Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: iKNKN26j+zE9uiXW1jobEfwEDxJxl/85qdxQjkRa1f4=
Subject key identifier: 14:36:13:7E:33:6E:49:5A:13:86:F8:E7:93:D2:C5:41:E4:CB:25:68
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 019921B1B672C5DDC35951BCCBAC0DFE7ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0A34
Signing time: Sun 07 Sep 2025 01:01:58 +0000
Manifest this update: Sun 07 Sep 2025 01:01:58 +0000
Manifest next update: Mon 08 Sep 2025 01:01:58 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: Xiv2zTmRWa6wkcSz7GpSb4tZrLKQwzevDUmEPX0IfO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:b6:72:c5:dd:c3:59:51:bc:cb:ac:0d:fe:7e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Sep 7 01:01:58 2025 GMT
Not After : Sep 8 01:01:58 2025 GMT
Subject: CN=1436137e336e495a1386f8e793d2c541e4cb2568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:6c:84:19:2b:cb:0f:0d:b3:a0:c6:12:36:
95:08:b5:7f:6f:a5:11:39:3d:75:8e:6c:65:56:17:
23:00:09:0b:23:54:7c:ad:51:0f:01:58:d4:ef:0d:
db:4f:d0:29:c4:06:f6:c4:94:40:e8:ee:9f:9b:89:
ba:b0:d3:d0:a5:0c:07:bb:e9:f2:27:46:8b:b5:8d:
51:b4:83:73:00:f1:71:cc:70:6a:ff:13:cd:05:f2:
19:bf:11:d9:7d:1b:10:8c:66:33:19:4c:60:8a:3e:
b8:5b:0b:7e:d3:8c:80:96:eb:f1:22:33:dc:17:c0:
79:ce:fa:67:a7:45:7f:89:bd:c8:b3:b5:bb:ba:13:
12:02:fa:92:71:66:e4:5d:c3:c0:81:ec:68:e1:08:
66:52:91:e4:32:7a:10:ca:ff:16:30:95:28:16:1e:
c2:da:f7:ca:64:2a:a5:16:f4:29:6f:67:ec:14:53:
bb:9a:d9:1c:03:ac:c9:6f:c9:78:2d:14:8e:93:cf:
df:15:e3:68:36:0f:06:87:15:7e:70:69:40:90:ec:
31:7b:90:00:38:2a:e5:67:20:b6:45:91:fd:98:8e:
87:f2:ea:36:88:e1:8f:ef:f5:86:13:32:f9:4d:e6:
d7:66:fd:11:bc:4b:6b:6b:75:a2:27:56:3f:39:f2:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:36:13:7E:33:6E:49:5A:13:86:F8:E7:93:D2:C5:41:E4:CB:25:68
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:66:5f:6f:ed:cd:fc:3c:31:fb:71:2b:ee:37:bc:77:95:0d:
ba:4d:c7:ad:b8:4e:bf:a8:48:de:98:29:3c:57:01:fb:c7:9a:
00:73:5e:01:67:96:60:22:f9:af:a8:c5:be:ac:60:9b:dc:b6:
e5:31:7c:90:2c:b3:8b:77:d9:5d:fd:82:54:97:58:39:c1:1d:
28:73:85:57:c2:7c:34:40:b9:66:03:c6:58:5d:1b:a6:56:c7:
b7:f6:1a:c1:1a:65:4f:44:b3:05:a1:4d:6a:8f:8e:83:11:38:
48:41:be:f7:5e:0b:fa:c1:74:e1:ea:7e:a8:ae:d6:fb:85:7e:
f4:26:ae:96:a7:51:1b:3f:ed:fe:95:c1:b6:f5:d9:b5:14:d9:
d1:56:73:15:78:19:7e:12:ed:56:83:b7:07:d2:80:39:ef:30:
c6:23:e5:7c:cc:32:28:b7:03:2d:47:ff:1e:22:ec:77:66:71:
39:06:a2:57:aa:ae:c3:2b:32:64:2e:ee:7b:9e:9d:fe:c6:c9:
f4:d7:db:27:8a:71:08:60:a0:4a:85:d3:d9:b1:a8:00:98:92:
06:b0:1d:03:50:66:3f:bb:3c:96:f1:d0:3f:47:1e:5b:eb:f0:
a9:99:0f:48:08:68:ea:12:9a:f3:fc:f8:0d:c3:af:e9:d2:db:
31:c7:78:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsbZyxd3DWVG8y6wN/n7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2E5MTM3NzRkYmM5ZTYwNWRjMTdhYjIzYTA1YTE2ODAz
OThkZTUwHhcNMjUwOTA3MDEwMTU4WhcNMjUwOTA4MDEwMTU4WjAzMTEwLwYDVQQD
EygxNDM2MTM3ZTMzNmU0OTVhMTM4NmY4ZTc5M2QyYzU0MWU0Y2IyNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLFshBkryw8Ns6DGEjaVCLV/b6UR
OT11jmxlVhcjAAkLI1R8rVEPAVjU7w3bT9ApxAb2xJRA6O6fm4m6sNPQpQwHu+ny
J0aLtY1RtINzAPFxzHBq/xPNBfIZvxHZfRsQjGYzGUxgij64Wwt+04yAluvxIjPc
F8B5zvpnp0V/ib3Is7W7uhMSAvqScWbkXcPAgexo4QhmUpHkMnoQyv8WMJUoFh7C
2vfKZCqlFvQpb2fsFFO7mtkcA6zJb8l4LRSOk8/fFeNoNg8GhxV+cGlAkOwxe5AA
OCrlZyC2RZH9mI6H8uo2iOGP7/WGEzL5TebXZv0RvEtra3WiJ1Y/OfKnpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ2E34zbklaE4b455PSxUHkyyVoMB8GA1UdIwQY
MBaAFPA6kTd028nmBdwXqyOgWhaAOY3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTkt
ZTAwNjMyNjllNDY5LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTktZTAwNjMyNjllNDY5
LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmZfb+3N
/Dwx+3Er7je8d5UNuk3HrbhOv6hI3pgpPFcB+8eaAHNeAWeWYCL5r6jFvqxgm9y2
5TF8kCyzi3fZXf2CVJdYOcEdKHOFV8J8NEC5ZgPGWF0bplbHt/YawRplT0SzBaFN
ao+OgxE4SEG+914L+sF04ep+qK7W+4V+9CaulqdRGz/t/pXBtvXZtRTZ0VZzFXgZ
fhLtVoO3B9KAOe8wxiPlfMwyKLcDLUf/HiLsd2ZxOQaiV6quwysyZC7ue56d/sbJ
9NfbJ4pxCGCgSoXT2bGoAJiSBrAdA1BmP7s8lvHQP0ceW+vwqZkPSAho6hKa8/z4
DcOv6dLbMcd4YQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:21 2025 by rpki-client