Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: AhV0ff3Qt6brNGZ6fj2l7OISr87Q7SrBrOtlaxr55Os=
Subject key identifier: 9C:59:57:8B:42:E3:58:09:C3:4F:32:37:C1:FF:73:B6:1E:ED:50:93
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 0199221E9EF256E7DDB18D209BF735C1651B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: DGXoPpFCiCHwjJWIhO4hxwNBJDkEJiIGFraCNFKsKxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9e:f2:56:e7:dd:b1:8d:20:9b:f7:35:c1:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=9c59578b42e35809c34f3237c1ff73b61eed5093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:98:f9:b7:ac:c5:29:d2:b0:23:3f:cf:28:
22:b9:f6:47:2a:d5:72:8c:e9:2b:d5:39:2c:bb:88:
5f:54:f7:bc:eb:f6:69:a9:de:81:16:ef:e3:99:4a:
48:79:45:ba:5e:a0:4f:9f:7f:9a:76:53:8d:5a:34:
35:2b:7f:11:c8:67:3c:58:3e:de:0d:74:dc:51:46:
a2:c6:c9:4c:6e:d5:bb:14:00:6e:3b:b8:94:fd:ce:
2a:de:e3:a1:1f:01:ff:c0:f4:ac:aa:0a:6f:c7:3a:
7b:f1:37:d0:eb:3b:1e:f1:48:44:bb:d8:f3:06:11:
4a:82:a4:0a:bd:90:5c:1e:54:6b:74:58:ad:e4:73:
0f:1a:02:4c:91:4e:19:c6:26:c7:c4:70:82:4b:78:
dd:6e:a6:b4:e3:76:70:c2:32:7a:a5:7f:20:6a:4d:
2c:d6:14:9a:c7:b3:43:a4:ca:5c:d3:ab:e3:47:fc:
eb:c1:e9:5d:b1:4c:96:52:56:14:1c:5c:d8:c1:37:
63:28:8d:8d:dd:50:e1:ef:f0:86:9b:44:6e:7d:ce:
bc:f5:a1:f4:41:14:b4:2b:a6:34:88:9b:5e:24:6c:
49:1e:7d:14:7a:14:d1:e2:2b:27:42:c1:e7:94:33:
83:7f:b5:d9:be:f0:55:ce:58:5d:38:d9:19:3b:e5:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:57:8B:42:E3:58:09:C3:4F:32:37:C1:FF:73:B6:1E:ED:50:93
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:00:dc:6b:ef:b0:07:7e:16:e2:e8:16:e7:de:13:8f:eb:4a:
44:20:c9:e1:47:2c:70:5b:88:ec:2b:0e:1b:ff:4d:eb:6d:cd:
10:89:90:f7:ef:cc:2d:7c:7e:06:16:67:b1:1a:f8:54:24:e4:
e3:96:a2:eb:33:98:b9:cb:c3:1b:73:9b:0e:70:8e:40:11:42:
16:6c:20:a9:4d:c0:fa:62:f2:8c:2c:45:31:13:61:39:78:57:
e6:29:41:9f:f1:dc:74:7b:fb:07:51:95:c7:db:17:ae:17:ab:
ab:f6:e1:e4:af:85:5c:46:99:38:4c:c4:3a:17:0d:16:30:9f:
c6:87:de:3a:00:24:10:9d:4f:f7:e6:d4:c5:85:f2:69:df:c2:
f8:67:ae:6a:82:8a:88:01:47:6e:de:67:30:15:ca:c9:bf:14:
5f:be:46:54:5d:9f:cb:47:8f:84:c5:5d:57:62:65:40:b7:47:
6d:65:3c:ec:14:9a:cd:29:a3:c6:87:0c:83:3f:69:25:7c:81:
75:fd:df:19:1e:4c:de:f0:c7:ad:f0:1c:12:52:77:01:35:ee:
75:f2:41:ee:f6:ce:3a:f6:88:c1:26:2e:10:d5:a4:80:99:7d:
4f:15:c7:b1:99:38:78:39:6b:4b:88:83:29:4a:ad:cd:56:59:
d8:af:fe:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHp7yVufdsY0gm/c1wWUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2Y2Y2NmNTdmMWM0OGYxMWMxNGZkMDA1NDA1YWNjZTM2
ZDAzYjgwHhcNMjUwOTA3MDMwMDU2WhcNMjUwOTA4MDMwMDU2WjAzMTEwLwYDVQQD
Eyg5YzU5NTc4YjQyZTM1ODA5YzM0ZjMyMzdjMWZmNzNiNjFlZWQ1MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOqY+besxSnSsCM/zygiufZHKtVy
jOkr1Tksu4hfVPe86/Zpqd6BFu/jmUpIeUW6XqBPn3+adlONWjQ1K38RyGc8WD7e
DXTcUUaixslMbtW7FABuO7iU/c4q3uOhHwH/wPSsqgpvxzp78TfQ6zse8UhEu9jz
BhFKgqQKvZBcHlRrdFit5HMPGgJMkU4ZxibHxHCCS3jdbqa043ZwwjJ6pX8gak0s
1hSax7NDpMpc06vjR/zrweldsUyWUlYUHFzYwTdjKI2N3VDh7/CGm0Rufc689aH0
QRS0K6Y0iJteJGxJHn0UehTR4isnQsHnlDODf7XZvvBVzlhdONkZO+VKAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxZV4tC41gJw08yN8H/c7Ye7VCTMB8GA1UdIwQY
MBaAFPM/bM9X8cSPEcFP0AVAWszjbQO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEt
ZjVkNmI0OTIzOTRiLzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEtZjVkNmI0OTIzOTRi
LzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASADca++w
B34W4ugW594Tj+tKRCDJ4UcscFuI7CsOG/9N623NEImQ9+/MLXx+BhZnsRr4VCTk
45ai6zOYucvDG3ObDnCOQBFCFmwgqU3A+mLyjCxFMRNhOXhX5ilBn/HcdHv7B1GV
x9sXrherq/bh5K+FXEaZOEzEOhcNFjCfxofeOgAkEJ1P9+bUxYXyad/C+GeuaoKK
iAFHbt5nMBXKyb8UX75GVF2fy0ePhMVdV2JlQLdHbWU87BSazSmjxocMgz9pJXyB
df3fGR5M3vDHrfAcElJ3ATXudfJB7vbOOvaIwSYuENWkgJl9TxXHsZk4eDlrS4iD
KUqtzVZZ2K/+2g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:31 2025 by rpki-client