Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier: MKhTIdzObuLzfSldYzIqEk4ogPp7+gOIOCAcUERX0R0=
Subject key identifier: 29:1D:90:F2:27:E8:EE:4C:34:94:08:B0:C2:78:1B:98:82:55:E2:21
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 019845890FB6711CB1E25A698D0B3334AB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 07:01:07 +0000
Manifest this update: Sat 26 Jul 2025 07:01:07 +0000
Manifest next update: Sun 27 Jul 2025 07:01:07 +0000
Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: Z5q415pXoQ7LRDnTmmBSuvZoiR+oenreDnzfVNyr3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:0f:b6:71:1c:b1:e2:5a:69:8d:0b:33:34:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: Jul 26 07:01:07 2025 GMT
Not After : Jul 27 07:01:07 2025 GMT
Subject: CN=291d90f227e8ee4c349408b0c2781b988255e221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:8d:5c:e4:42:5c:21:a8:1a:bb:91:4a:48:
fc:08:b3:d5:28:24:aa:af:47:15:11:90:80:23:16:
0e:ea:dd:9a:f0:44:ed:4a:2d:94:4c:52:f7:a3:5f:
83:24:ae:d8:19:41:1d:f3:ed:bb:b3:aa:43:7c:f5:
55:6d:ca:c1:8d:e7:cd:43:bf:37:2c:83:36:a7:31:
db:cd:06:74:71:ab:ef:81:05:29:57:ea:c5:3d:09:
6b:ac:56:47:2f:54:4c:09:83:6e:46:fe:7e:0c:b8:
17:7a:0a:f2:db:f4:5e:f2:44:f1:8c:e3:0b:a2:9b:
9b:4c:ef:cc:74:a1:9b:62:d3:23:bc:b6:0d:d9:94:
98:ce:89:04:38:6e:6b:7f:c9:cb:4d:a4:75:a8:c8:
e6:10:9a:08:22:65:5c:2d:09:7e:bf:4b:59:c1:64:
dc:40:66:cd:eb:0d:09:57:e3:60:9b:bd:1f:83:cc:
64:9f:ed:46:ca:f6:74:1c:18:a0:21:ba:f0:a2:ab:
43:97:97:01:36:e5:22:54:64:a7:4f:64:5e:3f:2d:
ff:8d:cc:88:5a:62:ed:ed:7b:2c:cb:a9:90:d7:0d:
62:6d:44:f5:2b:48:00:69:2b:93:c0:a6:a1:53:18:
19:cd:cc:d9:7d:63:eb:f4:cd:e6:ad:fe:e0:a0:08:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1D:90:F2:27:E8:EE:4C:34:94:08:B0:C2:78:1B:98:82:55:E2:21
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:76:e9:5f:0a:1f:ab:1b:12:7b:77:b8:ff:14:29:7e:59:1d:
39:f2:b5:d9:ee:06:ad:d7:11:b4:39:d2:12:ab:95:84:a4:9c:
2c:7e:47:00:69:70:9a:14:f9:36:a0:33:5a:82:eb:0a:1c:92:
a4:54:50:0c:04:63:46:46:f5:95:da:1c:e4:d1:0a:81:2e:04:
35:d9:90:03:e6:74:77:5f:31:f7:83:e3:03:4b:40:68:4a:72:
e8:f6:f8:7c:0e:26:f0:7f:a7:89:fe:d7:c9:85:7f:aa:3b:c8:
75:37:e2:0d:c6:d3:7e:2d:27:66:2b:7e:b2:c2:4b:e5:5a:39:
73:d2:86:01:df:b5:de:28:32:0d:df:60:72:93:51:41:fe:e7:
50:58:eb:42:11:93:77:d0:bc:96:05:b0:78:1c:b8:59:53:30:
07:f0:2d:4f:f1:ac:c0:f0:4e:49:16:ae:4d:14:77:b3:66:a7:
38:70:cf:6f:f2:d7:b2:9e:3c:64:ad:96:61:3a:2d:b9:b6:99:
37:de:6b:46:56:07:a5:7d:22:7b:9e:fc:4e:c8:ff:6d:e0:b5:
bc:75:7a:ac:97:14:59:9c:79:da:cc:2f:55:10:f8:fb:50:c6:
39:a0:8c:14:46:d3:1a:49:80:70:5f:23:0e:04:d4:57:ad:19:
d2:16:c1:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiQ+2cRyx4lppjQszNKs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1
NWVkODMwHhcNMjUwNzI2MDcwMTA3WhcNMjUwNzI3MDcwMTA3WjAzMTEwLwYDVQQD
EygyOTFkOTBmMjI3ZThlZTRjMzQ5NDA4YjBjMjc4MWI5ODgyNTVlMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm86NXORCXCGoGruRSkj8CLPVKCSq
r0cVEZCAIxYO6t2a8ETtSi2UTFL3o1+DJK7YGUEd8+27s6pDfPVVbcrBjefNQ783
LIM2pzHbzQZ0cavvgQUpV+rFPQlrrFZHL1RMCYNuRv5+DLgXegry2/Re8kTxjOML
opubTO/MdKGbYtMjvLYN2ZSYzokEOG5rf8nLTaR1qMjmEJoIImVcLQl+v0tZwWTc
QGbN6w0JV+Ngm70fg8xkn+1GyvZ0HBigIbrwoqtDl5cBNuUiVGSnT2RePy3/jcyI
WmLt7Xssy6mQ1w1ibUT1K0gAaSuTwKahUxgZzczZfWPr9M3mrf7goAiSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkdkPIn6O5MNJQIsMJ4G5iCVeIhMB8GA1UdIwQY
MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt
ZWZhOTM5MWY3ZDllLzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll
LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHbpXwof
qxsSe3e4/xQpflkdOfK12e4GrdcRtDnSEquVhKScLH5HAGlwmhT5NqAzWoLrChyS
pFRQDARjRkb1ldoc5NEKgS4ENdmQA+Z0d18x94PjA0tAaEpy6Pb4fA4m8H+nif7X
yYV/qjvIdTfiDcbTfi0nZit+ssJL5Vo5c9KGAd+13igyDd9gcpNRQf7nUFjrQhGT
d9C8lgWweBy4WVMwB/AtT/GswPBOSRauTRR3s2anOHDPb/LXsp48ZK2WYTotubaZ
N95rRlYHpX0ie578Tsj/beC1vHV6rJcUWZx52swvVRD4+1DGOaCMFEbTGkmAcF8j
DgTUV60Z0hbBwQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:50:21 2025 by rpki-client