Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: 6hhTTUqtcBRIQoD7BQ/QJzSz6g+YRhLmMk7vAYFUSGs=
Subject key identifier: AE:B8:F6:DC:55:E7:AF:64:CF:AA:B6:F9:C1:1A:A2:2F:84:E0:B2:33
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 0196BBC8C79349436907AEDCCF95220D394D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0C2A
Signing time: Sat 10 May 2025 20:00:19 +0000
Manifest this update: Sat 10 May 2025 20:00:19 +0000
Manifest next update: Sun 11 May 2025 20:00:19 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 9f3XZjuOARN62+HD8MFrpdGlyuXY/+xwUJIHy3dmriA=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:c7:93:49:43:69:07:ae:dc:cf:95:22:0d:39:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: May 10 20:00:19 2025 GMT
Not After : May 11 20:00:19 2025 GMT
Subject: CN=aeb8f6dc55e7af64cfaab6f9c11aa22f84e0b233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:3e:90:c8:22:80:b8:45:85:dc:85:12:99:
04:a3:1f:8b:bc:58:8a:12:bd:0b:6f:ca:99:ab:75:
89:24:3e:80:2e:ae:50:a2:28:d6:f7:9d:32:14:62:
60:86:ce:d7:c4:67:0f:88:63:3c:a1:6e:58:b0:f1:
bc:7f:c3:54:ee:8a:60:43:9d:ee:7f:a3:9f:c8:a3:
db:81:2f:2a:e3:cf:0f:39:5d:0d:51:05:fc:d2:f7:
73:3e:0a:b1:6c:f0:9e:ee:d2:40:9f:ba:f1:98:49:
c8:4b:e6:50:a3:d2:cd:ce:ab:ef:97:c2:0d:ef:5c:
8f:b1:df:d2:3c:88:8b:1c:99:5c:8c:63:dd:cd:88:
55:16:ec:86:b2:15:f4:25:07:8c:3a:f3:90:7a:2f:
51:78:88:6c:3b:4e:a5:74:0f:52:46:2a:0b:f5:ca:
d0:bc:1f:9d:80:7f:8e:89:4e:df:9d:5f:fd:7c:93:
3b:b8:cf:b3:fd:f9:74:60:37:3a:89:d6:41:fb:36:
55:6c:31:a0:20:a0:f5:63:af:f2:e6:11:31:a4:06:
41:5b:fb:80:b2:18:54:fc:56:5b:85:3f:6e:43:52:
2d:d2:5e:26:c0:85:fe:26:b6:d9:03:d2:22:87:22:
2f:ca:74:15:b1:78:40:b2:81:ea:54:4d:96:b5:24:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B8:F6:DC:55:E7:AF:64:CF:AA:B6:F9:C1:1A:A2:2F:84:E0:B2:33
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:88:98:bf:b0:15:2f:c3:2b:ce:30:c7:10:2e:d0:1f:09:fd:
ef:6a:dc:24:91:23:5a:b9:83:ce:32:3b:3b:4b:9f:f7:a2:62:
58:99:1a:ed:53:8a:f6:c7:8f:7f:6e:0e:37:70:de:99:be:61:
c3:80:33:e2:18:ff:c3:21:04:35:a9:20:e2:9d:d9:0f:28:0c:
d1:38:a4:d1:22:ab:29:5c:ec:85:36:56:a5:9a:36:99:9c:51:
d7:5f:94:f9:08:be:fe:18:e1:a3:a1:4a:b7:70:ab:83:bb:b6:
ba:fd:94:e3:97:9e:36:be:e3:a1:c7:76:8e:bc:9f:29:6a:63:
5e:da:91:6e:54:a0:77:eb:b2:68:b4:7e:e5:d8:56:a9:a7:60:
b7:09:3a:b9:9e:2b:31:4c:9c:59:32:1e:6a:1f:c8:71:08:79:
4a:c7:9f:4c:82:66:a8:38:6f:e4:78:8e:53:85:4b:8c:e8:53:
da:19:f7:f5:39:c7:62:91:4e:ea:f0:71:44:5a:2a:a0:d2:31:
54:45:86:e3:9b:b6:c2:75:8a:85:b0:29:67:c0:fb:1c:28:9a:
6a:5a:ff:40:66:8e:1f:26:cf:39:b2:75:da:e7:0f:cd:4c:da:
05:59:17:c8:e2:63:47:13:7f:8f:a4:c5:2b:8f:ff:fe:0b:d0:
2b:78:9d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yMeTSUNpB67cz5UiDTlNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl
ODI2ZDQwHhcNMjUwNTEwMjAwMDE5WhcNMjUwNTExMjAwMDE5WjAzMTEwLwYDVQQD
EyhhZWI4ZjZkYzU1ZTdhZjY0Y2ZhYWI2ZjljMTFhYTIyZjg0ZTBiMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvec+kMgigLhFhdyFEpkEox+LvFiK
Er0Lb8qZq3WJJD6ALq5QoijW950yFGJghs7XxGcPiGM8oW5YsPG8f8NU7opgQ53u
f6OfyKPbgS8q488POV0NUQX80vdzPgqxbPCe7tJAn7rxmEnIS+ZQo9LNzqvvl8IN
71yPsd/SPIiLHJlcjGPdzYhVFuyGshX0JQeMOvOQei9ReIhsO06ldA9SRioL9crQ
vB+dgH+OiU7fnV/9fJM7uM+z/fl0YDc6idZB+zZVbDGgIKD1Y6/y5hExpAZBW/uA
shhU/FZbhT9uQ1It0l4mwIX+JrbZA9IihyIvynQVsXhAsoHqVE2WtSRB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK649txV569kz6q2+cEaoi+E4LIzMB8GA1UdIwQY
MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt
M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0
LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYiYv7AV
L8MrzjDHEC7QHwn972rcJJEjWrmDzjI7O0uf96JiWJka7VOK9sePf24ON3Demb5h
w4Az4hj/wyEENakg4p3ZDygM0Tik0SKrKVzshTZWpZo2mZxR11+U+Qi+/hjho6FK
t3Crg7u2uv2U45eeNr7jocd2jryfKWpjXtqRblSgd+uyaLR+5dhWqadgtwk6uZ4r
MUycWTIeah/IcQh5SsefTIJmqDhv5HiOU4VLjOhT2hn39TnHYpFO6vBxRFoqoNIx
VEWG45u2wnWKhbApZ8D7HCiaalr/QGaOHybPObJ12ucPzUzaBVkXyOJjRxN/j6TF
K4///gvQK3idEw==
-----END CERTIFICATE-----
Generated at Sun May 11 01:32:56 2025 by rpki-client