Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: Js+RbSeSJQLGA1/dBgN3yO6ebpm0zEjj/SXJyP6k4ug=
Subject key identifier: E5:0B:5B:6E:69:33:8C:E4:45:E9:49:2D:A8:1D:B0:C4:A4:76:33:A5
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 019857C5EB42A4ECAD9AECE6DAFE0C8D6716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0A9E
Signing time: Tue 29 Jul 2025 20:00:45 +0000
Manifest this update: Tue 29 Jul 2025 20:00:45 +0000
Manifest next update: Wed 30 Jul 2025 20:00:45 +0000
Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: 1Rlfh8MpvvUhYn6C8e9cwPge4Fur17fxWANtDaYBK0Q=)
2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:c5:eb:42:a4:ec:ad:9a:ec:e6:da:fe:0c:8d:67:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Jul 29 20:00:45 2025 GMT
Not After : Jul 30 20:00:45 2025 GMT
Subject: CN=e50b5b6e69338ce445e9492da81db0c4a47633a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:6d:3f:a5:44:c2:37:b7:65:14:e3:54:52:
d1:19:b4:e4:d5:8f:bd:9f:60:ce:81:80:b2:a8:81:
94:0c:40:9f:cc:84:35:f5:47:8e:fd:53:93:64:97:
ee:11:53:fe:9b:3c:6a:43:74:55:4e:cd:9d:6f:38:
d9:8b:b9:e6:f1:3b:a9:a4:3e:60:4f:3d:65:54:82:
dc:34:eb:6c:4e:a6:3a:a6:cc:6e:09:15:19:d1:66:
45:a0:cc:e7:87:8b:ee:9c:28:8c:4c:99:42:36:6a:
22:b4:e8:f0:1a:29:d1:0f:75:7f:3a:47:81:a5:2b:
3b:b5:b1:b1:5b:12:c8:9b:59:4c:f2:ec:b3:f3:3f:
dc:5c:09:f3:65:6d:6c:d9:7b:e1:03:2d:0d:df:fc:
4c:4c:13:49:8d:db:00:51:66:82:b8:bd:ef:15:80:
2a:02:1e:da:7b:b4:c1:38:02:a1:75:e7:8a:c1:9d:
23:d0:a9:9b:ef:ef:2e:e3:27:b6:a5:48:5b:b8:6e:
2b:61:29:25:a1:d0:fe:b1:99:27:2d:ff:14:c6:46:
53:6e:08:a2:ca:66:14:4d:6d:e3:10:92:54:37:0a:
9b:4e:b2:10:5e:25:72:d4:02:3c:d6:f8:b4:e0:d9:
d5:34:c4:8f:d1:31:ae:0d:50:d2:57:bb:23:79:6c:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:5B:6E:69:33:8C:E4:45:E9:49:2D:A8:1D:B0:C4:A4:76:33:A5
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:33:f9:b0:c1:a8:ac:93:d8:d4:b3:87:01:9c:2c:36:ee:20:
0f:98:52:bb:16:75:0c:0d:95:dc:08:c9:6c:97:a4:f6:6b:37:
98:60:a7:33:3a:23:9d:85:b1:91:f8:e9:52:13:89:ca:e4:cd:
77:e3:e6:94:57:99:5a:5a:1a:e9:53:15:11:f6:42:4f:e8:8e:
ab:b1:a5:b8:17:20:3b:58:1c:ad:5d:d7:f7:8e:f2:70:71:9a:
83:45:14:38:09:a2:8e:08:b4:53:1a:03:9c:5e:e6:97:62:fe:
61:d5:44:2e:92:d7:00:97:6d:57:f7:34:ee:c6:0a:2e:7c:ca:
2d:6c:8c:0d:56:ba:96:66:b7:f6:2f:96:4d:88:69:1a:26:44:
35:cc:81:e0:ed:07:ba:a0:99:e8:fb:43:8c:23:35:e0:21:00:
bc:1c:56:5b:15:c6:3f:17:6b:92:58:dd:56:68:de:d3:13:07:
2c:3f:99:19:d1:1d:2c:0a:d5:00:88:6e:cf:65:f8:12:51:7a:
bd:39:41:32:26:13:3c:0e:a9:28:3f:d1:01:d4:f6:3e:15:e3:
93:77:a2:b0:fa:93:7c:d2:ed:5f:fe:59:2a:d4:19:e0:03:d7:
d3:2c:cc:89:03:4d:b0:9e:e9:c5:34:14:5c:e7:7f:ec:92:45:
8e:db:9d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXxetCpOytmuzm2v4MjWcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx
ZTBlODQwHhcNMjUwNzI5MjAwMDQ1WhcNMjUwNzMwMjAwMDQ1WjAzMTEwLwYDVQQD
EyhlNTBiNWI2ZTY5MzM4Y2U0NDVlOTQ5MmRhODFkYjBjNGE0NzYzM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnNtP6VEwje3ZRTjVFLRGbTk1Y+9
n2DOgYCyqIGUDECfzIQ19UeO/VOTZJfuEVP+mzxqQ3RVTs2dbzjZi7nm8TuppD5g
Tz1lVILcNOtsTqY6psxuCRUZ0WZFoMznh4vunCiMTJlCNmoitOjwGinRD3V/OkeB
pSs7tbGxWxLIm1lM8uyz8z/cXAnzZW1s2XvhAy0N3/xMTBNJjdsAUWaCuL3vFYAq
Ah7ae7TBOAKhdeeKwZ0j0Kmb7+8u4ye2pUhbuG4rYSklodD+sZknLf8UxkZTbgii
ymYUTW3jEJJUNwqbTrIQXiVy1AI81vi04NnVNMSP0TGuDVDSV7sjeWwJLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOULW25pM4zkRelJLagdsMSkdjOlMB8GA1UdIwQY
MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt
ODNiMDM4NzAwOTRkLzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk
LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjP5sMGo
rJPY1LOHAZwsNu4gD5hSuxZ1DA2V3AjJbJek9ms3mGCnMzojnYWxkfjpUhOJyuTN
d+PmlFeZWloa6VMVEfZCT+iOq7GluBcgO1gcrV3X947ycHGag0UUOAmijgi0UxoD
nF7ml2L+YdVELpLXAJdtV/c07sYKLnzKLWyMDVa6lma39i+WTYhpGiZENcyB4O0H
uqCZ6PtDjCM14CEAvBxWWxXGPxdrkljdVmje0xMHLD+ZGdEdLArVAIhuz2X4ElF6
vTlBMiYTPA6pKD/RAdT2PhXjk3eisPqTfNLtX/5ZKtQZ4APX0yzMiQNNsJ7pxTQU
XOd/7JJFjtudSQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 02:41:43 2025 by rpki-client