
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: dMzBD0TrUt/mV3cC4dpM+JOYEsejxYmYIxNvKcIif+A=
Subject key identifier: 58:51:51:01:62:1B:B5:60:5C:60:C8:AD:03:0E:94:D3:20:A3:B9:14
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 0197692A02FACC213901A6A771896406CDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0C82
Signing time: Fri 13 Jun 2025 12:00:50 +0000
Manifest this update: Fri 13 Jun 2025 12:00:50 +0000
Manifest next update: Sat 14 Jun 2025 12:00:50 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: QOCOyMnPuryyMoHz3pl3XOX4p2zuTERQYE9P5O21FuA=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:02:fa:cc:21:39:01:a6:a7:71:89:64:06:cd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Jun 13 12:00:50 2025 GMT
Not After : Jun 14 12:00:50 2025 GMT
Subject: CN=58515101621bb5605c60c8ad030e94d320a3b914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:90:31:9d:55:fc:cb:90:60:b9:ae:ef:5c:
c5:ae:da:4e:61:88:e2:b3:8c:b1:f0:d1:c8:42:4d:
c9:5a:3d:04:f1:e9:a1:01:7e:a7:5c:b5:23:04:2e:
9c:a4:7e:f8:cf:b8:64:f6:ec:40:de:dc:b7:a3:99:
01:52:3e:f3:06:62:13:59:92:68:fd:85:41:77:b9:
01:9a:98:a3:98:19:0a:7b:f8:49:08:5d:aa:79:3c:
85:e3:f3:1d:bb:40:9f:10:4f:2e:d3:a8:1b:69:ee:
01:0d:7b:4b:32:d5:8a:5a:10:c1:bb:4b:87:9e:1e:
c3:9f:59:a4:6c:18:0b:22:c9:a6:24:b1:99:4a:f1:
0b:c0:ae:aa:08:38:98:62:db:22:78:8b:62:ef:94:
dc:b2:11:12:ab:61:72:56:d0:ff:fa:8e:6e:55:0d:
cb:8b:d1:dc:0e:ab:fb:be:d8:67:52:c2:43:3a:4f:
a6:24:07:bf:41:08:cd:ab:e9:e8:97:75:ed:5e:86:
9f:da:42:58:6a:8f:9e:bf:54:39:51:01:d2:21:ab:
5c:db:cd:05:a4:59:e2:5c:78:53:6c:9c:85:2d:2d:
c6:ed:b1:fc:0f:81:31:2c:10:22:ce:92:23:65:b2:
f1:0f:67:ba:a5:8b:0d:b0:fb:76:56:fa:8b:72:a9:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:51:01:62:1B:B5:60:5C:60:C8:AD:03:0E:94:D3:20:A3:B9:14
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fd:52:73:80:86:6c:58:53:33:c4:89:a7:65:62:0b:36:52:
40:f5:b7:4b:45:88:da:ef:c8:0e:e9:64:3c:a2:91:67:0a:d7:
a6:5b:7f:73:d5:14:8c:0a:67:a9:b2:f5:4f:05:9a:1f:a6:0d:
1a:8e:65:14:2d:a0:d3:ea:56:89:f6:fa:b0:8b:cf:02:f1:f0:
0e:5f:57:39:46:69:47:43:79:a5:9b:c0:10:c7:8e:de:36:30:
36:58:f3:8d:99:83:8d:eb:da:a9:da:31:bd:40:17:c6:2d:5a:
49:74:69:c6:6d:7b:ac:d2:ac:1c:9b:f8:62:df:2c:4b:fc:18:
ec:45:fa:8b:3d:46:66:12:09:64:a5:5d:8e:2f:6a:88:c7:b9:
79:c5:62:e7:4b:d3:ef:0e:d0:3f:26:df:4b:a8:7a:91:41:f6:
f7:ae:e9:35:3e:a5:57:ea:36:3e:2b:f9:f1:6f:31:57:2a:5f:
0e:37:39:c5:05:84:1f:b5:ae:78:bf:d2:94:50:87:11:ca:98:
33:69:37:a0:52:c2:96:2c:3d:b5:36:d9:bf:89:3d:e5:60:65:
a2:ed:25:ea:7d:c5:f4:15:f5:82:d4:7c:d8:25:f9:61:45:ea:
2e:de:04:dd:6b:12:23:54:be:c3:48:a9:d5:47:07:c0:23:80:
c6:23:09:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKgL6zCE5AaancYlkBs30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTExNWM3MTdlNTg5MTM0YTU1MzY3MGYzZTJiNWI5Y2Rh
MTJkODMwHhcNMjUwNjEzMTIwMDUwWhcNMjUwNjE0MTIwMDUwWjAzMTEwLwYDVQQD
Eyg1ODUxNTEwMTYyMWJiNTYwNWM2MGM4YWQwMzBlOTRkMzIwYTNiOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqmQMZ1V/MuQYLmu71zFrtpOYYji
s4yx8NHIQk3JWj0E8emhAX6nXLUjBC6cpH74z7hk9uxA3ty3o5kBUj7zBmITWZJo
/YVBd7kBmpijmBkKe/hJCF2qeTyF4/Mdu0CfEE8u06gbae4BDXtLMtWKWhDBu0uH
nh7Dn1mkbBgLIsmmJLGZSvELwK6qCDiYYtsieIti75TcshESq2FyVtD/+o5uVQ3L
i9HcDqv7vthnUsJDOk+mJAe/QQjNq+nol3XtXoaf2kJYao+ev1Q5UQHSIatc280F
pFniXHhTbJyFLS3G7bH8D4ExLBAizpIjZbLxD2e6pYsNsPt2VvqLcqmc8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhRUQFiG7VgXGDIrQMOlNMgo7kUMB8GA1UdIwQY
MBaAFPChFccX5YkTSlU2cPPitbnNoS2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgt
Mzc2MjRmNmE1MzExLzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgtMzc2MjRmNmE1MzEx
LzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf1Sc4CG
bFhTM8SJp2ViCzZSQPW3S0WI2u/IDulkPKKRZwrXplt/c9UUjApnqbL1TwWaH6YN
Go5lFC2g0+pWifb6sIvPAvHwDl9XOUZpR0N5pZvAEMeO3jYwNljzjZmDjevaqdox
vUAXxi1aSXRpxm17rNKsHJv4Yt8sS/wY7EX6iz1GZhIJZKVdji9qiMe5ecVi50vT
7w7QPybfS6h6kUH2967pNT6lV+o2Piv58W8xVypfDjc5xQWEH7WueL/SlFCHEcqY
M2k3oFLCliw9tTbZv4k95WBlou0l6n3F9BX1gtR82CX5YUXqLt4E3WsSI1S+w0ip
1UcHwCOAxiMJUQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:45:45 2025 by rpki-client