Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: 1KpsNtMFyPJ+XjR+okP8VBrf6h+XfxyfusBdHQ9exrU=
Subject key identifier: 37:6E:54:35:9C:52:94:9D:03:81:32:43:30:06:FB:95:29:21:DC:EB
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0197B70F41F8DE7ED5790423AA12DE684F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 15E5
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: 46Sp+IbI+fLP6yJhAYAgb+YzzSIDNd0kmbH1X/Ml5Ms=)
2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:41:f8:de:7e:d5:79:04:23:aa:12:de:68:4f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=376e54359c52949d038132433006fb952921dceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:4e:4c:36:9d:0c:97:39:4d:1a:b2:b1:b9:
ff:db:6c:aa:06:78:51:49:e1:7e:c7:c0:d5:32:4b:
69:ab:a8:91:bd:d8:00:3c:1e:1e:53:3b:8d:65:8f:
0c:10:4c:aa:ae:53:2b:8c:c6:09:16:40:cc:ee:be:
b8:73:9b:0c:af:23:a1:1c:f4:5f:66:33:93:c0:30:
d9:e2:46:6e:87:d1:e3:7a:50:30:4a:31:1d:47:eb:
18:bc:cf:d1:a5:46:ee:8b:56:0c:07:5d:dd:07:3d:
27:d8:f9:56:1e:4b:69:8d:4c:b1:ad:38:73:0a:8d:
58:46:f7:e6:7b:b7:95:0c:20:92:8e:b4:ee:fd:23:
e5:85:86:37:db:7e:a1:81:20:2d:8a:49:c1:3b:0e:
0b:dc:3b:92:11:80:b4:bf:7f:7a:c5:e6:7d:3e:fd:
43:e9:ca:c1:58:1b:c1:4b:46:60:a2:bb:6d:b8:59:
09:1e:ef:3e:bc:18:b9:b5:24:d4:6a:52:f0:81:2b:
99:6e:98:83:09:ba:1e:ea:48:13:56:15:d2:d9:d1:
90:c8:52:93:76:e5:a3:8f:2e:a4:72:5b:62:ca:cc:
2d:53:41:7b:e8:9f:e3:6f:2d:81:04:02:ea:17:ac:
77:02:52:96:6a:29:f5:17:dd:5b:d9:40:9c:24:7a:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:54:35:9C:52:94:9D:03:81:32:43:30:06:FB:95:29:21:DC:EB
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:a0:30:33:07:88:f4:e7:38:79:62:05:84:0e:71:cd:dc:
7a:c9:e9:66:d2:cd:06:2b:32:09:d5:7f:57:8b:1c:64:e8:e9:
0b:46:70:a9:f7:eb:98:48:18:87:5a:04:e6:fa:da:20:fd:5a:
b6:63:42:34:d7:fc:69:00:43:c3:45:28:29:3f:02:af:92:dd:
41:15:ae:ea:bd:a7:02:10:7f:40:1b:4f:9e:f4:7f:6c:3f:8f:
d5:8c:59:c4:fc:2b:d6:95:fd:b0:87:28:7e:e2:56:4b:4d:b5:
b7:dd:7e:1a:d8:69:49:63:45:7f:15:69:14:57:c2:1a:05:45:
1c:47:5b:b8:15:3e:7f:80:19:a7:80:82:5d:02:ee:89:23:ac:
40:a4:34:62:53:66:cc:2e:dc:b3:6c:6f:f8:a5:93:c2:fb:e3:
9c:9f:c5:1b:d9:10:c5:0f:e8:d5:98:9a:1a:77:74:49:5b:4f:
cf:df:be:f1:2f:3b:cc:16:c3:5a:a2:0d:05:0b:0f:33:7a:c5:
6b:41:33:eb:65:53:d8:b1:77:8c:01:6d:e9:e1:f5:a5:ea:99:
77:0b:df:cc:92:71:68:c9:97:cc:e7:1f:bb:e0:a3:c1:f5:ef:
ef:e9:bc:60:c3:7d:51:34:51:bb:79:42:ec:ae:46:9e:b2:56:
97:a3:14:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0H43n7VeQQjqhLeaE9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDc5YjgzYzUyMGQ3ODQ0NDVjMjQ4MjhiYWI2MzNmMGQ3
MDJjZjMwHhcNMjUwNjI4MTUwMTU5WhcNMjUwNjI5MTUwMTU5WjAzMTEwLwYDVQQD
EygzNzZlNTQzNTljNTI5NDlkMDM4MTMyNDMzMDA2ZmI5NTI5MjFkY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIlOTDadDJc5TRqysbn/22yqBnhR
SeF+x8DVMktpq6iRvdgAPB4eUzuNZY8MEEyqrlMrjMYJFkDM7r64c5sMryOhHPRf
ZjOTwDDZ4kZuh9HjelAwSjEdR+sYvM/RpUbui1YMB13dBz0n2PlWHktpjUyxrThz
Co1YRvfme7eVDCCSjrTu/SPlhYY3236hgSAtiknBOw4L3DuSEYC0v396xeZ9Pv1D
6crBWBvBS0ZgorttuFkJHu8+vBi5tSTUalLwgSuZbpiDCboe6kgTVhXS2dGQyFKT
duWjjy6kcltiyswtU0F76J/jby2BBALqF6x3AlKWain1F91b2UCcJHoMQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDduVDWcUpSdA4EyQzAG+5UpIdzrMB8GA1UdIwQY
MBaAFPFHm4PFINeERFwkgourYz8NcCzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEt
YmRkNGFmNWYzNWQxLzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEtYmRkNGFmNWYzNWQx
LzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehagMDMH
iPTnOHliBYQOcc3cesnpZtLNBisyCdV/V4scZOjpC0ZwqffrmEgYh1oE5vraIP1a
tmNCNNf8aQBDw0UoKT8Cr5LdQRWu6r2nAhB/QBtPnvR/bD+P1YxZxPwr1pX9sIco
fuJWS021t91+GthpSWNFfxVpFFfCGgVFHEdbuBU+f4AZp4CCXQLuiSOsQKQ0YlNm
zC7cs2xv+KWTwvvjnJ/FG9kQxQ/o1ZiaGnd0SVtPz9++8S87zBbDWqINBQsPM3rF
a0Ez62VT2LF3jAFt6eH1peqZdwvfzJJxaMmXzOcfu+CjwfXv7+m8YMN9UTRRu3lC
7K5GnrJWl6MUdg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:26 2025 by rpki-client