Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: +mN+sVgOVctv1ryB/0mECsUS2Mp1IzPyQmUHNiCduTA=
Subject key identifier: 08:C5:2A:4E:EA:61:E2:C4:D3:B2:6F:67:03:39:DD:A9:64:6E:C2:16
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 019848C05030263304AF57201AEEA9680506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0800
Signing time: Sat 26 Jul 2025 22:00:19 +0000
Manifest this update: Sat 26 Jul 2025 22:00:19 +0000
Manifest next update: Sun 27 Jul 2025 22:00:19 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: lrDFfNaT4IxTby7A72dXvsHTXPJiF1/J4Vih5si2iec=)
2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:50:30:26:33:04:af:57:20:1a:ee:a9:68:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Jul 26 22:00:19 2025 GMT
Not After : Jul 27 22:00:19 2025 GMT
Subject: CN=08c52a4eea61e2c4d3b26f670339dda9646ec216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:12:33:a4:9a:9c:b4:79:83:c0:40:92:3c:
b1:1b:48:04:9a:d0:a3:dd:fc:82:c9:00:8c:f3:ce:
c7:ad:15:0c:66:4f:f7:4c:5e:88:6a:d6:44:96:3d:
74:52:ec:55:62:25:23:be:b5:82:9e:5d:6b:ad:fa:
ed:3c:98:da:c5:c1:30:39:25:b9:07:23:68:fe:c6:
84:69:d3:bf:c2:6c:b1:a3:eb:47:67:fe:8e:66:b5:
43:5b:67:b6:4b:4f:9c:eb:53:04:ef:64:d5:85:ed:
69:68:43:09:25:20:e4:96:42:04:27:51:dd:71:43:
d9:aa:2f:b7:ab:b1:d7:d7:0d:8c:04:1d:2d:0e:c5:
d1:e2:62:99:8f:eb:b5:80:f6:7e:ed:5a:f6:77:3c:
5b:a7:af:e0:60:2a:60:21:25:22:e4:25:f2:78:c7:
17:ff:0e:4f:c9:09:38:e8:e2:2e:67:0d:ea:fb:23:
0f:17:02:07:aa:12:3d:c4:d8:33:ef:2d:52:0a:68:
18:e2:18:5d:34:4d:fe:72:b6:5c:d9:e1:7a:8d:68:
f2:95:2d:fd:87:85:92:be:92:39:12:66:30:4c:e8:
30:9d:99:00:74:dd:6f:1d:8f:a1:0a:f9:a6:4d:4e:
f1:fb:fe:2c:bb:92:20:22:1e:06:10:c9:75:33:49:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C5:2A:4E:EA:61:E2:C4:D3:B2:6F:67:03:39:DD:A9:64:6E:C2:16
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1b:d8:b5:e1:fe:50:2d:31:4c:f4:d5:9d:6a:6c:72:34:5c:
25:03:ed:d4:bb:e8:cc:f2:b9:5c:38:86:d8:f5:8a:ee:8b:78:
3e:a1:46:8f:63:03:5a:5b:ea:7b:1b:1f:9b:48:f4:ac:e9:e0:
e8:db:d5:f0:d3:02:c4:f9:0a:fa:99:12:e5:3f:34:a8:23:9a:
72:29:e2:91:1e:b0:01:09:9f:ac:3a:92:09:52:fe:14:b4:39:
1c:e6:58:e2:c1:a0:31:05:df:b0:8c:0e:a2:06:a5:61:a2:92:
f0:8b:13:f4:e9:5c:d4:95:e0:a8:fb:1a:92:c7:eb:11:9b:40:
1b:66:f0:af:85:bd:90:0f:1c:04:42:87:6e:e5:a5:0e:3a:95:
bf:e5:87:c0:01:c3:05:05:19:40:b8:e7:a1:85:34:4a:19:33:
e1:82:49:aa:3d:e6:58:82:ac:8d:b0:61:1f:71:99:e0:b0:25:
84:a1:a0:b5:29:3e:41:df:a6:a9:6f:b5:e2:a5:2d:4a:72:5c:
ed:3a:5d:b0:75:e5:2f:af:46:1f:2c:c3:dd:12:8e:70:3f:17:
8d:0b:ac:6e:08:bb:e5:f6:87:ed:b3:86:90:e0:98:1a:57:a6:
46:bf:3c:75:d2:9b:1c:46:64:59:c4:d6:5a:2a:38:69:5c:53:
bc:31:94:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwFAwJjMEr1cgGu6paAUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTMyZDIxMjlhMzg2YzlhMGFmZGJiOTE1ZTBkYmYxMzBi
YTcwZDUwHhcNMjUwNzI2MjIwMDE5WhcNMjUwNzI3MjIwMDE5WjAzMTEwLwYDVQQD
EygwOGM1MmE0ZWVhNjFlMmM0ZDNiMjZmNjcwMzM5ZGRhOTY0NmVjMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovgSM6SanLR5g8BAkjyxG0gEmtCj
3fyCyQCM887HrRUMZk/3TF6IatZElj10UuxVYiUjvrWCnl1rrfrtPJjaxcEwOSW5
ByNo/saEadO/wmyxo+tHZ/6OZrVDW2e2S0+c61ME72TVhe1paEMJJSDklkIEJ1Hd
cUPZqi+3q7HX1w2MBB0tDsXR4mKZj+u1gPZ+7Vr2dzxbp6/gYCpgISUi5CXyeMcX
/w5PyQk46OIuZw3q+yMPFwIHqhI9xNgz7y1SCmgY4hhdNE3+crZc2eF6jWjylS39
h4WSvpI5EmYwTOgwnZkAdN1vHY+hCvmmTU7x+/4su5IgIh4GEMl1M0k6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjFKk7qYeLE07JvZwM53alkbsIWMB8GA1UdIwQY
MBaAFPCjLSEpo4bJoK/buRXg2/EwunDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYt
MmYwODM4MGFlNmM3LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYtMmYwODM4MGFlNmM3
LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhvYteH+
UC0xTPTVnWpscjRcJQPt1LvozPK5XDiG2PWK7ot4PqFGj2MDWlvqexsfm0j0rOng
6NvV8NMCxPkK+pkS5T80qCOacinikR6wAQmfrDqSCVL+FLQ5HOZY4sGgMQXfsIwO
ogalYaKS8IsT9Olc1JXgqPsaksfrEZtAG2bwr4W9kA8cBEKHbuWlDjqVv+WHwAHD
BQUZQLjnoYU0Shkz4YJJqj3mWIKsjbBhH3GZ4LAlhKGgtSk+Qd+mqW+14qUtSnJc
7TpdsHXlL69GHyzD3RKOcD8XjQusbgi75faH7bOGkOCYGlemRr88ddKbHEZkWcTW
Wio4aVxTvDGU+A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:04 2025 by rpki-client