Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: jNOq+12Gecled+10R52HkTlNDd0o8z2z8qMx8bq22GM=
Subject key identifier: 96:A0:5D:9B:68:81:E8:DE:B8:8F:7A:4B:85:3F:EA:32:B7:9D:82:D0
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 019855A0B255F7047A43EC601B3CF56B4D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 060C
Signing time: Tue 29 Jul 2025 10:00:51 +0000
Manifest this update: Tue 29 Jul 2025 10:00:51 +0000
Manifest next update: Wed 30 Jul 2025 10:00:51 +0000
Files and hashes: 1: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: Ruw38VCK4H8dCvzO9FtLro6IM0Yay7eIoPDOk4eHCzY=)
2: Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa (hash: 0Bf0l0DWLnoKx593QVoGlu2x+BD1lYWYH448tSVbn0U=)
3: Tb-8GP8qcCsPrA2Xrleo-iet2HM.roa (hash: yyhoDt89y5+7nL9lVvf4sdS/dAeJY+OT1BrhoMFwMME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:b2:55:f7:04:7a:43:ec:60:1b:3c:f5:6b:4d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Jul 29 10:00:51 2025 GMT
Not After : Jul 30 10:00:51 2025 GMT
Subject: CN=96a05d9b6881e8deb88f7a4b853fea32b79d82d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:26:dd:6b:21:75:1f:d4:d1:75:52:b5:64:
22:75:fa:26:3b:89:a3:90:40:4a:4a:f7:e4:62:08:
e1:21:50:d3:bb:e2:07:09:9b:f0:f3:49:6c:08:c9:
94:1f:a3:06:ef:63:6b:7e:2f:63:67:95:4f:1c:e4:
96:71:2d:e7:61:90:cb:51:f8:8b:98:8b:c3:0c:8e:
1f:77:3f:4c:e1:e8:1b:cb:14:8d:a3:16:18:98:45:
cd:76:a2:a9:e6:66:52:92:f9:2a:86:56:de:37:5c:
5f:6d:2e:b9:50:41:a9:b6:68:04:5e:28:b5:02:8c:
da:95:be:f1:af:b6:77:42:af:d9:df:c0:19:eb:c2:
d8:b0:00:af:39:23:78:e1:61:32:1e:d0:8d:8f:6e:
f9:10:e0:84:8b:51:39:3b:e2:42:16:0a:2e:e7:62:
c9:87:63:3c:4d:12:0b:ba:14:4e:66:f8:db:74:86:
07:77:03:9e:91:1a:a2:15:9d:35:d3:a8:4d:f7:b2:
02:5a:13:7a:e1:c4:39:7c:7f:4a:48:f7:d4:98:d8:
ba:6c:c9:b9:35:d0:4f:c3:25:4d:ae:26:f3:d5:95:
3b:a0:27:ee:9d:94:07:0b:02:9f:de:9b:8c:a4:42:
c1:00:4f:1f:22:8a:34:a9:31:4a:1c:80:4c:96:52:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A0:5D:9B:68:81:E8:DE:B8:8F:7A:4B:85:3F:EA:32:B7:9D:82:D0
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ea:89:38:b3:8c:59:3b:6e:b4:4c:52:75:09:05:f6:6f:41:
85:f5:9a:8d:5f:77:98:98:77:59:25:28:a7:5d:77:be:35:c2:
ad:6a:12:cb:3a:d5:0b:78:50:71:d9:21:94:09:e0:20:68:26:
9c:9c:1b:97:3a:f6:65:da:19:a6:5a:21:cf:71:9e:c0:e8:b3:
03:47:86:e9:2f:53:9d:e5:f4:09:c5:aa:a1:d3:6d:a9:d2:08:
5d:6d:21:09:f9:6c:08:5b:5f:7c:6c:50:f6:17:f9:cf:8e:b7:
56:f3:b4:d6:38:74:3a:40:55:88:d7:22:4b:c7:cc:04:c9:d2:
3a:8d:88:2a:23:10:fd:89:f2:f6:a6:c1:9c:38:f5:04:35:52:
1e:9d:8e:76:94:dc:92:f8:41:bd:a5:ac:00:c1:aa:87:06:20:
6f:90:aa:ef:60:78:ee:d1:b1:26:bd:c3:3e:ac:f6:f0:1b:72:
a5:a6:b8:4a:2d:38:a1:f5:bd:0a:1a:67:32:96:ae:9d:2b:7b:
b6:1e:2e:7a:e5:7b:eb:72:9b:e1:83:96:60:28:7b:d7:88:fc:
db:0a:68:ef:71:05:8e:d0:c4:f9:6f:f7:6c:f6:42:c6:0f:37:
b0:1a:dc:8f:46:87:9c:c3:83:f8:dd:1e:59:06:06:1c:06:ae:
66:84:d5:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVoLJV9wR6Q+xgGzz1a00oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZWU1YjY4NDljOGM4MWY1YTc2MzU5NTU4OGE2YmE2ODIx
ZTc2N2IwHhcNMjUwNzI5MTAwMDUxWhcNMjUwNzMwMTAwMDUxWjAzMTEwLwYDVQQD
Eyg5NmEwNWQ5YjY4ODFlOGRlYjg4ZjdhNGI4NTNmZWEzMmI3OWQ4MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvMm3WshdR/U0XVStWQidfomO4mj
kEBKSvfkYgjhIVDTu+IHCZvw80lsCMmUH6MG72Nrfi9jZ5VPHOSWcS3nYZDLUfiL
mIvDDI4fdz9M4egbyxSNoxYYmEXNdqKp5mZSkvkqhlbeN1xfbS65UEGptmgEXii1
Aozalb7xr7Z3Qq/Z38AZ68LYsACvOSN44WEyHtCNj275EOCEi1E5O+JCFgou52LJ
h2M8TRILuhROZvjbdIYHdwOekRqiFZ0106hN97ICWhN64cQ5fH9KSPfUmNi6bMm5
NdBPwyVNribz1ZU7oCfunZQHCwKf3puMpELBAE8fIoo0qTFKHIBMllLhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJagXZtogejeuI96S4U/6jK3nYLQMB8GA1UdIwQY
MBaAFPLuW2hJyMgfWnY1lViKa6aCHnZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTIt
NjBhMDM5ZGQxYmNhLzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTItNjBhMDM5ZGQxYmNh
LzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeqJOLOM
WTtutExSdQkF9m9BhfWajV93mJh3WSUop113vjXCrWoSyzrVC3hQcdkhlAngIGgm
nJwblzr2ZdoZplohz3GewOizA0eG6S9TneX0CcWqodNtqdIIXW0hCflsCFtffGxQ
9hf5z463VvO01jh0OkBViNciS8fMBMnSOo2IKiMQ/Yny9qbBnDj1BDVSHp2OdpTc
kvhBvaWsAMGqhwYgb5Cq72B47tGxJr3DPqz28Btypaa4Si04ofW9ChpnMpaunSt7
th4ueuV763Kb4YOWYCh714j82wpo73EFjtDE+W/3bPZCxg83sBrcj0aHnMOD+N0e
WQYGHAauZoTVww==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:37:45 2025 by rpki-client