Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier: RufiCV2W1zA7snb7rQqmaHjfGkmsW3VdnTWWeZCcxyU=
Subject key identifier: E8:86:ED:48:73:77:48:7F:CD:28:4F:84:16:20:52:DB:AB:D3:5A:94
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial: 0197B6A193D14AE4802DEA2A89EE2FE8BBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number: 0BE2
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: Cv2NGocnCIw7TarVxUAfafrxO+yagEJQqSuPAPUS1cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:93:d1:4a:e4:80:2d:ea:2a:89:ee:2f:e8:bb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=e886ed487377487fcd284f84162052dbabd35a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:72:95:05:7e:62:e7:53:55:8e:e6:ef:bd:
ac:37:0b:83:48:bc:46:8e:d3:45:3f:a5:a0:50:c1:
6a:12:f8:73:92:d8:08:0a:5a:83:e2:0b:fa:12:4b:
3e:e8:9f:da:0f:ca:15:2f:b7:60:98:84:8f:18:e4:
6b:e0:47:02:81:83:f6:cb:1c:26:59:27:e5:20:44:
68:52:fa:8c:5e:fc:9b:c7:a7:ea:9d:72:59:71:04:
c7:78:f0:9a:39:5b:74:b1:dc:af:10:d4:da:20:ea:
cc:1d:1f:81:f0:6c:78:c0:8a:59:99:15:d5:ee:75:
5a:07:22:9b:b1:92:c3:db:3d:95:cd:b5:99:94:ee:
85:26:7f:5f:d0:a5:ec:a3:6f:56:52:fe:4f:34:67:
d4:96:a5:79:bf:80:8f:fd:c5:26:60:81:28:ba:97:
de:12:55:88:45:08:b5:53:78:39:34:d5:b9:15:a2:
5e:a3:30:c8:ed:61:27:91:8a:75:bc:09:f9:4b:91:
36:8b:78:82:d2:ca:70:03:19:5b:8b:84:5d:9e:49:
4f:cf:e1:5c:84:b2:a4:c8:c7:14:26:aa:6e:b1:b2:
51:12:e5:1f:8b:b1:37:b1:23:74:f0:17:31:19:52:
45:8e:89:07:bc:55:d8:ac:15:31:dc:a1:a2:ab:cd:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:ED:48:73:77:48:7F:CD:28:4F:84:16:20:52:DB:AB:D3:5A:94
X509v3 Authority Key Identifier:
keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:25:e9:5a:df:ab:eb:3b:41:85:95:59:1c:45:8f:94:e2:0a:
26:9a:f2:5d:cb:a9:20:cd:d1:86:c2:ee:d7:13:32:b6:7f:7a:
65:e2:2c:52:82:20:d7:2e:2c:cc:6b:b1:35:45:7c:7d:e9:30:
89:e6:a8:c7:5d:38:f4:d8:01:3f:88:94:c6:fa:d4:72:1f:6a:
d2:b8:f8:9a:2c:8f:ff:14:1e:22:4c:2e:2e:12:64:fc:a3:12:
b1:1a:8d:0c:d0:f1:b6:d3:42:29:ed:a0:cc:14:3a:b6:05:c7:
dd:d5:dc:9f:4c:71:4d:ea:b0:f2:82:de:ae:15:09:b8:1d:f3:
78:14:45:cc:ac:34:84:6c:97:af:1a:48:98:af:38:7f:e7:b2:
db:c0:58:52:26:3f:cd:cf:14:03:e9:87:10:75:49:1a:37:c0:
6c:8b:30:16:58:f5:1b:ce:cd:cc:bf:01:93:ed:0f:63:32:77:
93:b2:79:86:3f:f5:8a:51:ff:6d:c5:46:99:0b:7c:f4:da:5c:
32:df:97:b6:a6:57:d0:e7:70:82:8c:c8:ab:ea:52:c9:f7:d7:
3c:75:aa:da:2d:d9:ee:a5:87:f7:8a:8f:79:f6:b2:8c:ca:92:
8c:b8:a2:b6:55:2b:c4:df:7b:ca:26:83:1a:f3:9e:99:b2:c7:
80:46:67:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZPRSuSALeoqie4v6LvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzBkNjQwNzUyODUzODY0MmZiMGQzZDQzNDY2MTVmZWE3
MWRjMmUwHhcNMjUwNjI4MTMwMjExWhcNMjUwNjI5MTMwMjExWjAzMTEwLwYDVQQD
EyhlODg2ZWQ0ODczNzc0ODdmY2QyODRmODQxNjIwNTJkYmFiZDM1YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw21ylQV+YudTVY7m772sNwuDSLxG
jtNFP6WgUMFqEvhzktgIClqD4gv6Eks+6J/aD8oVL7dgmISPGORr4EcCgYP2yxwm
WSflIERoUvqMXvybx6fqnXJZcQTHePCaOVt0sdyvENTaIOrMHR+B8Gx4wIpZmRXV
7nVaByKbsZLD2z2VzbWZlO6FJn9f0KXso29WUv5PNGfUlqV5v4CP/cUmYIEoupfe
ElWIRQi1U3g5NNW5FaJeozDI7WEnkYp1vAn5S5E2i3iC0spwAxlbi4RdnklPz+Fc
hLKkyMcUJqpusbJREuUfi7E3sSN08BcxGVJFjokHvFXYrBUx3KGiq82DvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiG7Uhzd0h/zShPhBYgUtur01qUMB8GA1UdIwQY
MBaAFI/A1kB1KFOGQvsNPUNGYV/qcdwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NzQyODItNWY1Yy00NWU0LWJmYmYt
NDVmNTc3OWQ4Y2I0LzEvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80NzQyODItNWY1Yy00NWU0LWJmYmYtNDVmNTc3OWQ4Y2I0
LzEvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyXpWt+r
6ztBhZVZHEWPlOIKJpryXcupIM3RhsLu1xMytn96ZeIsUoIg1y4szGuxNUV8fekw
ieaox1049NgBP4iUxvrUch9q0rj4miyP/xQeIkwuLhJk/KMSsRqNDNDxttNCKe2g
zBQ6tgXH3dXcn0xxTeqw8oLerhUJuB3zeBRFzKw0hGyXrxpImK84f+ey28BYUiY/
zc8UA+mHEHVJGjfAbIswFlj1G87NzL8Bk+0PYzJ3k7J5hj/1ilH/bcVGmQt89Npc
Mt+XtqZX0OdwgozIq+pSyffXPHWq2i3Z7qWH94qPefayjMqSjLiitlUrxN97yiaD
GvOembLHgEZnXw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:38 2025 by rpki-client