Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier: 5KYcyAAo06AXquwdyapUVK5uZprU8l5nRtUNOoAF2D4=
Subject key identifier: 68:1C:70:17:94:ED:FD:F3:40:96:A9:C8:A6:53:BF:F4:E6:EC:21:3B
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 0196BB92CE7B9251674E567B4C79A3791B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number: 1433
Signing time: Sat 10 May 2025 19:01:22 +0000
Manifest this update: Sat 10 May 2025 19:01:22 +0000
Manifest next update: Sun 11 May 2025 19:01:22 +0000
Files and hashes: 1: 0I9cdEj3e4monIOvSXft4r0-CMo.roa (hash: oHyUkagcGp7ShA4v0QeuNwiId+006yb988EUZglB85E=)
2: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: pBrmLkgQ4KGWYcvEt8YTpQEikkdPR8K86SWvmXJ6rhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:ce:7b:92:51:67:4e:56:7b:4c:79:a3:79:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: May 10 19:01:22 2025 GMT
Not After : May 11 19:01:22 2025 GMT
Subject: CN=681c701794edfdf34096a9c8a653bff4e6ec213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:88:73:6f:84:c0:b2:52:a3:9a:60:0a:00:
de:95:95:76:fc:57:68:76:ee:fc:9f:f5:f9:31:86:
95:9b:04:d3:3a:4b:de:eb:c3:6a:af:31:49:6d:11:
9c:c0:74:68:08:8c:54:c1:ac:94:f4:c4:51:45:0a:
71:95:42:1d:a4:7c:e6:ac:47:11:be:67:47:a6:ed:
bb:19:d2:89:47:3f:ad:ca:05:5d:44:1d:e3:d3:56:
aa:60:07:af:31:6b:cb:10:42:ba:db:9c:6d:80:15:
52:8e:e3:a1:51:4b:63:d2:53:58:be:2d:00:a9:b4:
0f:3b:fc:fe:00:f9:e3:3f:a8:78:02:05:b6:3a:82:
9e:b4:a1:e5:0c:8e:3f:aa:31:a1:10:5d:bc:8b:8b:
7f:6d:71:2f:62:ef:58:cc:27:be:88:6d:3f:70:37:
aa:af:0f:e6:f2:c5:f0:f3:08:79:37:b2:0a:ac:98:
10:5c:c1:fd:80:14:72:da:60:fb:c0:fc:2f:a4:02:
b3:5d:ba:fb:16:e6:53:fa:52:39:30:3d:13:dd:fa:
4c:cf:56:56:cb:53:17:aa:f5:bf:dc:7b:63:cb:84:
67:b9:0c:83:ff:e4:a7:75:14:91:ea:af:91:ff:30:
3b:a5:22:d1:a5:3a:6b:3b:4e:90:a9:8e:77:4b:da:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:70:17:94:ED:FD:F3:40:96:A9:C8:A6:53:BF:F4:E6:EC:21:3B
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ac:5c:36:93:e5:3c:e8:59:27:ef:78:27:12:2b:db:24:0a:
de:f0:16:7e:94:29:3b:3a:c5:7f:7c:fb:e8:3b:9a:fb:3f:9f:
fd:34:63:b8:1f:ff:57:f4:06:73:b6:ab:3f:9c:ea:54:27:0d:
a9:ef:28:e3:bc:e8:e6:c0:02:79:a6:72:ac:58:18:5d:b5:cd:
04:17:8a:33:6c:2b:06:66:6a:e4:a3:df:6e:58:38:82:57:18:
f2:09:ad:ba:3c:f5:f5:be:e3:a6:36:30:03:8b:6c:b6:29:4f:
69:8f:26:e2:39:ad:1b:b2:c1:f3:4c:a9:09:29:91:6e:19:f3:
76:e1:e9:95:3c:58:b0:67:0e:16:e7:2a:e0:c7:5f:b9:5c:20:
6a:49:f6:60:b5:b0:a0:33:99:28:9d:6a:68:52:78:d3:57:7c:
39:56:af:ca:96:0a:2d:08:95:d7:f3:54:64:2e:0d:ce:74:b6:
84:2a:32:88:aa:6c:9c:18:b8:9a:7d:91:3d:ff:cb:52:2b:0c:
a5:f5:07:4e:5f:76:e3:95:28:8b:5e:78:a9:e6:41:4c:a7:a5:
9e:cb:b6:d7:d9:d7:c3:8c:79:65:d4:11:cd:39:e8:70:a1:b6:
08:fb:4b:47:db:65:95:e7:c8:01:1c:d5:84:bd:0f:9f:ab:6d:
86:ff:31:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7ks57klFnTlZ7THmjeRsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTk1OWRjMTY3MTVjOGE1NGM4MDk0MjY3YjhlNDkxZmUz
MjFkMmMwHhcNMjUwNTEwMTkwMTIyWhcNMjUwNTExMTkwMTIyWjAzMTEwLwYDVQQD
Eyg2ODFjNzAxNzk0ZWRmZGYzNDA5NmE5YzhhNjUzYmZmNGU2ZWMyMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxuIc2+EwLJSo5pgCgDelZV2/Fdo
du78n/X5MYaVmwTTOkve68NqrzFJbRGcwHRoCIxUwayU9MRRRQpxlUIdpHzmrEcR
vmdHpu27GdKJRz+tygVdRB3j01aqYAevMWvLEEK625xtgBVSjuOhUUtj0lNYvi0A
qbQPO/z+APnjP6h4AgW2OoKetKHlDI4/qjGhEF28i4t/bXEvYu9YzCe+iG0/cDeq
rw/m8sXw8wh5N7IKrJgQXMH9gBRy2mD7wPwvpAKzXbr7FuZT+lI5MD0T3fpMz1ZW
y1MXqvW/3Htjy4RnuQyD/+SndRSR6q+R/zA7pSLRpTprO06QqY53S9oB1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgccBeU7f3zQJapyKZTv/Tm7CE7MB8GA1UdIwQY
MBaAFPKpWdwWcVyKVMgJQme45JH+Mh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt
NGViZWVjN2U4Mjc1LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1
LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaxcNpPl
POhZJ+94JxIr2yQK3vAWfpQpOzrFf3z76Dua+z+f/TRjuB//V/QGc7arP5zqVCcN
qe8o47zo5sACeaZyrFgYXbXNBBeKM2wrBmZq5KPfblg4glcY8gmtujz19b7jpjYw
A4tstilPaY8m4jmtG7LB80ypCSmRbhnzduHplTxYsGcOFucq4MdfuVwgakn2YLWw
oDOZKJ1qaFJ401d8OVavypYKLQiV1/NUZC4NznS2hCoyiKpsnBi4mn2RPf/LUisM
pfUHTl9245Uoi154qeZBTKelnsu219nXw4x5ZdQRzTnocKG2CPtLR9tllefIARzV
hL0Pn6tthv8xwA==
-----END CERTIFICATE-----
Generated at Sat May 10 22:22:22 2025 by rpki-client