Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: WONkmnvUwObMhWlB7D0a2DnyIORXUjhlg8c/7S2c88g=
Subject key identifier: 80:3F:84:29:E0:F2:F1:A7:46:86:0B:4D:E9:2B:5A:1E:DA:39:A3:CC
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 019749D5FBDAF79D93F9C5378BA2859237C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:49 +0000
Manifest this update: Sat 07 Jun 2025 10:00:49 +0000
Manifest next update: Sun 08 Jun 2025 10:00:49 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: AiRQOdk7r3wn1NUL9BOYSpW+v1y6hLpCe2XtD+64yVM=)
2: ic2AvQV4fn5mQGurv_9LydC-BbI.roa (hash: mD0dAfaF87izkBorR76KrAgNEqpqvPq8C6YXxT1+QYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:fb:da:f7:9d:93:f9:c5:37:8b:a2:85:92:37:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Jun 7 10:00:49 2025 GMT
Not After : Jun 8 10:00:49 2025 GMT
Subject: CN=803f8429e0f2f1a746860b4de92b5a1eda39a3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:df:36:0b:fd:98:e4:35:d8:d8:53:0f:5e:
fa:b7:aa:72:56:96:f3:e6:d0:00:e5:8d:df:e9:b9:
15:52:a7:0a:d6:5a:f6:ca:1f:20:49:89:52:f7:ff:
34:e0:50:25:c5:db:42:b9:6c:36:7d:8a:1e:f3:09:
fe:49:45:a8:c2:e2:bb:06:83:8e:a3:bc:64:e2:44:
02:f4:e0:3a:f9:14:02:19:bc:26:d3:f4:83:d9:8b:
9e:5d:6f:77:f7:13:3d:29:d7:e7:0c:34:21:33:e4:
23:97:d7:d0:8c:d0:d6:a6:fd:de:ca:cc:54:5b:0f:
b0:03:76:1a:f2:ec:33:9d:7f:c7:1d:2f:6c:54:c8:
8b:7e:38:e2:c0:2c:4f:e2:c7:70:68:7c:58:d1:49:
23:e6:d3:dd:e2:13:e1:19:44:f3:27:fe:f7:27:23:
52:d3:5c:c1:aa:0d:d3:28:90:63:db:54:3c:d0:81:
65:fa:7a:00:df:38:a7:58:23:49:9e:22:20:8d:fd:
fa:86:3c:b9:b0:04:42:d9:fc:8d:57:f8:4a:73:7d:
fb:e3:b9:7d:b0:c7:c1:a9:3d:f0:b4:c2:81:15:ae:
c7:17:02:a5:8c:82:28:c2:44:f6:73:95:a6:6e:0d:
3b:03:ab:64:1e:92:e4:ea:30:21:2c:8e:da:b3:71:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:84:29:E0:F2:F1:A7:46:86:0B:4D:E9:2B:5A:1E:DA:39:A3:CC
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:75:54:9a:25:5c:1a:74:33:96:00:74:8c:46:11:c6:fa:68:
42:eb:b7:cc:00:15:fb:fc:01:9f:1a:3d:14:cd:28:44:5a:7b:
fa:c5:e4:9e:8e:7d:d3:35:fb:e0:c3:bb:e4:1b:37:8b:e8:6b:
62:51:78:e4:f5:db:58:20:91:ae:da:99:17:54:34:f0:47:f2:
a0:89:cc:11:70:33:08:88:35:95:1b:f7:21:73:9b:1e:67:60:
15:09:d5:e5:35:d7:ca:2d:4a:19:f9:fe:e9:00:53:08:96:34:
fd:73:24:93:ef:f9:e9:36:f1:71:c0:8d:65:ab:b6:6e:70:45:
0f:87:1f:c5:c4:c0:01:d9:e6:b4:55:87:09:9f:34:d1:8a:06:
c8:6f:51:c6:e1:8a:49:a0:5f:6e:53:44:1a:b3:21:08:e4:80:
e3:fc:55:18:b6:57:08:ac:dd:e1:01:da:f8:e7:93:b2:de:b8:
64:0b:50:65:f8:8f:cb:70:c3:e5:bf:b3:2a:bd:a9:c3:b6:4b:
51:92:16:fb:22:47:d4:4b:c4:36:5a:92:19:e6:27:79:fc:7c:
3d:0f:3a:84:10:9e:80:3d:cb:66:13:67:13:ea:08:6e:1f:24:
1e:2e:ad:07:7d:fa:bb:12:7d:99:e6:47:b3:38:42:d5:19:d7:
79:b3:41:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1fva952T+cU3i6KFkjfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzg5OTBiZDZlOTMwNzExM2U4MzgzMmM2OTE1ZmRhNWNh
Y2ZjMmYwHhcNMjUwNjA3MTAwMDQ5WhcNMjUwNjA4MTAwMDQ5WjAzMTEwLwYDVQQD
Eyg4MDNmODQyOWUwZjJmMWE3NDY4NjBiNGRlOTJiNWExZWRhMzlhM2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi7fNgv9mOQ12NhTD176t6pyVpbz
5tAA5Y3f6bkVUqcK1lr2yh8gSYlS9/804FAlxdtCuWw2fYoe8wn+SUWowuK7BoOO
o7xk4kQC9OA6+RQCGbwm0/SD2YueXW939xM9KdfnDDQhM+Qjl9fQjNDWpv3eysxU
Ww+wA3Ya8uwznX/HHS9sVMiLfjjiwCxP4sdwaHxY0Ukj5tPd4hPhGUTzJ/73JyNS
01zBqg3TKJBj21Q80IFl+noA3zinWCNJniIgjf36hjy5sARC2fyNV/hKc33747l9
sMfBqT3wtMKBFa7HFwKljIIowkT2c5Wmbg07A6tkHpLk6jAhLI7as3EATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA/hCng8vGnRoYLTekrWh7aOaPMMB8GA1UdIwQY
MBaAFPPImQvW6TBxE+g4MsaRX9pcrPwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMt
ZTg4OWE2ZTZiZWFjLzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMtZTg4OWE2ZTZiZWFj
LzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHVUmiVc
GnQzlgB0jEYRxvpoQuu3zAAV+/wBnxo9FM0oRFp7+sXkno590zX74MO75Bs3i+hr
YlF45PXbWCCRrtqZF1Q08EfyoInMEXAzCIg1lRv3IXObHmdgFQnV5TXXyi1KGfn+
6QBTCJY0/XMkk+/56TbxccCNZau2bnBFD4cfxcTAAdnmtFWHCZ800YoGyG9RxuGK
SaBfblNEGrMhCOSA4/xVGLZXCKzd4QHa+OeTst64ZAtQZfiPy3DD5b+zKr2pw7ZL
UZIW+yJH1EvENlqSGeYnefx8PQ86hBCegD3LZhNnE+oIbh8kHi6tB336uxJ9meZH
szhC1RnXebNBLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:43:17 2025 by rpki-client