Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: VcWMWw2cM//Pr8jD6JoCYJ1dfMSJ1HmXkR+8wPlVhv0=
Subject key identifier: 90:D7:76:4A:9B:BF:2D:FA:F0:36:50:DD:D3:51:D0:BD:7F:E3:B2:E5
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019922C346E93EBAB7B53F4700AE969D21E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0A60
Signing time: Sun 07 Sep 2025 06:00:46 +0000
Manifest this update: Sun 07 Sep 2025 06:00:46 +0000
Manifest next update: Mon 08 Sep 2025 06:00:46 +0000
Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: a8oe0rpbIyJzFmapDiGQ35ZRZRbcIEZ+sgDxnf0djMo=)
2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:46:e9:3e:ba:b7:b5:3f:47:00:ae:96:9d:21:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Sep 7 06:00:46 2025 GMT
Not After : Sep 8 06:00:46 2025 GMT
Subject: CN=90d7764a9bbf2dfaf03650ddd351d0bd7fe3b2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:35:73:1a:44:5e:1a:1e:bb:50:41:3c:3b:
9d:92:7f:cf:98:21:cd:c5:14:ef:1d:bd:9a:c8:b3:
0a:6d:e8:fb:8c:7d:01:d4:44:a1:aa:ed:55:50:0e:
25:6b:a2:02:49:f8:39:0f:df:4f:b5:81:9d:98:ad:
71:2a:d2:f5:61:e2:26:c2:67:c6:ee:e9:28:69:d1:
19:cf:8d:a3:a3:30:8b:aa:a8:7f:60:35:a8:77:1e:
c3:45:35:3d:07:7f:0c:c7:e5:59:23:a5:3f:05:98:
71:4a:9d:19:d3:56:d7:61:e3:6d:c0:63:6f:c8:51:
81:be:f6:76:68:f1:de:c8:e0:dd:af:e7:d3:00:9d:
63:01:ef:bb:42:b8:76:7b:9b:1e:e5:73:07:8e:02:
6c:d6:9c:29:ab:7e:f1:5c:97:4e:3a:c9:ec:e1:cb:
66:30:c7:45:27:3e:b8:57:60:4f:f4:df:ea:5a:88:
32:a1:c3:d5:a1:9e:71:25:c1:2a:b7:40:2d:6c:96:
dc:89:48:d7:df:15:e4:2d:71:8b:ad:2a:05:16:a0:
76:c7:6d:c1:41:34:a3:d2:f9:ec:af:4d:79:46:62:
de:15:60:bd:ce:a1:09:54:4d:76:19:e6:f4:c6:3a:
35:2f:3a:33:4d:3e:b9:b1:e2:b8:c7:59:1a:42:60:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:76:4A:9B:BF:2D:FA:F0:36:50:DD:D3:51:D0:BD:7F:E3:B2:E5
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c7:b9:a0:f7:95:c0:b3:ec:13:53:32:73:98:cf:9d:32:98:
6b:05:15:c5:1d:31:f2:49:72:24:0d:36:e2:4b:a8:34:4a:89:
25:0c:d7:cb:b9:3a:9f:69:d9:29:78:f8:22:5e:30:64:f4:81:
8e:03:9a:a9:ca:87:95:f8:7c:5e:e4:49:44:9d:78:5f:f3:39:
d5:67:0e:f1:85:0f:4a:d9:79:70:99:16:29:e1:ce:ba:1e:6f:
b6:2e:21:cf:90:25:7c:83:99:1e:07:b9:2a:c1:72:e6:d6:a8:
ca:11:de:46:9f:0b:8c:fc:8a:a8:08:74:97:f9:8c:d4:6c:aa:
d0:b7:a1:c4:09:fa:29:83:f4:76:fb:fe:d6:d5:b8:ec:8e:d3:
8e:3a:8c:34:2c:ff:29:92:2a:05:b5:6e:34:d1:20:3d:fc:55:
36:20:21:fd:4e:28:a7:6f:fc:47:14:f8:f2:5b:ce:1f:09:a7:
65:2b:21:8b:69:fa:95:99:ff:61:75:86:59:57:5a:db:3f:fc:
f5:63:9f:1a:3e:fd:30:50:72:d8:e6:c5:10:42:26:32:d0:d5:
be:5a:22:76:82:11:1e:51:13:fd:7e:ad:36:b6:79:73:1e:6c:
65:cd:95:90:cf:36:44:79:03:de:7e:05:af:f0:8b:6c:65:27:
cb:24:fb:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw0bpPrq3tT9HAK6WnSHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy
Njc4MWIwHhcNMjUwOTA3MDYwMDQ2WhcNMjUwOTA4MDYwMDQ2WjAzMTEwLwYDVQQD
Eyg5MGQ3NzY0YTliYmYyZGZhZjAzNjUwZGRkMzUxZDBiZDdmZTNiMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDw1cxpEXhoeu1BBPDudkn/PmCHN
xRTvHb2ayLMKbej7jH0B1EShqu1VUA4la6ICSfg5D99PtYGdmK1xKtL1YeImwmfG
7ukoadEZz42jozCLqqh/YDWodx7DRTU9B38Mx+VZI6U/BZhxSp0Z01bXYeNtwGNv
yFGBvvZ2aPHeyODdr+fTAJ1jAe+7Qrh2e5se5XMHjgJs1pwpq37xXJdOOsns4ctm
MMdFJz64V2BP9N/qWogyocPVoZ5xJcEqt0AtbJbciUjX3xXkLXGLrSoFFqB2x23B
QTSj0vnsr015RmLeFWC9zqEJVE12Geb0xjo1LzozTT65seK4x1kaQmBByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDXdkqbvy368DZQ3dNR0L1/47LlMB8GA1UdIwQY
MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt
ZmEyNTY2ZTU4Mjg2LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2
LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMe5oPeV
wLPsE1Myc5jPnTKYawUVxR0x8klyJA024kuoNEqJJQzXy7k6n2nZKXj4Il4wZPSB
jgOaqcqHlfh8XuRJRJ14X/M51WcO8YUPStl5cJkWKeHOuh5vti4hz5AlfIOZHge5
KsFy5taoyhHeRp8LjPyKqAh0l/mM1Gyq0LehxAn6KYP0dvv+1tW47I7TjjqMNCz/
KZIqBbVuNNEgPfxVNiAh/U4op2/8RxT48lvOHwmnZSshi2n6lZn/YXWGWVda2z/8
9WOfGj79MFBy2ObFEEImMtDVvloidoIRHlET/X6tNrZ5cx5sZc2VkM82RHkD3n4F
r/CLbGUnyyT74Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:38 2025 by rpki-client