Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: BPr+XCEgBdAAAELIBFIsY8nwEtgqBM1dHcHGVVMxM2g=
Subject key identifier: 46:53:80:BE:D3:24:5F:92:7F:40:0A:B4:E4:1F:90:A9:94:B2:B7:09
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 01969FAD2317177218800FDBA9929D293D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 09:00:46 +0000
Manifest this update: Mon 05 May 2025 09:00:46 +0000
Manifest next update: Tue 06 May 2025 09:00:46 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: 6ImgRYTBE1gPW3C7Ub8YzYKiMb5weuYCqBLUrANKvqg=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:23:17:17:72:18:80:0f:db:a9:92:9d:29:3d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: May 5 09:00:46 2025 GMT
Not After : May 6 09:00:46 2025 GMT
Subject: CN=465380bed3245f927f400ab4e41f90a994b2b709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:bb:49:73:e6:7d:e5:7a:9a:02:07:c8:d5:
f0:f8:22:0e:e4:57:ca:6f:37:aa:40:ae:60:76:be:
a1:72:6e:2e:97:f5:1e:c2:38:dc:27:f0:35:2b:f8:
88:cc:2d:e1:12:b2:d0:2f:60:ff:a1:9a:ad:ae:47:
de:94:c9:1c:ff:9d:fd:33:79:e3:b8:16:bb:1f:4b:
27:53:7a:86:3b:8c:e3:a0:79:9e:ce:b4:b8:d4:2d:
66:32:80:f3:5e:02:c3:a7:68:6b:5e:ac:96:0d:60:
e8:29:e6:07:80:2a:ae:21:98:08:2a:51:c2:42:51:
ef:f3:2e:a4:31:6f:21:7a:1d:7b:9a:97:9c:74:e3:
73:f2:3d:c6:64:5c:3b:57:bf:b1:fe:e6:cc:e5:55:
be:e2:b4:a9:c6:77:22:59:3a:2e:2d:8e:b9:ca:b0:
42:4f:20:5f:44:a0:7f:61:1b:da:dd:68:05:a0:f8:
64:4b:d3:b1:d2:8e:fa:63:a0:ee:ea:1f:25:c4:6e:
9f:17:09:fe:15:70:e0:77:01:28:29:6a:a9:46:26:
66:4f:45:e6:9d:d1:69:cc:7a:7a:8e:9d:2a:c4:79:
a1:03:ac:fd:99:90:97:f0:25:1d:22:e5:e1:1f:e2:
e4:33:e0:eb:e0:08:45:06:7c:76:3a:e8:b6:1d:6e:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:53:80:BE:D3:24:5F:92:7F:40:0A:B4:E4:1F:90:A9:94:B2:B7:09
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c3:db:1a:98:fe:a5:41:84:7f:ce:25:13:60:db:dd:bd:d7:
7f:27:cc:4c:ee:6b:4c:00:1d:64:02:87:e3:53:8a:dc:8e:4c:
21:7d:af:a5:19:ae:bf:7f:39:92:59:48:c1:55:72:73:09:a4:
c0:97:91:c2:e3:14:e2:67:f8:ca:bf:87:b4:60:79:40:41:af:
d8:be:dd:ce:ff:8e:83:8a:13:30:38:f5:d0:6b:12:e2:06:9a:
5f:ee:88:89:61:f8:dc:75:f6:d3:4b:2e:43:e4:9e:92:5a:b5:
c9:20:0c:b6:e4:18:33:ed:38:bd:11:b7:6f:9f:b1:d9:1e:7d:
f5:4e:07:88:d3:71:6c:7b:43:f9:f7:73:47:02:5b:98:84:84:
79:9f:38:45:df:62:c5:3e:6d:21:be:16:62:39:e1:bf:9c:31:
97:46:b8:00:fd:58:e2:76:b9:e3:74:68:2f:e7:9a:81:d8:66:
4c:1b:a8:a7:31:47:ca:bf:ce:7d:7b:33:34:f5:c0:7a:95:e6:
cc:f1:c6:62:34:6c:c1:93:9d:0a:a5:d5:a2:c8:b1:f7:93:36:
b1:a8:4d:e6:96:da:b4:3a:1e:81:67:86:ae:67:03:32:9e:a7:
4a:fa:64:ce:e9:50:df:fc:d2:37:18:9a:11:6e:3a:11:5e:79:
c5:2c:7e:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafrSMXF3IYgA/bqZKdKT1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWE1ZDVjYjc5NDljZTFiZDIwOWRjMjEzOTkzNTIwZTAy
ZDEwODUwHhcNMjUwNTA1MDkwMDQ2WhcNMjUwNTA2MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg0NjUzODBiZWQzMjQ1ZjkyN2Y0MDBhYjRlNDFmOTBhOTk0YjJiNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltS7SXPmfeV6mgIHyNXw+CIO5FfK
bzeqQK5gdr6hcm4ul/UewjjcJ/A1K/iIzC3hErLQL2D/oZqtrkfelMkc/539M3nj
uBa7H0snU3qGO4zjoHmezrS41C1mMoDzXgLDp2hrXqyWDWDoKeYHgCquIZgIKlHC
QlHv8y6kMW8heh17mpecdONz8j3GZFw7V7+x/ubM5VW+4rSpxnciWTouLY65yrBC
TyBfRKB/YRva3WgFoPhkS9Ox0o76Y6Du6h8lxG6fFwn+FXDgdwEoKWqpRiZmT0Xm
ndFpzHp6jp0qxHmhA6z9mZCX8CUdIuXhH+LkM+Dr4AhFBnx2Oui2HW70NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZTgL7TJF+Sf0AKtOQfkKmUsrcJMB8GA1UdIwQY
MBaAFPGaXVy3lJzhvSCdwhOZNSDgLRCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAt
MmY4MGEwYTAyMDZhLzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAtMmY4MGEwYTAyMDZh
LzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8PbGpj+
pUGEf84lE2Db3b3XfyfMTO5rTAAdZAKH41OK3I5MIX2vpRmuv385kllIwVVycwmk
wJeRwuMU4mf4yr+HtGB5QEGv2L7dzv+Og4oTMDj10GsS4gaaX+6IiWH43HX200su
Q+Seklq1ySAMtuQYM+04vRG3b5+x2R599U4HiNNxbHtD+fdzRwJbmISEeZ84Rd9i
xT5tIb4WYjnhv5wxl0a4AP1Y4na543RoL+eagdhmTBuopzFHyr/OfXszNPXAepXm
zPHGYjRswZOdCqXVosix95M2sahN5pbatDoegWeGrmcDMp6nSvpkzulQ3/zSNxia
EW46EV55xSx+Kg==
-----END CERTIFICATE-----
Generated at Mon May 5 17:28:56 2025 by rpki-client