Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: F6uGhpSrExXiOpNPmgRp3PvrNYp+cAZMKY37xZb4ep4=
Subject key identifier: A6:74:DC:61:9F:A3:A3:AF:C8:05:75:3F:CF:E1:DB:FB:CE:3D:2A:E2
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 0197B6A0EA69DA78CF35AC0974BBED211DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=)
2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: GBT4ykYluHSlWRRgm4p8vwnlKirIlbeDaZO2PB+zp2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ea:69:da:78:cf:35:ac:09:74:bb:ed:21:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=a674dc619fa3a3afc805753fcfe1dbfbce3d2ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:de:8a:c5:64:da:f4:a2:5d:50:24:42:1b:
81:cc:17:70:a8:9f:c0:02:3b:69:3e:d0:05:9a:b7:
cc:50:bf:96:56:89:b6:07:39:23:7c:15:51:bb:26:
44:53:1d:66:8e:c9:ca:29:6e:6f:ea:b9:cf:44:ec:
99:4c:4b:3c:79:0d:38:a7:89:29:4e:2c:c4:37:88:
0a:63:71:6f:26:0a:e8:ed:0b:ac:79:9d:cd:80:c1:
a7:0c:8d:8d:51:74:88:4d:83:45:ef:16:8a:6c:5a:
34:f3:b5:6d:07:4e:b3:0d:93:fb:7c:47:6d:a8:44:
58:36:64:7c:4c:05:31:64:c4:e4:94:c8:ca:f7:1c:
c0:4c:8b:f8:14:6f:5b:bc:e6:70:13:1b:07:c7:84:
82:f7:85:33:af:f1:79:58:c6:1f:7f:80:4e:34:85:
39:59:96:04:00:d8:bf:70:22:1a:79:4b:d3:ce:b4:
99:95:2f:3f:eb:b5:db:e3:ec:92:9a:8a:cf:61:0b:
2e:6e:b8:41:82:94:cb:87:c2:fb:29:03:9b:97:67:
dc:77:b5:bd:92:60:d9:06:8b:25:ae:c3:3e:b6:f9:
6d:e9:f3:7a:ce:88:5a:43:d4:fd:7a:d5:f0:77:da:
9d:f0:fa:48:ba:1d:a5:bc:a0:e1:b8:23:eb:47:72:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:DC:61:9F:A3:A3:AF:C8:05:75:3F:CF:E1:DB:FB:CE:3D:2A:E2
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:54:2d:b6:b8:b8:3d:fd:08:4b:01:04:d2:98:cf:ca:5e:
b2:1a:b5:28:44:2b:6b:87:c1:26:c6:5c:74:9e:cb:e5:b5:ad:
6e:00:1c:41:44:2c:33:12:46:c6:f8:47:09:d3:ca:7b:8f:51:
d9:17:71:fd:5d:fb:42:c8:b1:ee:6b:e8:4f:71:fb:39:5a:84:
e1:2a:d7:90:12:56:18:c9:91:0a:31:c6:5b:99:ee:f4:06:4a:
22:fe:d1:04:56:8f:a4:da:3f:76:2c:dd:53:16:d6:5f:81:ec:
43:a8:74:fd:c1:83:2e:c5:3b:f8:f0:06:c2:7c:12:6b:c1:12:
6c:59:e6:13:e0:59:5f:46:8d:bd:d3:3e:d0:d1:d9:c1:09:b0:
39:8b:91:36:0d:7c:8a:15:e9:66:47:a6:5d:91:8b:25:7e:35:
4e:12:da:c7:97:43:88:75:24:74:30:28:24:78:7f:d5:2c:e6:
11:8e:07:1a:65:83:b6:f0:77:f5:28:2a:0a:9a:5c:49:ac:e1:
f1:9b:12:89:42:e4:39:af:90:a5:07:79:8e:74:2b:03:b6:02:
24:9f:1a:c7:17:97:aa:de:e9:e4:80:5e:b4:50:51:d3:9d:0b:
12:93:2f:76:fe:fb:cd:34:00:29:19:8f:14:06:ac:aa:a6:a3:
96:2e:5c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oOpp2njPNawJdLvtIR3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw
OGUyZTIwHhcNMjUwNjI4MTMwMTI4WhcNMjUwNjI5MTMwMTI4WjAzMTEwLwYDVQQD
EyhhNjc0ZGM2MTlmYTNhM2FmYzgwNTc1M2ZjZmUxZGJmYmNlM2QyYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwfeisVk2vSiXVAkQhuBzBdwqJ/A
AjtpPtAFmrfMUL+WVom2BzkjfBVRuyZEUx1mjsnKKW5v6rnPROyZTEs8eQ04p4kp
TizEN4gKY3FvJgro7QuseZ3NgMGnDI2NUXSITYNF7xaKbFo087VtB06zDZP7fEdt
qERYNmR8TAUxZMTklMjK9xzATIv4FG9bvOZwExsHx4SC94Uzr/F5WMYff4BONIU5
WZYEANi/cCIaeUvTzrSZlS8/67Xb4+ySmorPYQsubrhBgpTLh8L7KQObl2fcd7W9
kmDZBoslrsM+tvlt6fN6zohaQ9T9etXwd9qd8PpIuh2lvKDhuCPrR3IZ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ03GGfo6OvyAV1P8/h2/vOPSriMB8GA1UdIwQY
MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt
YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4
LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwVULba4
uD39CEsBBNKYz8peshq1KEQra4fBJsZcdJ7L5bWtbgAcQUQsMxJGxvhHCdPKe49R
2Rdx/V37Qsix7mvoT3H7OVqE4SrXkBJWGMmRCjHGW5nu9AZKIv7RBFaPpNo/dizd
UxbWX4HsQ6h0/cGDLsU7+PAGwnwSa8ESbFnmE+BZX0aNvdM+0NHZwQmwOYuRNg18
ihXpZkemXZGLJX41ThLax5dDiHUkdDAoJHh/1SzmEY4HGmWDtvB39SgqCppcSazh
8ZsSiULkOa+QpQd5jnQrA7YCJJ8axxeXqt7p5IBetFBR050LEpMvdv77zTQAKRmP
FAasqqajli5c7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:46 2025 by rpki-client