Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: 78jjI9ioqljf/6RJdEIXsIZVF2IWZoqDWMZIkFmySHY=
Subject key identifier: EE:55:1B:FE:2C:2E:75:6F:C7:88:AA:0D:96:88:8F:B2:CF:4E:29:C2
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 019849652CFB5CCB5481EEDCCE97D4ACCD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 083D
Signing time: Sun 27 Jul 2025 01:00:23 +0000
Manifest this update: Sun 27 Jul 2025 01:00:23 +0000
Manifest next update: Mon 28 Jul 2025 01:00:23 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: yjUrNOiGwF4h1whJTnD+BPp4DmKZtKogEsrn4sUGGRM=)
2: nTEco9mT1eULi7_9dIxqABgskB8.roa (hash: yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:2c:fb:5c:cb:54:81:ee:dc:ce:97:d4:ac:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Jul 27 01:00:23 2025 GMT
Not After : Jul 28 01:00:23 2025 GMT
Subject: CN=ee551bfe2c2e756fc788aa0d96888fb2cf4e29c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:eb:81:81:07:6c:ac:4b:84:b3:cf:1f:3e:
cb:68:14:5d:69:9e:73:f6:fd:d0:13:4d:12:0f:bb:
ea:c9:08:d0:4f:2e:61:e6:33:0b:30:45:fc:cd:60:
e6:d2:e8:32:bc:dd:c8:fa:73:79:02:6e:61:e4:b6:
ad:07:bb:3a:0a:1b:f3:70:bb:4e:db:0a:3f:a4:dd:
30:0b:08:a2:39:9d:e1:92:83:8a:b4:9f:ac:83:6a:
cd:b1:e1:27:27:82:88:38:63:3e:cc:7b:e2:fc:8e:
2c:ab:07:87:65:a8:88:b1:c8:d8:33:66:10:77:5e:
24:b3:98:fb:4a:34:eb:7b:2d:ca:93:dd:9c:6a:ae:
65:a8:6c:1f:85:12:e8:a8:04:e3:a5:fb:ec:66:7e:
f5:cf:52:82:d8:47:3c:5a:16:ee:92:62:b9:0d:22:
a2:19:b2:a3:7e:c4:48:fd:43:72:e0:3e:5b:a4:dd:
21:f8:7e:28:99:cd:cf:25:f2:e2:f1:88:73:4f:d2:
a4:54:5f:6f:b3:ad:ef:68:ea:8b:4d:10:12:48:ba:
ab:86:88:99:3a:f8:c8:d8:a8:77:f4:2b:bb:8d:8a:
78:c6:e3:27:4d:b6:16:b3:e2:75:ca:c6:26:87:c0:
b1:eb:36:4c:53:60:41:b1:c9:ce:d0:33:b9:72:69:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:55:1B:FE:2C:2E:75:6F:C7:88:AA:0D:96:88:8F:B2:CF:4E:29:C2
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:91:ae:71:7e:f4:98:77:b3:70:2f:c6:74:6b:c7:8d:8c:a9:
65:98:5b:9a:b2:e8:10:84:7b:44:0d:1b:8b:a7:d0:d4:58:e0:
81:18:f5:16:86:df:02:bf:9b:31:2c:ed:07:69:cc:da:52:3e:
8f:a5:46:05:a0:20:02:d0:87:5a:d2:9b:5d:19:10:c6:63:5a:
b9:35:a4:6c:c1:a3:93:8f:81:c8:7f:ba:d7:dc:71:9d:bc:55:
4c:09:b6:50:4e:af:9f:72:63:e4:c7:82:53:b9:3a:06:92:7e:
75:7d:ba:91:c6:6a:bb:6f:a3:e9:9d:0a:60:a1:45:04:e9:28:
d8:1a:e5:34:c4:67:dc:ed:30:9e:1f:99:6c:14:d0:65:d6:40:
be:42:63:65:f7:0a:1a:91:69:a3:a9:c5:2b:54:3e:35:12:6b:
c8:59:b3:65:44:f4:a8:f6:d5:06:34:c4:98:a6:bb:bf:e9:37:
a1:c6:ab:ee:f8:0a:a6:d7:c5:cd:e5:82:19:2b:ba:2f:fd:25:
67:57:ce:93:a7:c9:1a:08:89:4c:c7:c4:b3:66:2b:39:c2:a6:
0b:89:0d:a6:8e:6d:94:00:61:73:d1:5f:7f:b0:49:62:a1:8f:
e8:85:93:75:5f:d4:e6:93:b2:93:31:c6:31:8a:7d:49:62:52:
d4:0a:36:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZSz7XMtUge7czpfUrM1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOWE2OTk1ODAxODVkNjUxMDAxNWUxZDJjYTE5ZWZmNDM2
NDFlZGMwHhcNMjUwNzI3MDEwMDIzWhcNMjUwNzI4MDEwMDIzWjAzMTEwLwYDVQQD
EyhlZTU1MWJmZTJjMmU3NTZmYzc4OGFhMGQ5Njg4OGZiMmNmNGUyOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2XrgYEHbKxLhLPPHz7LaBRdaZ5z
9v3QE00SD7vqyQjQTy5h5jMLMEX8zWDm0ugyvN3I+nN5Am5h5LatB7s6ChvzcLtO
2wo/pN0wCwiiOZ3hkoOKtJ+sg2rNseEnJ4KIOGM+zHvi/I4sqweHZaiIscjYM2YQ
d14ks5j7SjTrey3Kk92caq5lqGwfhRLoqATjpfvsZn71z1KC2Ec8WhbukmK5DSKi
GbKjfsRI/UNy4D5bpN0h+H4omc3PJfLi8YhzT9KkVF9vs63vaOqLTRASSLqrhoiZ
OvjI2Kh39Cu7jYp4xuMnTbYWs+J1ysYmh8Cx6zZMU2BBscnO0DO5cmmeMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5VG/4sLnVvx4iqDZaIj7LPTinCMB8GA1UdIwQY
MBaAFPKaaZWAGF1lEAFeHSyhnv9DZB7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTIt
OGU2YTI5NWY4MDZmLzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTItOGU2YTI5NWY4MDZm
LzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJGucX70
mHezcC/GdGvHjYypZZhbmrLoEIR7RA0bi6fQ1FjggRj1FobfAr+bMSztB2nM2lI+
j6VGBaAgAtCHWtKbXRkQxmNauTWkbMGjk4+ByH+619xxnbxVTAm2UE6vn3Jj5MeC
U7k6BpJ+dX26kcZqu2+j6Z0KYKFFBOko2BrlNMRn3O0wnh+ZbBTQZdZAvkJjZfcK
GpFpo6nFK1Q+NRJryFmzZUT0qPbVBjTEmKa7v+k3ocar7vgKptfFzeWCGSu6L/0l
Z1fOk6fJGgiJTMfEs2YrOcKmC4kNpo5tlABhc9Fff7BJYqGP6IWTdV/U5pOykzHG
MYp9SWJS1Ao2Zg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:09 2025 by rpki-client