24:d6:5a:85:89:01:55:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Aug 12 22:01:32 2025 GMT
Not After : Aug 13 22:01:32 2025 GMT
Subject: CN=b11c16ebe627bd1889662258972f6225e48f6613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:2c:13:56:74:ae:89:5a:c6:9d:b1:54:f4:
ba:dc:a6:d1:ce:e6:b6:02:50:06:64:c7:e2:a1:7a:
4b:88:bd:1a:bb:eb:09:e8:46:88:ac:7b:71:5f:19:
92:78:b5:8c:57:86:c7:1b:60:38:89:29:ee:7a:4f:
ab:52:0f:30:1e:bb:1b:d4:19:18:23:01:bf:29:57:
dc:1a:85:f7:e0:a1:95:13:1f:dd:32:1c:57:24:9e:
5f:9c:7b:16:6f:cd:a6:50:61:32:77:b7:a7:f5:1d:
9d:35:3e:23:7e:ee:09:8a:1b:f6:cb:9a:95:12:f1:
2b:30:56:37:4d:62:1d:4a:a2:f1:c6:29:e0:91:d4:
b8:00:bc:a4:69:da:5e:f4:95:b0:b7:1b:05:32:24:
16:ed:e1:25:73:48:98:7f:60:12:50:ce:72:f3:93:
e4:b1:4d:76:20:8d:4d:12:fa:ab:4b:e2:32:9b:d8:
d5:63:ce:ec:bb:30:b1:a5:d1:b8:b7:63:80:1e:95:
db:6d:3c:22:64:e0:59:58:0c:05:90:12:0a:80:8a:
7d:9d:d0:e7:01:79:6a:3d:33:8c:dd:99:86:73:91:
c6:3c:43:62:19:c3:eb:66:13:c0:5b:2c:d8:df:96:
d0:90:14:91:2c:65:27:27:e3:ff:33:8f:bc:31:b3:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:16:EB:E6:27:BD:18:89:66:22:58:97:2F:62:25:E4:8F:66:13
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fd:21:5d:f9:92:f2:29:e4:c3:e7:2c:04:b5:3f:bd:ea:52:
7a:3b:55:9f:d1:15:58:a1:ef:91:ad:b1:ae:63:f2:d7:70:24:
59:eb:5a:d0:ff:31:15:8f:59:32:40:8f:93:35:cb:f8:d5:f9:
5b:f6:e6:ff:a3:1e:59:f6:dc:23:bc:82:02:c7:bf:91:f9:1d:
35:f9:6f:b4:08:b2:85:af:16:05:ea:15:79:ea:57:75:1f:44:
28:27:9b:6c:5d:6c:66:7d:42:29:1a:1a:f0:63:fe:89:14:b3:
30:69:13:92:b3:92:c1:af:91:ac:20:21:4f:23:2a:6e:5f:31:
88:13:36:47:c6:1e:91:0f:e7:2a:a9:ea:a7:26:f9:9d:b6:fe:
c4:66:7b:2e:35:1b:76:67:76:35:34:b7:63:e0:f3:6b:ed:fe:
2a:4a:44:e6:17:88:46:8d:51:ce:2c:a4:26:b4:e3:83:b5:e5:
0f:2c:75:00:ad:5a:01:68:a2:4a:07:59:d8:54:df:dc:d6:61:
20:16:a0:d7:0c:d1:9f:ae:3b:94:fb:77:c9:e7:bb:b5:5e:e9:
f1:2a:f1:ff:fb:fe:a8:f6:99:7f:0c:97:33:61:41:e6:c2:9f:
f2:a0:60:06:bd:c8:2f:6e:8a:98:19:dc:92:df:63:23:9e:5e:
0c:2b:a2:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTYqUT3swJNZahYkBVVpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjBiMTdkZDg5YjM4NjQyNDk3MjhiOWZjMmVlYWU1MTBm
ZGU0ZmIwHhcNMjUwODEyMjIwMTMyWhcNMjUwODEzMjIwMTMyWjAzMTEwLwYDVQQD
EyhiMTFjMTZlYmU2MjdiZDE4ODk2NjIyNTg5NzJmNjIyNWU0OGY2NjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokEsE1Z0rolaxp2xVPS63KbRzua2
AlAGZMfioXpLiL0au+sJ6EaIrHtxXxmSeLWMV4bHG2A4iSnuek+rUg8wHrsb1BkY
IwG/KVfcGoX34KGVEx/dMhxXJJ5fnHsWb82mUGEyd7en9R2dNT4jfu4Jihv2y5qV
EvErMFY3TWIdSqLxxingkdS4ALykadpe9JWwtxsFMiQW7eElc0iYf2ASUM5y85Pk
sU12II1NEvqrS+Iym9jVY87suzCxpdG4t2OAHpXbbTwiZOBZWAwFkBIKgIp9ndDn
AXlqPTOM3ZmGc5HGPENiGcPrZhPAWyzY35bQkBSRLGUnJ+P/M4+8MbPC1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEcFuvmJ70YiWYiWJcvYiXkj2YTMB8GA1UdIwQY
MBaAFIuwsX3YmzhkJJcoufwu6uUQ/eT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQt
ZTAxOTE5ZmNmZWRmLzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQtZTAxOTE5ZmNmZWRm
LzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOP0hXfmS
8inkw+csBLU/vepSejtVn9EVWKHvka2xrmPy13AkWeta0P8xFY9ZMkCPkzXL+NX5
W/bm/6MeWfbcI7yCAse/kfkdNflvtAiyha8WBeoVeepXdR9EKCebbF1sZn1CKRoa
8GP+iRSzMGkTkrOSwa+RrCAhTyMqbl8xiBM2R8YekQ/nKqnqpyb5nbb+xGZ7LjUb
dmd2NTS3Y+Dza+3+KkpE5heIRo1RziykJrTjg7XlDyx1AK1aAWiiSgdZ2FTf3NZh
IBag1wzRn647lPt3yee7tV7p8Srx//v+qPaZfwyXM2FB5sKf8qBgBr3IL26KmBnc
kt9jI55eDCuitQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:17 2025 by rpki-client