Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier: B2Dejxd0nIyBzKalb+0V9N5O/1kJph9hMALRbDBFj7Q=
Subject key identifier: B1:69:85:1C:17:1A:EE:71:32:75:10:31:62:1A:7F:44:43:D6:B1:10
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial: 01985456720E2CF38263A5E8B259F23F9340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number: 1604
Signing time: Tue 29 Jul 2025 04:00:07 +0000
Manifest this update: Tue 29 Jul 2025 04:00:07 +0000
Manifest next update: Wed 30 Jul 2025 04:00:07 +0000
Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: h76fWF4MSdIsSVpv9+7KMvBUNKp05U/argFQtyvnk7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:72:0e:2c:f3:82:63:a5:e8:b2:59:f2:3f:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Validity
Not Before: Jul 29 04:00:07 2025 GMT
Not After : Jul 30 04:00:07 2025 GMT
Subject: CN=b169851c171aee7132751031621a7f4443d6b110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:da:ad:03:eb:d1:3d:62:43:4f:28:12:3f:
98:18:09:cc:48:b4:78:69:18:64:ca:3e:39:a7:3f:
c4:b9:9d:37:ea:48:b6:76:cc:c1:32:f3:b9:07:0b:
bc:65:bc:9c:a1:95:50:db:81:2c:fa:84:d4:c7:07:
11:1f:84:fe:19:84:dc:8e:d2:03:3d:23:64:e9:a1:
94:8f:b4:5e:59:63:47:5a:e3:69:f8:8a:4d:66:09:
3b:93:c0:3f:75:cf:c4:4a:5c:e1:65:26:c3:c6:08:
0c:ec:4a:40:42:8d:fe:a7:7c:7a:5a:e6:f6:74:ff:
44:59:68:e5:a6:72:f2:cd:51:30:67:c9:09:91:04:
02:bd:ef:5f:0f:6f:f2:2c:ec:28:9a:70:1e:58:ee:
9f:ce:fa:46:09:e7:f0:34:2c:d8:c6:8b:d9:9d:67:
ae:0b:12:ec:f4:7e:16:90:28:3e:97:e6:67:bd:52:
4d:34:c5:ae:c3:8c:96:ae:7a:ac:da:84:1b:42:76:
57:c4:4f:bd:97:ad:b8:20:cb:e2:55:dc:0c:67:d8:
92:fc:cd:a2:af:4d:86:c8:c4:9b:7b:aa:18:65:a2:
72:e5:e8:05:30:7f:b3:a5:90:27:28:8a:38:a8:18:
bc:2c:08:67:81:b5:e2:94:39:48:85:e2:81:0b:a5:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:69:85:1C:17:1A:EE:71:32:75:10:31:62:1A:7F:44:43:D6:B1:10
X509v3 Authority Key Identifier:
keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:68:5d:19:b7:34:20:cb:0f:f6:5e:0d:dd:8e:d8:87:06:49:
f9:b8:7e:e5:b2:fc:6b:41:19:fd:a6:ff:74:e6:7c:eb:31:a5:
47:09:c4:5b:4f:66:55:02:9f:ac:63:64:55:40:88:88:2c:34:
38:8a:bc:1c:3b:e1:e9:1e:ab:e8:6e:ed:f8:56:bf:0b:3e:73:
3a:d8:f4:68:a9:97:5c:95:93:95:29:35:75:7c:10:50:05:4b:
9b:eb:e3:92:d6:e1:8b:1b:73:6c:81:69:c4:61:12:6e:45:ad:
b2:e2:9f:c3:db:fc:9a:39:7a:80:e5:7b:fe:de:7a:30:8b:5c:
ef:58:85:24:20:7a:3f:3f:29:b1:2f:4a:f0:16:3e:fe:ba:ff:
6c:11:32:dc:ba:ac:af:9b:fb:3c:72:2c:5b:95:63:5b:9c:06:
85:38:22:b3:28:85:b1:27:1a:07:c7:a6:18:62:ff:a6:de:61:
56:06:3c:21:32:2b:fb:23:1e:b6:15:86:7c:d1:39:d8:ff:06:
e1:a4:f1:d1:ed:6c:02:87:16:78:3b:bf:dd:40:db:91:ce:f1:
bc:e7:98:f9:cd:9d:f5:73:ea:5f:e1:be:65:c6:cb:d7:75:27:
db:c4:9a:e6:df:a9:83:d1:79:31:ef:69:0b:ec:ef:15:89:cc:
08:f9:b1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUVnIOLPOCY6XoslnyP5NAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDU0YWIzYzNlMDliNjU1Y2I0NzI1NTM5ZmY2ZTY5OTMx
YzQ2YjAwHhcNMjUwNzI5MDQwMDA3WhcNMjUwNzMwMDQwMDA3WjAzMTEwLwYDVQQD
EyhiMTY5ODUxYzE3MWFlZTcxMzI3NTEwMzE2MjFhN2Y0NDQzZDZiMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mHarQPr0T1iQ08oEj+YGAnMSLR4
aRhkyj45pz/EuZ036ki2dszBMvO5Bwu8ZbycoZVQ24Es+oTUxwcRH4T+GYTcjtID
PSNk6aGUj7ReWWNHWuNp+IpNZgk7k8A/dc/ESlzhZSbDxggM7EpAQo3+p3x6Wub2
dP9EWWjlpnLyzVEwZ8kJkQQCve9fD2/yLOwomnAeWO6fzvpGCefwNCzYxovZnWeu
CxLs9H4WkCg+l+ZnvVJNNMWuw4yWrnqs2oQbQnZXxE+9l624IMviVdwMZ9iS/M2i
r02GyMSbe6oYZaJy5egFMH+zpZAnKIo4qBi8LAhngbXilDlIheKBC6UkwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFphRwXGu5xMnUQMWIaf0RD1rEQMB8GA1UdIwQY
MBaAFPFFSrPD4JtlXLRyVTn/bmmTHEawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMzFlYWItMzFlMS00OTY0LTk2MmUt
ZTE1YmM5NjUwYWFiLzEvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMzFlYWItMzFlMS00OTY0LTk2MmUtZTE1YmM5NjUwYWFi
LzEvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmhdGbc0
IMsP9l4N3Y7YhwZJ+bh+5bL8a0EZ/ab/dOZ86zGlRwnEW09mVQKfrGNkVUCIiCw0
OIq8HDvh6R6r6G7t+Fa/Cz5zOtj0aKmXXJWTlSk1dXwQUAVLm+vjktbhixtzbIFp
xGESbkWtsuKfw9v8mjl6gOV7/t56MItc71iFJCB6Pz8psS9K8BY+/rr/bBEy3Lqs
r5v7PHIsW5VjW5wGhTgisyiFsScaB8emGGL/pt5hVgY8ITIr+yMethWGfNE52P8G
4aTx0e1sAocWeDu/3UDbkc7xvOeY+c2d9XPqX+G+ZcbL13Un28Sa5t+pg9F5Me9p
C+zvFYnMCPmxQw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:48:11 2025 by rpki-client