Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File: 8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier: +rVQJB04hiQtrij1MPW8ekLoizkgyWLLLJKeCngbFEQ=
Subject key identifier: 33:E9:F8:60:A3:B3:32:3B:65:3A:4C:99:40:12:B4:2F:EA:92:59:45
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial: 01984AAEFE33348E167FA7CDA46C0472B54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number: 1328
Signing time: Sun 27 Jul 2025 07:00:39 +0000
Manifest this update: Sun 27 Jul 2025 07:00:39 +0000
Manifest next update: Mon 28 Jul 2025 07:00:39 +0000
Files and hashes: 1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: mmrVxmDuEFTNsV2WNiLdu+BqHyX8QKp7NLgpYN5qwA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:fe:33:34:8e:16:7f:a7:cd:a4:6c:04:72:b5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Validity
Not Before: Jul 27 07:00:39 2025 GMT
Not After : Jul 28 07:00:39 2025 GMT
Subject: CN=33e9f860a3b3323b653a4c994012b42fea925945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:72:dc:69:ed:89:eb:b0:bf:69:8e:27:eb:
8f:cf:5a:63:2e:83:3d:c8:1a:73:b3:ab:a8:81:b0:
e5:ae:57:5a:97:ac:12:d8:d4:44:cd:bf:4e:94:02:
b9:a9:c6:4f:29:9b:e0:94:31:2f:94:d4:af:44:cf:
94:ba:c6:10:63:01:d3:58:0f:98:68:f0:c4:6e:96:
75:8a:41:36:73:8e:49:9e:be:80:4b:d2:41:d3:da:
5a:1b:be:95:1a:61:d0:65:23:0b:48:ac:d6:4d:7e:
c9:dc:21:3a:5c:c7:8c:f3:d0:94:71:64:7d:75:83:
f3:ee:fa:63:fa:5f:6f:a0:22:e1:02:97:1d:16:38:
b3:03:04:ec:02:a8:d0:90:8b:4a:70:86:c7:66:ca:
a7:b4:1c:2f:1d:a4:f4:1c:bd:0f:15:c4:33:d8:f7:
e2:76:42:94:a2:0b:f4:af:18:6e:43:e5:eb:cc:cf:
70:4a:e5:d8:46:52:0d:3c:91:ec:8c:e5:12:88:d5:
4b:d0:b8:c1:fb:71:7d:2b:16:41:2f:c8:8f:4b:3e:
78:9f:b0:0d:30:6b:4b:a5:e0:43:28:dc:8f:a9:ab:
b0:a0:7d:85:cd:7c:22:ce:af:af:0a:97:e8:17:26:
43:70:0e:bb:38:0a:8e:c4:46:67:1d:a4:fd:80:dd:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:F8:60:A3:B3:32:3B:65:3A:4C:99:40:12:B4:2F:EA:92:59:45
X509v3 Authority Key Identifier:
keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:49:54:88:b9:53:74:8e:b9:3a:d7:d2:3b:6f:fd:10:8d:c8:
e1:9c:bd:41:b0:ea:27:8c:e2:90:24:40:a8:cb:23:d4:11:83:
15:61:f1:c1:f0:49:d2:fb:ab:d1:5a:c0:95:a7:9e:bd:5f:8a:
76:42:22:e0:7a:f3:b0:2d:b6:79:67:5e:67:44:fe:fb:ec:36:
34:43:e9:08:d8:27:75:0f:2f:0d:f6:c9:34:fc:7b:34:e7:09:
da:bf:b5:68:00:88:87:59:d0:00:01:f3:f7:ac:c6:c6:38:28:
53:fe:ed:79:9b:2b:d5:59:a6:8b:ab:05:bd:e3:38:63:66:92:
7a:52:b5:50:fd:72:c3:28:91:7d:69:58:4d:30:98:05:a0:1c:
51:5b:80:67:52:be:ba:58:e6:a6:3f:3b:76:27:86:98:3d:17:
2f:4d:4e:a5:97:8d:7d:4c:fa:bd:44:e5:8c:9e:e2:d5:10:31:
ad:dc:92:c5:8f:3b:e3:6b:78:88:74:6d:a9:d4:61:d1:55:a5:
a4:c1:dd:0f:ac:f4:60:39:5a:fd:4f:b2:ae:71:1c:2c:2a:8f:
98:f1:b6:2a:cf:85:aa:9b:24:17:f1:73:3a:70:cc:1d:40:c5:
3e:0a:8e:d9:b9:b5:28:1e:2d:f6:66:c9:cd:0b:76:5f:af:be:
5a:59:5c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrv4zNI4Wf6fNpGwEcrVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2QyYjNiOWVkODMxMjZkNDVkYmExMjAwM2Q2YzZlMzVh
NmIzODAwHhcNMjUwNzI3MDcwMDM5WhcNMjUwNzI4MDcwMDM5WjAzMTEwLwYDVQQD
EygzM2U5Zjg2MGEzYjMzMjNiNjUzYTRjOTk0MDEyYjQyZmVhOTI1OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRty3Gntieuwv2mOJ+uPz1pjLoM9
yBpzs6uogbDlrldal6wS2NREzb9OlAK5qcZPKZvglDEvlNSvRM+UusYQYwHTWA+Y
aPDEbpZ1ikE2c45Jnr6AS9JB09paG76VGmHQZSMLSKzWTX7J3CE6XMeM89CUcWR9
dYPz7vpj+l9voCLhApcdFjizAwTsAqjQkItKcIbHZsqntBwvHaT0HL0PFcQz2Pfi
dkKUogv0rxhuQ+XrzM9wSuXYRlINPJHsjOUSiNVL0LjB+3F9KxZBL8iPSz54n7AN
MGtLpeBDKNyPqauwoH2FzXwizq+vCpfoFyZDcA67OAqOxEZnHaT9gN1wNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPp+GCjszI7ZTpMmUAStC/qkllFMB8GA1UdIwQY
MBaAFPDNKzue2DEm1F26EgA9bG41prOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQt
N2M5ZTEwNTE3YzI1LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQtN2M5ZTEwNTE3YzI1
LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUlUiLlT
dI65OtfSO2/9EI3I4Zy9QbDqJ4zikCRAqMsj1BGDFWHxwfBJ0vur0VrAlaeevV+K
dkIi4HrzsC22eWdeZ0T+++w2NEPpCNgndQ8vDfbJNPx7NOcJ2r+1aACIh1nQAAHz
96zGxjgoU/7teZsr1Vmmi6sFveM4Y2aSelK1UP1ywyiRfWlYTTCYBaAcUVuAZ1K+
uljmpj87dieGmD0XL01OpZeNfUz6vUTljJ7i1RAxrdySxY8742t4iHRtqdRh0VWl
pMHdD6z0YDla/U+yrnEcLCqPmPG2Ks+FqpskF/FzOnDMHUDFPgqO2bm1KB4t9mbJ
zQt2X6++WllcOw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:31:27 2025 by rpki-client