Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: OkZVr0n4JqrKkx3Iy6aHJ7jtTGmAgugUY180KYzdPO8=
Subject key identifier: 89:84:3E:11:87:F4:90:73:50:1C:35:1D:45:4F:C9:C0:B8:8D:61:73
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 0196C23969FF4FB5568F54972664DF01E3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 08FA
Signing time: Mon 12 May 2025 02:01:04 +0000
Manifest this update: Mon 12 May 2025 02:01:04 +0000
Manifest next update: Tue 13 May 2025 02:01:04 +0000
Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: AfeZp+wmKK1R8A02iXKl0rlT8QJjY6MWxUdBAZ6ceow=)
2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:69:ff:4f:b5:56:8f:54:97:26:64:df:01:e3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: May 12 02:01:04 2025 GMT
Not After : May 13 02:01:04 2025 GMT
Subject: CN=89843e1187f49073501c351d454fc9c0b88d6173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:0f:0c:c9:14:65:0c:7d:e6:5c:07:a4:6c:
cc:a2:43:ff:eb:78:7d:e7:30:f0:a2:6e:1e:89:43:
fc:16:38:62:e1:c1:9d:1c:4b:55:e2:98:bf:3d:e1:
51:94:8a:54:92:f9:e4:09:12:53:21:b9:f3:11:4a:
03:03:c5:7d:50:67:bc:58:00:a6:71:f0:cf:be:f6:
a8:d9:0d:b0:47:07:89:18:f9:7e:2c:a1:29:04:28:
33:e4:5e:e9:32:49:21:77:ca:75:23:29:a2:60:a6:
4f:f6:d1:eb:ef:c9:52:92:60:2d:80:26:a9:b5:54:
5a:ad:6b:1c:ff:e8:7f:3f:5e:2e:68:c5:f7:28:1e:
60:6f:38:1b:c9:d5:04:5a:d0:fc:5f:42:bb:90:20:
5f:8b:64:bd:3e:01:db:39:45:98:40:79:b0:8e:fc:
23:cc:4d:0f:68:4b:0e:28:ce:4b:2c:11:fa:6d:68:
cf:08:87:8e:0a:9c:6e:ac:e7:31:28:b5:cf:26:18:
0d:40:23:9c:12:81:66:9c:47:8c:e1:7b:6e:83:54:
fd:b9:ee:d1:59:75:f5:79:d0:00:f4:e6:6d:68:36:
31:1d:84:5d:e4:02:4c:84:77:62:3d:43:33:87:48:
3d:1b:53:30:70:13:93:29:95:f8:19:b2:3c:a1:b7:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:3E:11:87:F4:90:73:50:1C:35:1D:45:4F:C9:C0:B8:8D:61:73
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:8c:b9:13:3f:45:71:f2:f8:84:60:4d:b7:ac:89:2f:08:
6d:69:e8:92:c3:48:e3:25:40:78:51:0f:37:34:85:08:9b:59:
e1:5d:f4:4f:16:5e:ef:53:77:d7:22:6e:be:c5:b7:9e:7d:24:
02:5c:60:b4:78:19:8b:96:c8:dc:89:8a:b6:6d:b2:b6:e0:7f:
c9:cc:28:e6:54:87:bd:ed:a9:bc:29:08:e0:48:72:70:e1:cd:
ab:92:68:a3:c3:65:be:02:fc:d8:50:6a:41:64:5d:4d:e5:a2:
9b:e4:2b:09:54:b2:55:33:53:f5:b2:69:49:63:72:77:4f:8f:
50:6d:56:aa:fb:d6:db:19:c8:04:f0:72:e0:ec:58:45:26:0a:
22:2b:80:75:ba:b5:ad:2d:d7:bc:c5:2f:43:9c:9c:33:92:e7:
0a:1f:06:fc:3f:46:5e:4c:e9:eb:f8:a9:94:f6:5a:13:41:b3:
42:ee:a2:e0:5d:1e:e1:12:1d:22:43:4d:93:37:d9:e8:22:33:
b6:9f:ed:e5:a9:79:3c:1e:9c:d1:80:53:22:3e:75:74:01:72:
c8:f1:f0:bf:dc:5b:90:96:6d:84:27:cc:d5:ed:48:60:b1:6b:
ef:5d:71:14:fe:d1:46:d1:00:cf:4c:6e:e9:3d:7d:68:db:ec:
9a:34:45:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOWn/T7VWj1SXJmTfAePYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2VkY2JkYTAzYzNiMzZjZDdkNzAzN2VhZDMzOWJjYjg4
YzlhMjQwHhcNMjUwNTEyMDIwMTA0WhcNMjUwNTEzMDIwMTA0WjAzMTEwLwYDVQQD
Eyg4OTg0M2UxMTg3ZjQ5MDczNTAxYzM1MWQ0NTRmYzljMGI4OGQ2MTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncIPDMkUZQx95lwHpGzMokP/63h9
5zDwom4eiUP8Fjhi4cGdHEtV4pi/PeFRlIpUkvnkCRJTIbnzEUoDA8V9UGe8WACm
cfDPvvao2Q2wRweJGPl+LKEpBCgz5F7pMkkhd8p1IymiYKZP9tHr78lSkmAtgCap
tVRarWsc/+h/P14uaMX3KB5gbzgbydUEWtD8X0K7kCBfi2S9PgHbOUWYQHmwjvwj
zE0PaEsOKM5LLBH6bWjPCIeOCpxurOcxKLXPJhgNQCOcEoFmnEeM4Xtug1T9ue7R
WXX1edAA9OZtaDYxHYRd5AJMhHdiPUMzh0g9G1MwcBOTKZX4GbI8obejRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImEPhGH9JBzUBw1HUVPycC4jWFzMB8GA1UdIwQY
MBaAFG/O3L2gPDs2zX1wN+rTOby4jJokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQt
NzQyNGZkZWUyMTBlLzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQtNzQyNGZkZWUyMTBl
LzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS6MuRM/
RXHy+IRgTbesiS8IbWnoksNI4yVAeFEPNzSFCJtZ4V30TxZe71N31yJuvsW3nn0k
AlxgtHgZi5bI3ImKtm2ytuB/ycwo5lSHve2pvCkI4EhycOHNq5Joo8NlvgL82FBq
QWRdTeWim+QrCVSyVTNT9bJpSWNyd0+PUG1WqvvW2xnIBPBy4OxYRSYKIiuAdbq1
rS3XvMUvQ5ycM5LnCh8G/D9GXkzp6/iplPZaE0GzQu6i4F0e4RIdIkNNkzfZ6CIz
tp/t5al5PB6c0YBTIj51dAFyyPHwv9xbkJZthCfM1e1IYLFr711xFP7RRtEAz0xu
6T19aNvsmjRF7Q==
-----END CERTIFICATE-----
Generated at Mon May 12 08:59:19 2025 by rpki-client