Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: j76+xkDvNrqDilwZmbRlWUbfgjVls/dMYwa3+tbpsOQ=
Subject key identifier: 5B:D7:A8:A1:D0:54:56:10:60:27:C7:DD:37:13:CE:08:B0:AC:DB:28
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 01976C98AB3E20666AEE494884E94C19BBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:33 +0000
Manifest this update: Sat 14 Jun 2025 04:00:33 +0000
Manifest next update: Sun 15 Jun 2025 04:00:33 +0000
Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: Ezg4tbQMqTJS0hYPaChHCI/LVkOyHxLOeV+Runm1ikA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:ab:3e:20:66:6a:ee:49:48:84:e9:4c:19:bb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Jun 14 04:00:33 2025 GMT
Not After : Jun 15 04:00:33 2025 GMT
Subject: CN=5bd7a8a1d05456106027c7dd3713ce08b0acdb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:b8:09:1e:5e:92:f7:2e:ba:19:28:14:ea:
de:52:b9:35:8c:64:e8:3f:c3:23:1f:18:f1:99:67:
13:8e:e3:f9:a4:c6:f5:aa:a9:34:01:0b:ec:cc:68:
5a:60:98:f5:99:2c:94:53:6c:be:ea:ec:e0:ce:ec:
46:87:93:bc:47:91:33:b0:2d:d7:1b:64:9a:f7:9b:
50:d7:3e:1d:b0:f8:4a:9b:bb:76:14:a3:74:d6:54:
5f:b8:0d:a3:ae:fa:e0:1d:84:9b:e1:92:f8:07:d4:
b0:21:7c:bc:91:5c:1f:a9:32:b7:ee:b6:3f:e3:1a:
b0:c6:68:6a:a1:06:3a:65:64:92:80:50:3b:11:29:
24:fa:a2:65:31:41:e3:07:bc:5b:ff:8e:a8:12:93:
6a:9e:9a:e1:0c:6f:8a:97:83:50:30:f6:d5:f4:71:
71:1b:bd:d8:85:20:f4:7d:1f:cc:71:1c:e5:e0:bf:
2e:1c:d6:13:d9:4f:a3:07:25:e9:b2:82:de:e6:23:
76:0b:f1:5c:6d:4d:0a:b9:38:31:f5:a1:12:f1:93:
ae:c1:f8:99:44:10:46:56:24:28:46:26:4e:5b:ca:
cc:7c:9f:1c:b2:b7:f7:c4:fe:dd:10:af:6a:e3:be:
19:5d:28:d2:ac:9d:ba:81:c0:90:c4:89:70:4a:a1:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D7:A8:A1:D0:54:56:10:60:27:C7:DD:37:13:CE:08:B0:AC:DB:28
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:cb:88:96:09:6b:c7:6a:e2:6d:25:0d:57:d9:35:8d:2c:
77:f8:4c:2b:ec:b4:94:91:d5:5e:cf:89:2d:39:a5:da:8c:32:
ea:dd:f4:be:63:c8:0f:aa:0d:3f:52:68:0b:43:7f:50:38:84:
47:75:50:e8:f1:99:f5:0d:f9:10:5c:ac:51:ac:aa:2f:e8:19:
ef:05:d6:07:4f:00:61:ab:40:3f:62:3c:29:ec:66:78:ed:cb:
98:f6:b9:3c:e8:fd:8c:e4:ab:4d:82:1e:56:1b:9e:ab:7f:02:
cc:29:5a:8c:51:3d:32:03:bd:66:db:49:93:3d:11:19:4c:dc:
29:f9:be:1e:29:0a:5f:cd:9e:71:0c:49:7d:7e:0e:7c:6f:79:
89:db:de:24:b8:ef:9e:11:c1:42:62:57:cf:94:da:bd:70:34:
55:8b:ed:6f:e8:9c:f8:47:4c:02:7e:ac:26:26:09:ea:7e:f6:
3f:b8:ae:14:e3:5a:1c:ca:95:e6:8a:98:8f:c2:ee:93:3e:37:
c7:86:8b:ae:d6:73:0b:f2:19:32:5d:36:e1:b3:58:51:86:41:
09:b6:fb:fe:45:0f:e1:2e:cf:1e:ef:69:21:74:9a:88:86:38:
30:58:9c:3d:aa:ae:43:83:df:fd:d7:b8:cd:8c:e2:55:a2:1c:
74:83:38:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmKs+IGZq7klIhOlMGbvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzJmNDk0NDU5ODAxOTk0NzU1MTJmNTI5NzYwOGY0NWQw
OGJiNWEwHhcNMjUwNjE0MDQwMDMzWhcNMjUwNjE1MDQwMDMzWjAzMTEwLwYDVQQD
Eyg1YmQ3YThhMWQwNTQ1NjEwNjAyN2M3ZGQzNzEzY2UwOGIwYWNkYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI64CR5ekvcuuhkoFOreUrk1jGTo
P8MjHxjxmWcTjuP5pMb1qqk0AQvszGhaYJj1mSyUU2y+6uzgzuxGh5O8R5EzsC3X
G2Sa95tQ1z4dsPhKm7t2FKN01lRfuA2jrvrgHYSb4ZL4B9SwIXy8kVwfqTK37rY/
4xqwxmhqoQY6ZWSSgFA7ESkk+qJlMUHjB7xb/46oEpNqnprhDG+Kl4NQMPbV9HFx
G73YhSD0fR/McRzl4L8uHNYT2U+jByXpsoLe5iN2C/FcbU0KuTgx9aES8ZOuwfiZ
RBBGViQoRiZOW8rMfJ8csrf3xP7dEK9q474ZXSjSrJ26gcCQxIlwSqH0yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvXqKHQVFYQYCfH3TcTzgiwrNsoMB8GA1UdIwQY
MBaAFHPC9JRFmAGZR1US9Sl2CPRdCLtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjIt
Nzg3YjliNTg0YzJkLzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjItNzg3YjliNTg0YzJk
LzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbTLiJYJ
a8dq4m0lDVfZNY0sd/hMK+y0lJHVXs+JLTml2owy6t30vmPID6oNP1JoC0N/UDiE
R3VQ6PGZ9Q35EFysUayqL+gZ7wXWB08AYatAP2I8KexmeO3LmPa5POj9jOSrTYIe
Vhueq38CzClajFE9MgO9ZttJkz0RGUzcKfm+HikKX82ecQxJfX4OfG95idveJLjv
nhHBQmJXz5TavXA0VYvtb+ic+EdMAn6sJiYJ6n72P7iuFONaHMqV5oqYj8Lukz43
x4aLrtZzC/IZMl024bNYUYZBCbb7/kUP4S7PHu9pIXSaiIY4MFicPaquQ4Pf/de4
zYziVaIcdIM4Tg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:03 2025 by rpki-client