Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: E+R73uzqzc/3ASfZVJ0j4k194NTowvAZmg8KEIFYXps=
Subject key identifier: 92:40:0A:D1:8E:8A:EA:3A:6F:65:BA:45:C3:BE:74:7D:AA:10:6D:AE
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 0196B3D8D70BAF215F12FACBD3CDDC989E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1269
Signing time: Fri 09 May 2025 07:00:54 +0000
Manifest this update: Fri 09 May 2025 07:00:54 +0000
Manifest next update: Sat 10 May 2025 07:00:54 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: IgTvQcgBezlwLDSexa2y4R1UNP0BhX5uLFCCRom9GTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:d7:0b:af:21:5f:12:fa:cb:d3:cd:dc:98:9e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: May 9 07:00:54 2025 GMT
Not After : May 10 07:00:54 2025 GMT
Subject: CN=92400ad18e8aea3a6f65ba45c3be747daa106dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:80:cf:99:9e:81:f5:ba:12:f4:02:5b:1b:
ff:df:ad:78:7c:be:83:9d:f7:5d:44:a5:07:87:54:
a7:ae:db:5b:32:6d:6f:5a:d9:93:e3:0e:18:71:fe:
0b:b6:e9:6f:28:67:3e:e8:83:d7:1c:d0:c4:1f:f0:
9e:86:3e:65:04:08:ea:dc:b2:4a:41:1b:a9:f1:b1:
d6:cf:b5:28:77:ea:fd:f7:fa:23:ee:c5:88:9c:8c:
e9:79:9a:7a:29:eb:0d:ff:c9:f6:d3:56:6b:a7:5d:
2f:b9:9c:9d:a4:d6:af:bf:b0:81:36:50:26:ab:f3:
aa:32:70:f4:9d:75:6f:f5:ae:79:5f:17:3e:30:dc:
0e:f0:03:de:1f:69:d6:47:bc:5e:d1:42:24:05:6e:
e4:c0:3e:12:74:95:2c:55:46:f5:26:76:7b:ce:bb:
00:a5:41:71:7d:4e:a4:41:d0:e8:50:46:aa:8f:0b:
5e:10:de:6f:20:91:f2:52:ad:c5:60:ec:28:02:b9:
8a:7a:6e:bc:e7:83:ed:8c:b4:f7:d3:99:3d:10:55:
14:f8:11:70:df:a3:d3:dd:b8:b7:12:4b:dd:8f:e9:
cc:c0:6d:77:aa:27:04:89:7c:b8:23:0c:32:f5:59:
5c:f4:00:0f:c0:bb:ba:93:64:97:b4:32:bf:5d:eb:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:40:0A:D1:8E:8A:EA:3A:6F:65:BA:45:C3:BE:74:7D:AA:10:6D:AE
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b4:e1:f6:f5:38:c2:5e:be:24:4f:9b:48:77:12:42:4e:44:
ce:68:b1:f6:ed:43:ea:c5:f7:4f:de:29:6b:25:91:95:5d:81:
1f:48:08:2f:88:b6:fa:a8:be:91:af:3a:bb:f2:30:80:b3:d7:
2f:89:72:8c:d4:fd:f6:53:23:cf:fe:70:5c:08:04:e9:da:c4:
7e:e0:2b:1f:81:f4:7d:34:dd:62:2a:7c:f7:ee:d8:4f:a9:88:
c8:64:eb:bb:a5:4a:d8:96:6d:fb:60:bd:3e:d3:77:a0:be:32:
7f:3d:f7:ed:08:a5:e6:f2:20:ec:39:c5:dd:ef:6d:4b:93:9d:
0e:c8:d7:21:92:3e:32:a3:54:b7:61:29:90:6a:73:c7:c9:81:
51:d7:d9:a5:9b:a7:e9:2a:58:40:35:83:6e:63:1c:f2:58:d1:
63:68:16:57:23:49:28:cc:3c:99:97:8f:00:c1:1d:b5:80:a7:
5a:72:9b:8e:93:a9:8d:e3:4f:b7:45:c1:39:97:95:30:86:21:
86:1a:6a:94:5d:cb:2e:44:ea:b8:f3:c7:91:20:bd:6c:bd:d2:
ef:7a:8a:b1:e5:bf:12:73:ed:69:5c:29:7e:8d:f7:44:1e:51:
96:06:d8:0e:b8:dd:7e:90:c2:bf:c0:58:51:1f:59:50:be:31:
c3:ee:2e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2NcLryFfEvrL083cmJ6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYTBjNjdmZjg1OWY1NTVhZjg5MjE5Mzg4ODdjNjA4NTI2
OWE0MDIwHhcNMjUwNTA5MDcwMDU0WhcNMjUwNTEwMDcwMDU0WjAzMTEwLwYDVQQD
Eyg5MjQwMGFkMThlOGFlYTNhNmY2NWJhNDVjM2JlNzQ3ZGFhMTA2ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunaAz5megfW6EvQCWxv/3614fL6D
nfddRKUHh1SnrttbMm1vWtmT4w4Ycf4LtulvKGc+6IPXHNDEH/Cehj5lBAjq3LJK
QRup8bHWz7Uod+r99/oj7sWInIzpeZp6KesN/8n201Zrp10vuZydpNavv7CBNlAm
q/OqMnD0nXVv9a55Xxc+MNwO8APeH2nWR7xe0UIkBW7kwD4SdJUsVUb1JnZ7zrsA
pUFxfU6kQdDoUEaqjwteEN5vIJHyUq3FYOwoArmKem6854PtjLT305k9EFUU+BFw
36PT3bi3Ekvdj+nMwG13qicEiXy4Iwwy9Vlc9AAPwLu6k2SXtDK/XevKbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJACtGOiuo6b2W6RcO+dH2qEG2uMB8GA1UdIwQY
MBaAFPGgxn/4WfVVr4khk4iHxghSaaQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEt
YjQxOTk5ZTVjZjU0LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEtYjQxOTk5ZTVjZjU0
LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7Th9vU4
wl6+JE+bSHcSQk5Ezmix9u1D6sX3T94payWRlV2BH0gIL4i2+qi+ka86u/IwgLPX
L4lyjNT99lMjz/5wXAgE6drEfuArH4H0fTTdYip89+7YT6mIyGTru6VK2JZt+2C9
PtN3oL4yfz337Qil5vIg7DnF3e9tS5OdDsjXIZI+MqNUt2EpkGpzx8mBUdfZpZun
6SpYQDWDbmMc8ljRY2gWVyNJKMw8mZePAMEdtYCnWnKbjpOpjeNPt0XBOZeVMIYh
hhpqlF3LLkTquPPHkSC9bL3S73qKseW/EnPtaVwpfo33RB5RlgbYDrjdfpDCv8BY
UR9ZUL4xw+4udw==
-----END CERTIFICATE-----
Generated at Fri May 9 08:53:04 2025 by rpki-client