Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: S9ulZI7gFvOgfxvslKzS1UmR+HlyyGtB7ZgNGaPDEkk=
Subject key identifier: 0D:FA:90:55:16:7F:AF:86:AA:2A:B2:7A:30:CA:8B:50:DA:0F:88:D5
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 0197B6A0F62A2D79EDEAC5F5A444F0BE9EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 029E
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: PioMcItg4/mSmI9AroOxVT3VlJ9sOQXd7+1FZwSqu1A=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f6:2a:2d:79:ed:ea:c5:f5:a4:44:f0:be:9e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=0dfa9055167faf86aa2ab27a30ca8b50da0f88d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:30:7b:af:55:27:d2:ba:7e:fa:8e:bd:1a:
b4:35:98:f5:39:7d:c6:16:28:29:d0:e0:76:de:ce:
9c:e3:97:e2:6a:4c:26:75:73:67:64:c5:00:2d:ed:
26:80:44:86:99:97:11:67:48:ed:a9:be:ad:35:c1:
5c:85:fd:83:5c:79:17:3e:0e:ac:17:48:bb:7f:67:
dd:4f:02:0c:92:dc:b6:1a:d6:d8:e9:61:94:88:38:
00:c6:60:af:56:b7:17:fe:f5:ca:1a:1f:5a:c6:a6:
36:6f:4f:d7:20:35:f6:2b:ff:31:41:07:93:9e:a1:
2a:41:eb:6a:f4:18:82:bf:7e:22:6c:cb:a1:d7:7a:
6c:69:c5:66:85:22:f9:1a:40:16:35:5d:3a:2f:46:
96:fd:ec:fe:4c:08:28:5b:34:43:a0:ab:38:58:ca:
44:b3:d5:e8:17:cf:6f:b1:cf:c3:39:eb:4c:c3:32:
ac:9d:e8:72:77:f4:ed:97:67:b2:f9:2d:e7:c9:25:
06:15:22:44:a4:17:4b:39:0f:a7:c2:88:17:0c:eb:
dd:e2:e8:a1:02:6f:fc:69:86:ca:b7:62:07:ed:11:
0c:be:36:e9:09:84:e3:20:88:b3:87:00:26:66:fb:
0d:7d:13:f2:e3:02:4b:79:11:55:d6:98:8d:46:60:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FA:90:55:16:7F:AF:86:AA:2A:B2:7A:30:CA:8B:50:DA:0F:88:D5
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f3:03:7b:fc:78:be:2f:8b:65:1e:2c:b9:73:f1:f1:a7:42:
fc:e3:3d:e6:97:f2:79:94:6a:df:ae:27:a2:47:55:f2:ed:07:
08:6d:81:45:b8:64:96:9a:9c:fd:aa:e1:c8:55:51:50:2c:a3:
fe:e1:d9:57:d5:b7:5a:d6:42:ea:fb:9f:32:74:c4:d1:87:f5:
4d:64:cd:33:5e:db:6b:95:16:2d:0b:db:53:9a:24:ff:9f:10:
19:01:6a:04:0c:c2:06:d4:7d:7e:12:92:0c:f2:e2:7d:a2:1e:
48:e6:7c:a0:c7:4c:b6:2f:f6:23:eb:37:e5:29:b9:c9:75:e6:
67:0c:60:3a:5c:1f:a7:b5:96:ab:43:e4:2a:cb:22:13:1e:22:
80:19:b8:a0:25:13:e9:f6:86:e1:dd:fd:4a:8c:07:d9:d3:4c:
41:39:a6:a7:9c:8f:30:f5:ba:65:82:7f:55:03:8c:e4:d8:38:
42:b9:1c:ff:d8:c7:95:1a:9c:e2:20:3d:fd:38:96:2c:11:d3:
73:b1:8c:bd:d1:d4:ab:de:ca:1f:75:02:d2:cd:f8:ad:ff:cf:
6c:8b:d2:c7:04:2a:dc:00:a4:5a:0c:f5:2a:0d:b8:ee:4e:af:
62:74:6c:a8:c4:5a:81:62:1b:4b:79:8b:fe:f6:75:02:2f:8f:
ce:7d:3d:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPYqLXnt6sX1pETwvp7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMmQ5NGJiM2RjNTM0YTY0MjdmZTlhNjczMDBkOGY0YzQ5
MTQ2YzQwHhcNMjUwNjI4MTMwMTMxWhcNMjUwNjI5MTMwMTMxWjAzMTEwLwYDVQQD
EygwZGZhOTA1NTE2N2ZhZjg2YWEyYWIyN2EzMGNhOGI1MGRhMGY4OGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlQwe69VJ9K6fvqOvRq0NZj1OX3G
Figp0OB23s6c45fiakwmdXNnZMUALe0mgESGmZcRZ0jtqb6tNcFchf2DXHkXPg6s
F0i7f2fdTwIMkty2GtbY6WGUiDgAxmCvVrcX/vXKGh9axqY2b0/XIDX2K/8xQQeT
nqEqQetq9BiCv34ibMuh13psacVmhSL5GkAWNV06L0aW/ez+TAgoWzRDoKs4WMpE
s9XoF89vsc/DOetMwzKsnehyd/Ttl2ey+S3nySUGFSJEpBdLOQ+nwogXDOvd4uih
Am/8aYbKt2IH7REMvjbpCYTjIIizhwAmZvsNfRPy4wJLeRFV1piNRmCVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA36kFUWf6+GqiqyejDKi1DaD4jVMB8GA1UdIwQY
MBaAFPEtlLs9xTSmQn/ppnMA2PTEkUbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hNjM1YWYtYTQ2ZC00ZDBiLWI5MzEt
YTNhYmRiZDFkYTA2LzEvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hNjM1YWYtYTQ2ZC00ZDBiLWI5MzEtYTNhYmRiZDFkYTA2
LzEvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvMDe/x4
vi+LZR4suXPx8adC/OM95pfyeZRq364nokdV8u0HCG2BRbhklpqc/arhyFVRUCyj
/uHZV9W3WtZC6vufMnTE0Yf1TWTNM17ba5UWLQvbU5ok/58QGQFqBAzCBtR9fhKS
DPLifaIeSOZ8oMdMti/2I+s35Sm5yXXmZwxgOlwfp7WWq0PkKssiEx4igBm4oCUT
6faG4d39SowH2dNMQTmmp5yPMPW6ZYJ/VQOM5Ng4Qrkc/9jHlRqc4iA9/TiWLBHT
c7GMvdHUq97KH3UC0s34rf/PbIvSxwQq3ACkWgz1Kg247k6vYnRsqMRagWIbS3mL
/vZ1Ai+Pzn091g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:50 2025 by rpki-client