Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: FWpjsO/y2qLJ/gEen7pX3YPUMnwN+WDe2P+rsXszMOY=
Subject key identifier: 31:4F:24:88:49:A6:CE:63:49:68:7A:1B:7B:B1:BF:B1:B9:76:43:44
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 01984B54242882F3C8C1AEDA16A163A51F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0781
Signing time: Sun 27 Jul 2025 10:01:02 +0000
Manifest this update: Sun 27 Jul 2025 10:01:02 +0000
Manifest next update: Mon 28 Jul 2025 10:01:02 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: NTvwBoneanFTF1M1ilH9XPj/YdLuuJIdKct7nM/IiFs=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:24:28:82:f3:c8:c1:ae:da:16:a1:63:a5:1f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Jul 27 10:01:02 2025 GMT
Not After : Jul 28 10:01:02 2025 GMT
Subject: CN=314f248849a6ce6349687a1b7bb1bfb1b9764344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:95:50:8c:dd:2d:48:96:d9:3d:19:96:7e:
b3:17:bd:c8:d9:98:2c:7a:5b:e4:42:63:70:2f:8d:
d8:3a:69:9e:96:dc:da:1e:2b:72:68:e8:b0:da:5e:
29:5e:82:85:9f:e2:6f:9c:ca:f3:54:4d:d8:40:27:
ff:78:26:26:b0:fc:28:9a:17:95:8d:31:a6:20:72:
0e:3f:d2:c4:a5:8c:98:96:8f:ae:9d:ff:ce:86:a5:
16:10:36:c8:a5:46:95:ef:26:f1:57:f7:b1:bd:4f:
9e:07:d8:b5:a9:01:3a:c7:b6:54:9d:74:43:84:06:
13:df:32:b1:33:6a:ea:d5:de:cb:c9:17:a0:6e:0e:
b4:5e:57:e2:1e:30:f2:6d:17:8f:4d:6a:d7:73:51:
f8:29:bf:7b:28:d6:fa:92:09:37:57:6a:b4:55:42:
f3:cb:c9:44:e5:0b:80:11:90:c4:67:e4:a5:37:da:
e2:cd:bd:43:f3:96:2f:9f:d0:6a:bd:cc:c3:b3:ba:
9e:52:a6:ee:48:cc:42:c0:52:b3:cd:40:ad:91:cb:
81:19:da:96:f0:16:97:ce:1b:0d:f6:d5:7d:3a:cf:
f6:ed:99:16:2f:7e:63:14:87:a8:ac:df:28:4a:ad:
2a:60:f0:a8:2c:61:c6:c6:0c:b3:ee:43:af:98:90:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:24:88:49:A6:CE:63:49:68:7A:1B:7B:B1:BF:B1:B9:76:43:44
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e1:5c:d8:c1:86:90:fe:f5:b4:1f:b3:bb:7f:35:e0:7b:99:
c4:b5:01:c7:f9:26:09:e6:5b:01:bb:74:78:14:93:e8:97:ba:
d4:09:1f:a2:01:ed:b1:16:5b:fa:b8:c4:10:92:f4:00:d8:5b:
db:64:11:8b:d1:96:24:06:78:00:f2:b8:52:39:c3:7d:e6:53:
61:49:2c:a3:56:90:ac:18:e8:7b:a7:28:c2:38:f7:6b:ce:16:
98:a2:75:0c:56:fe:cb:b6:24:dc:ad:ba:97:04:cf:09:7b:d5:
c7:8e:5e:8c:a5:60:ff:d4:5a:fe:31:b8:00:46:96:34:4a:3f:
f4:e4:8d:5a:fc:3a:50:fc:7e:05:ea:88:59:88:fb:25:8a:23:
81:06:60:e8:d7:9f:f9:b2:ec:5c:9d:95:af:b9:a0:02:cd:7b:
c5:d1:c5:2f:1c:70:fe:a3:b3:05:e1:11:52:f8:e8:f9:f0:00:
31:c0:46:2f:3d:73:02:eb:a8:72:2c:55:9b:c3:6e:08:b8:f6:
8f:4e:6f:a5:21:04:ce:6e:dc:ce:b4:1f:9e:cb:66:6a:45:3f:
55:94:85:46:76:df:ad:52:4d:f5:c6:a6:51:42:b9:f4:79:15:
4d:70:95:bf:45:51:7f:f4:8c:34:63:50:af:84:82:f5:70:2c:
3b:7d:1a:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVCQogvPIwa7aFqFjpR+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy
NTQ0MjkwHhcNMjUwNzI3MTAwMTAyWhcNMjUwNzI4MTAwMTAyWjAzMTEwLwYDVQQD
EygzMTRmMjQ4ODQ5YTZjZTYzNDk2ODdhMWI3YmIxYmZiMWI5NzY0MzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD2VUIzdLUiW2T0Zln6zF73I2Zgs
elvkQmNwL43YOmmeltzaHityaOiw2l4pXoKFn+JvnMrzVE3YQCf/eCYmsPwomheV
jTGmIHIOP9LEpYyYlo+unf/OhqUWEDbIpUaV7ybxV/exvU+eB9i1qQE6x7ZUnXRD
hAYT3zKxM2rq1d7LyRegbg60XlfiHjDybRePTWrXc1H4Kb97KNb6kgk3V2q0VULz
y8lE5QuAEZDEZ+SlN9rizb1D85Yvn9BqvczDs7qeUqbuSMxCwFKzzUCtkcuBGdqW
8BaXzhsN9tV9Os/27ZkWL35jFIeorN8oSq0qYPCoLGHGxgyz7kOvmJD9KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFPJIhJps5jSWh6G3uxv7G5dkNEMB8GA1UdIwQY
MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt
NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw
LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+Fc2MGG
kP71tB+zu3814HuZxLUBx/kmCeZbAbt0eBST6Je61AkfogHtsRZb+rjEEJL0ANhb
22QRi9GWJAZ4APK4UjnDfeZTYUkso1aQrBjoe6cowjj3a84WmKJ1DFb+y7Yk3K26
lwTPCXvVx45ejKVg/9Ra/jG4AEaWNEo/9OSNWvw6UPx+BeqIWYj7JYojgQZg6Nef
+bLsXJ2Vr7mgAs17xdHFLxxw/qOzBeERUvjo+fAAMcBGLz1zAuuocixVm8NuCLj2
j05vpSEEzm7czrQfnstmakU/VZSFRnbfrVJN9camUUK59HkVTXCVv0VRf/SMNGNQ
r4SC9XAsO30aAQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:57 2025 by rpki-client