Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File: 8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier: fpwhFj0VeXE6j2PI/eYFPaUBW1RPt6By9SxITgxF/O0=
Subject key identifier: 87:ED:D8:AF:D6:70:A2:EE:AC:D7:15:AF:09:31:1B:AC:BD:BA:DF:68
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer: /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial: 0196BD814BB963281058CAA8028948532F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number: 0D88
Signing time: Sun 11 May 2025 04:01:29 +0000
Manifest this update: Sun 11 May 2025 04:01:29 +0000
Manifest next update: Mon 12 May 2025 04:01:29 +0000
Files and hashes: 1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: MoGKVHy7Osqg8eGig/y0b9osAkWAdtLZ/oFWYdpDAJ4=)
2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:4b:b9:63:28:10:58:ca:a8:02:89:48:53:2f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Validity
Not Before: May 11 04:01:29 2025 GMT
Not After : May 12 04:01:29 2025 GMT
Subject: CN=87edd8afd670a2eeacd715af09311bacbdbadf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:89:28:3c:97:28:ce:e2:42:58:33:e1:5e:
17:9e:1d:fe:8f:88:63:7c:1d:ca:24:32:ea:d3:1c:
a8:cd:62:25:67:69:d2:eb:a5:77:d1:a5:ed:2d:f9:
39:67:e0:c8:0a:bf:e0:22:78:dd:c3:e8:ce:9c:38:
23:3f:12:c4:96:7c:ff:a8:05:dc:4f:3b:3f:5d:01:
eb:2f:66:9f:22:2f:12:15:64:e8:32:7e:59:88:22:
b4:5b:32:c0:22:9c:d4:c7:58:72:51:38:b1:31:fa:
34:94:b3:80:78:1f:fc:21:29:d1:00:0c:b2:4b:ac:
bb:22:cd:93:65:25:dc:64:21:94:73:c1:f9:51:92:
a4:9c:05:c6:3e:1c:c2:1b:ee:54:50:eb:bb:a2:55:
00:11:0a:1a:cb:2e:c1:fa:e2:21:32:d0:64:ce:a6:
40:f1:f6:a8:d8:1a:f3:90:9f:fa:76:4e:63:f9:af:
1f:53:1e:ff:1e:20:66:32:26:f7:ae:ee:77:55:67:
b6:f0:48:10:7c:fe:7b:45:bf:43:59:71:72:ba:31:
ee:67:be:3d:97:a7:18:be:73:52:a6:9c:28:01:34:
6d:52:91:3b:e5:19:24:49:0d:b0:b4:65:2c:15:98:
5e:0d:34:0d:da:5e:fa:bd:9d:30:3f:0d:ac:0b:ed:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:D8:AF:D6:70:A2:EE:AC:D7:15:AF:09:31:1B:AC:BD:BA:DF:68
X509v3 Authority Key Identifier:
keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c1:91:f1:42:1e:c1:a3:89:f7:66:65:0b:85:f8:9f:69:4b:
83:65:38:07:25:fa:c4:89:e5:b2:d0:3c:fe:21:30:f2:e1:a6:
43:db:18:d9:63:ba:75:33:f8:44:f2:a6:1e:64:19:2e:ca:69:
a1:cb:6c:85:39:6c:c0:34:09:d9:54:17:85:71:dc:23:08:3c:
26:4c:34:cd:c1:1e:bf:50:05:04:8a:ce:11:bc:a6:c9:fa:bc:
94:a3:72:0e:75:1d:b8:03:84:87:29:39:a3:cb:c1:17:8b:9b:
25:47:69:44:fb:0f:6e:46:bd:03:2f:f8:04:87:a0:5c:16:ab:
7b:df:7a:2a:ac:d5:ed:22:2b:33:0e:59:6a:f9:5f:d1:61:9d:
80:5c:e1:f8:18:df:28:33:d0:c0:f3:73:5e:5b:9d:5f:85:77:
f5:60:7c:e0:2f:99:53:77:9f:e1:08:ed:6a:42:48:8a:aa:f8:
82:3b:5e:08:b0:13:04:4d:85:f0:e9:46:62:56:e5:82:7b:66:
6d:db:eb:13:eb:1c:13:36:57:28:cc:99:ce:16:1c:2a:ab:fb:
95:e8:49:c2:67:e1:74:12:f4:46:c5:ce:b5:a4:81:eb:03:63:
b6:76:41:3c:c3:7c:59:4c:7a:25:14:40:b4:05:d5:b3:3d:6d:
92:05:bb:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gUu5YygQWMqoAolIUy9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDIzZTc2YTY4ZWE2YzlmNzBkM2VhNzJkZjg0ZTUzZGMy
MTcyNGYwHhcNMjUwNTExMDQwMTI5WhcNMjUwNTEyMDQwMTI5WjAzMTEwLwYDVQQD
Eyg4N2VkZDhhZmQ2NzBhMmVlYWNkNzE1YWYwOTMxMWJhY2JkYmFkZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MeJKDyXKM7iQlgz4V4Xnh3+j4hj
fB3KJDLq0xyozWIlZ2nS66V30aXtLfk5Z+DICr/gInjdw+jOnDgjPxLElnz/qAXc
Tzs/XQHrL2afIi8SFWToMn5ZiCK0WzLAIpzUx1hyUTixMfo0lLOAeB/8ISnRAAyy
S6y7Is2TZSXcZCGUc8H5UZKknAXGPhzCG+5UUOu7olUAEQoayy7B+uIhMtBkzqZA
8fao2BrzkJ/6dk5j+a8fUx7/HiBmMib3ru53VWe28EgQfP57Rb9DWXFyujHuZ749
l6cYvnNSppwoATRtUpE75RkkSQ2wtGUsFZheDTQN2l76vZ0wPw2sC+1U0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIft2K/WcKLurNcVrwkxG6y9ut9oMB8GA1UdIwQY
MBaAFPICPnamjqbJ9w0+py34TlPcIXJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdJLWRxYU9wc24zRFQ2bkxmaE9VOXdoY2s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83ZThlZDYtYWU3Mi00ZDNmLTk5OWQt
NjdjM2FmZmJkMWFhLzEvOGdJLWRxYU9wc24zRFQ2bkxmaE9VOXdoY2s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83ZThlZDYtYWU3Mi00ZDNmLTk5OWQtNjdjM2FmZmJkMWFh
LzEvOGdJLWRxYU9wc24zRFQ2bkxmaE9VOXdoY2s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8GR8UIe
waOJ92ZlC4X4n2lLg2U4ByX6xInlstA8/iEw8uGmQ9sY2WO6dTP4RPKmHmQZLspp
octshTlswDQJ2VQXhXHcIwg8Jkw0zcEev1AFBIrOEbymyfq8lKNyDnUduAOEhyk5
o8vBF4ubJUdpRPsPbka9Ay/4BIegXBare996KqzV7SIrMw5Zavlf0WGdgFzh+Bjf
KDPQwPNzXludX4V39WB84C+ZU3ef4QjtakJIiqr4gjteCLATBE2F8OlGYlblgntm
bdvrE+scEzZXKMyZzhYcKqv7lehJwmfhdBL0RsXOtaSB6wNjtnZBPMN8WUx6JRRA
tAXVsz1tkgW7vw==
-----END CERTIFICATE-----
Generated at Sun May 11 09:35:07 2025 by rpki-client