Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: JsNAoWeTyPcRbZ+psEqA540KBEON2PdhaqSK/3Kozcw=
Subject key identifier: 8D:31:01:6C:04:60:D0:D1:98:8C:F2:76:7B:6B:78:3A:FA:44:DC:B0
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 6FBBA39CC09A0CBDB4BCEC84D3B8222B920C44DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 047E
Signing time: Sun 07 Sep 2025 01:09:33 +0000
Manifest this update: Sun 07 Sep 2025 01:04:33 +0000
Manifest next update: Mon 08 Sep 2025 05:04:33 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: XyYUHoG7sqcQQr+sC5rS44FSK65FiOAOicr4+0/5+wc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:bb:a3:9c:c0:9a:0c:bd:b4:bc:ec:84:d3:b8:22:2b:92:0c:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Sep 7 01:04:33 2025 GMT
Not After : Sep 8 05:04:33 2025 GMT
Subject: CN=8D31016C0460D0D1988CF2767B6B783AFA44DCB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:3e:14:c2:33:f6:90:4f:cf:b4:fd:1e:9a:
68:df:24:d6:3b:39:71:d4:41:32:b5:4d:08:9b:89:
a4:69:43:f8:86:6a:a7:0b:5f:ad:9c:27:c3:29:48:
c9:dd:ae:7e:48:7f:33:c4:56:eb:f9:6b:dd:63:49:
92:37:40:63:0b:9a:bf:f5:e8:30:ad:b1:e7:18:0e:
c6:a3:05:0c:05:88:4d:b0:2c:68:26:74:df:0c:03:
c2:4b:ef:ce:fb:6f:5e:09:72:59:89:b9:76:07:d6:
9a:48:be:d8:cf:23:a1:52:02:67:f0:9c:55:da:b4:
ff:8f:0a:c1:73:f1:d3:38:75:d4:1a:49:62:7d:d9:
ba:cf:14:51:74:36:1e:9e:19:76:97:70:6e:91:e5:
4a:bb:45:2a:26:0c:55:03:a8:b9:e3:38:fb:2f:99:
48:39:f9:80:e1:31:99:b0:43:79:a9:56:20:f4:15:
fc:ac:2b:13:32:ca:7c:c9:b1:9d:be:cb:ed:73:e3:
27:dd:43:80:fe:a2:41:52:ba:c4:f5:41:73:b8:30:
e7:11:d7:af:0e:b3:f1:4a:27:51:63:37:69:2c:05:
27:8f:3d:7b:8e:b5:c7:3b:b2:5d:cf:73:0a:1d:00:
a9:aa:9e:c3:d2:20:96:8a:66:5b:89:f0:41:29:30:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:31:01:6C:04:60:D0:D1:98:8C:F2:76:7B:6B:78:3A:FA:44:DC:B0
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1d:39:e4:69:f9:4d:5f:cb:25:63:d0:ad:e7:94:12:5a:82:
e9:07:0a:78:3a:e0:4c:e4:73:c1:f2:b2:12:a5:5f:5d:b1:8e:
28:a5:8e:5e:ab:33:a6:e0:a6:f2:f7:71:4e:40:88:a4:0f:4a:
ab:64:9f:10:9a:77:22:f5:25:ad:b9:a6:51:47:55:21:ee:c6:
76:b5:38:ca:4e:22:66:47:c8:dc:b3:b9:7f:ec:b2:8c:14:7c:
54:fb:3e:81:16:fb:4d:32:07:d1:b9:96:0d:46:6a:da:90:c4:
aa:ed:d6:41:e2:b5:02:89:dc:f4:ba:a3:48:da:0c:0e:c3:3f:
5a:2b:ef:82:fe:23:ee:86:dd:33:e6:aa:13:ed:20:98:43:74:
c6:0f:98:0c:1b:91:2c:22:ed:0b:73:2a:db:c6:f9:2e:61:84:
32:0e:d5:57:73:83:1e:bc:4d:1f:2d:e0:10:d4:ce:f6:ce:d2:
ab:51:a0:e4:d4:01:d2:d6:01:ce:21:83:51:b0:c2:d4:41:62:
0e:0b:c3:4e:79:a0:90:55:b7:a2:12:e2:42:1e:66:2d:31:c1:
35:0b:aa:27:c5:52:b4:d6:1b:70:97:5d:ce:21:f5:cf:86:30:
e5:79:b1:a8:94:1c:41:28:1e:39:05:47:95:28:62:5d:96:da:
32:35:d9:c9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUb7ujnMCaDL20vOyE07giK5IMRN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4
ZjUyM2IxMTAeFw0yNTA5MDcwMTA0MzNaFw0yNTA5MDgwNTA0MzNaMDMxMTAvBgNV
BAMTKDhEMzEwMTZDMDQ2MEQwRDE5ODhDRjI3NjdCNkI3ODNBRkE0NERDQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpnz4UwjP2kE/PtP0emmjfJNY7
OXHUQTK1TQibiaRpQ/iGaqcLX62cJ8MpSMndrn5IfzPEVuv5a91jSZI3QGMLmr/1
6DCtsecYDsajBQwFiE2wLGgmdN8MA8JL7877b14JclmJuXYH1ppIvtjPI6FSAmfw
nFXatP+PCsFz8dM4ddQaSWJ92brPFFF0Nh6eGXaXcG6R5Uq7RSomDFUDqLnjOPsv
mUg5+YDhMZmwQ3mpViD0FfysKxMyynzJsZ2+y+1z4yfdQ4D+okFSusT1QXO4MOcR
168Os/FKJ1FjN2ksBSePPXuOtcc7sl3PcwodAKmqnsPSIJaKZluJ8EEpMB9VAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUjTEBbARg0NGYjPJ2e2t4OvpE3LAwHwYDVR0j
BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5
U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05
Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG
Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMR055Gn5TV/LJWPQreeU
ElqC6QcKeDrgTORzwfKyEqVfXbGOKKWOXqszpuCm8vdxTkCIpA9Kq2SfEJp3IvUl
rbmmUUdVIe7GdrU4yk4iZkfI3LO5f+yyjBR8VPs+gRb7TTIH0bmWDUZq2pDEqu3W
QeK1Aonc9LqjSNoMDsM/Wivvgv4j7obdM+aqE+0gmEN0xg+YDBuRLCLtC3Mq28b5
LmGEMg7VV3ODHrxNHy3gENTO9s7Sq1Gg5NQB0tYBziGDUbDC1EFiDgvDTnmgkFW3
ohLiQh5mLTHBNQuqJ8VStNYbcJddziH1z4Yw5XmxqJQcQSgeOQVHlShiXZbaMjXZ
yQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:05 2025 by rpki-client