Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: 1HTOLDGyB3OBX7Eu49eRLS5l+dZcvXuTl1adnl3WWKM=
Subject key identifier: 0A:0B:92:60:A2:E8:67:D2:0E:6C:F4:9B:D5:2B:2C:3E:C1:A0:68:1A
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 01984A0A6734FF9AA76A435B5960FA47AD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 04:00:52 +0000
Manifest this update: Sun 27 Jul 2025 04:00:52 +0000
Manifest next update: Mon 28 Jul 2025 04:00:52 +0000
Files and hashes: 1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: PE2WGc0VgjSvTEiMSjJd4EDKn9UWNlzoJ2q/tjyTgKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:67:34:ff:9a:a7:6a:43:5b:59:60:fa:47:ad:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Jul 27 04:00:52 2025 GMT
Not After : Jul 28 04:00:52 2025 GMT
Subject: CN=0a0b9260a2e867d20e6cf49bd52b2c3ec1a0681a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:a2:71:65:f8:a0:a8:9b:71:88:f9:40:8d:
7f:a0:f0:77:22:d7:c5:e2:24:3f:cc:ae:42:6d:e5:
21:10:13:10:bf:12:99:da:40:a9:26:7f:1c:04:cd:
0d:ed:59:10:41:21:ac:b2:1c:ca:89:68:7e:a3:82:
80:02:65:29:ae:cc:9b:85:0d:26:e3:06:16:f8:6e:
ec:88:db:e6:ed:69:dd:bd:85:45:8a:52:ce:b6:19:
74:50:02:1e:5d:88:02:76:23:67:db:01:67:cb:83:
82:ba:b9:23:39:9b:45:13:ca:ef:eb:e8:b1:f2:f3:
bf:5e:5b:25:f8:25:a6:c7:92:9d:d6:af:9c:9a:03:
58:43:74:1d:65:07:8a:4d:8c:92:f2:58:14:f4:44:
c4:c3:7d:77:38:36:f0:dd:a0:0e:ae:80:7a:02:92:
60:f2:86:16:45:db:6b:fc:2f:4b:c8:f3:5f:5e:0f:
f9:f1:e2:ef:be:a6:bc:11:af:58:30:07:60:35:05:
78:7c:a9:91:1b:e1:68:90:11:d5:3a:08:10:bd:f7:
06:f0:3b:f6:f4:e0:3f:4e:23:9a:4b:09:12:50:8e:
18:be:25:a0:b3:6c:d6:1b:96:cc:e1:ad:ac:c0:c7:
98:a6:e7:d0:c6:75:fc:bb:ea:80:ae:e9:77:6f:a1:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:92:60:A2:E8:67:D2:0E:6C:F4:9B:D5:2B:2C:3E:C1:A0:68:1A
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:66:40:3e:9f:cb:ce:a3:a5:a8:86:f1:c9:c3:13:42:c3:17:
2d:a2:36:0c:90:5a:8d:ce:0d:3a:f4:02:32:a6:f9:47:7c:ec:
d1:6b:08:74:4a:05:2a:56:85:c5:fc:a8:79:0d:d9:db:29:96:
c4:4e:ef:58:8a:b2:36:00:18:34:cc:35:86:c7:60:bf:0a:c3:
c2:a0:2b:3b:1d:ea:68:73:29:cb:ed:d6:26:16:84:2e:d3:8c:
e5:f3:33:08:87:0c:a3:0f:7d:0d:a8:49:a5:73:3c:b0:8e:3f:
d5:06:a2:84:1a:ad:2d:b7:2d:38:f4:22:f2:53:5d:57:e6:a3:
4f:d5:4b:b2:82:2d:1a:98:64:d3:77:01:0e:77:ed:e1:c5:14:
6f:99:3b:3a:96:5f:30:6a:fc:56:9b:a0:8a:94:01:6b:b3:e7:
9f:fb:a4:70:67:6c:fe:7b:13:09:57:22:dd:cb:16:ed:8a:4d:
a0:94:cc:4c:35:28:e3:56:41:19:83:09:b2:55:d0:e4:3e:ae:
12:18:28:f8:66:78:8c:cb:60:04:a2:c3:d1:45:de:ce:27:78:
85:2d:58:7e:a9:a1:37:28:d7:98:55:f1:55:50:39:01:73:dd:
04:2b:8a:a5:a6:36:dc:97:5b:fe:fa:64:9d:f2:ef:0c:de:9a:
78:23:d8:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCmc0/5qnakNbWWD6R60hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjUwNzI3MDQwMDUyWhcNMjUwNzI4MDQwMDUyWjAzMTEwLwYDVQQD
EygwYTBiOTI2MGEyZTg2N2QyMGU2Y2Y0OWJkNTJiMmMzZWMxYTA2ODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUSicWX4oKibcYj5QI1/oPB3ItfF
4iQ/zK5CbeUhEBMQvxKZ2kCpJn8cBM0N7VkQQSGsshzKiWh+o4KAAmUprsybhQ0m
4wYW+G7siNvm7WndvYVFilLOthl0UAIeXYgCdiNn2wFny4OCurkjOZtFE8rv6+ix
8vO/Xlsl+CWmx5Kd1q+cmgNYQ3QdZQeKTYyS8lgU9ETEw313ODbw3aAOroB6ApJg
8oYWRdtr/C9LyPNfXg/58eLvvqa8Ea9YMAdgNQV4fKmRG+FokBHVOggQvfcG8Dv2
9OA/TiOaSwkSUI4YviWgs2zWG5bM4a2swMeYpufQxnX8u+qArul3b6GXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoLkmCi6GfSDmz0m9UrLD7BoGgaMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGZAPp/L
zqOlqIbxycMTQsMXLaI2DJBajc4NOvQCMqb5R3zs0WsIdEoFKlaFxfyoeQ3Z2ymW
xE7vWIqyNgAYNMw1hsdgvwrDwqArOx3qaHMpy+3WJhaELtOM5fMzCIcMow99DahJ
pXM8sI4/1QaihBqtLbctOPQi8lNdV+ajT9VLsoItGphk03cBDnft4cUUb5k7OpZf
MGr8VpugipQBa7Pnn/ukcGds/nsTCVci3csW7YpNoJTMTDUo41ZBGYMJslXQ5D6u
Ehgo+GZ4jMtgBKLD0UXezid4hS1YfqmhNyjXmFXxVVA5AXPdBCuKpaY23Jdb/vpk
nfLvDN6aeCPYlg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:04 2025 by rpki-client