Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: 6F4noykEStiJM+6KgKyIjgKggB3uNWmSAp3tXBJqoAo=
Subject key identifier: BE:C4:A0:4B:36:DB:F4:DD:F6:21:5F:F5:2B:4F:49:4D:D3:DF:24:ED
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 0196CD61753760063D8B09A96A133E1D1C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 05FD
Signing time: Wed 14 May 2025 06:00:38 +0000
Manifest this update: Wed 14 May 2025 06:00:38 +0000
Manifest next update: Thu 15 May 2025 06:00:38 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: ObDY60hE4uywu0b88QyWqIpL6Q3N5AZc9bEAUpjwnuU=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:75:37:60:06:3d:8b:09:a9:6a:13:3e:1d:1c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: May 14 06:00:38 2025 GMT
Not After : May 15 06:00:38 2025 GMT
Subject: CN=bec4a04b36dbf4ddf6215ff52b4f494dd3df24ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:ad:e2:00:59:3a:b2:17:e5:f0:cf:cf:d9:
38:5a:34:96:f7:f0:19:85:79:29:f1:fc:de:93:b5:
45:c0:b3:69:a9:d3:f4:63:98:43:b9:09:e1:e1:88:
a5:68:41:33:89:d9:59:e1:0f:9f:66:e7:1a:b4:54:
ce:23:4a:4f:99:f9:49:6c:ed:d8:d7:60:06:cd:68:
2f:d3:66:75:ef:de:14:ea:6f:71:21:00:96:c1:51:
8d:b6:f3:4a:6c:2f:af:4c:a7:a1:8d:ad:f6:62:b5:
90:17:42:78:2b:0b:f4:ab:2d:b1:d3:25:82:f8:12:
b2:29:d3:c1:1c:2d:4b:db:9c:fb:21:6f:98:61:73:
54:3f:f0:4e:d5:e4:a4:9e:4f:07:f0:25:80:e2:e3:
a9:d7:e8:f5:7a:ad:48:a8:83:14:0b:1a:53:b9:b0:
42:15:1f:39:a5:7e:05:19:67:5f:44:8a:aa:04:4a:
a5:15:b1:b4:a0:d7:3e:2c:e8:16:ff:36:e0:63:d0:
64:85:e7:6c:76:ae:79:49:33:d2:b8:bb:b9:d7:56:
07:5d:e7:4b:7d:e4:f5:d7:1d:32:7d:b8:f8:04:80:
40:93:7f:d7:28:f7:79:a2:bc:a3:76:0e:ee:0f:17:
1c:98:3d:61:45:f4:a5:6d:8a:db:48:bd:04:a7:fc:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:A0:4B:36:DB:F4:DD:F6:21:5F:F5:2B:4F:49:4D:D3:DF:24:ED
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:f7:df:df:b1:6e:9d:6c:62:cd:3f:17:8f:89:56:e6:be:
55:43:78:c9:20:51:11:db:a6:94:66:f5:a6:4a:b4:69:4d:c0:
1f:63:6e:6a:39:66:14:14:2c:44:f6:75:52:b4:fe:de:1a:2a:
cb:40:18:6c:16:0a:3a:0a:49:89:28:76:15:ce:29:bc:2d:e0:
70:58:9e:d2:b0:55:b0:8b:a9:c6:f4:9c:e3:10:70:53:12:cc:
61:ed:ea:37:2a:25:e2:85:1a:26:5b:f7:be:9a:69:8f:33:47:
c5:83:af:d5:59:75:bc:f3:2d:92:4c:54:e1:a9:b5:43:50:b7:
8f:b2:89:86:3a:26:4c:46:4e:81:e1:59:f4:b6:64:35:c0:64:
80:c2:21:80:e4:86:c0:0f:a6:b1:0d:2f:bc:79:54:e9:63:0f:
79:04:b0:dd:ed:3c:88:17:62:5c:95:0d:2c:a8:ce:c9:c4:8b:
ac:af:75:9d:9b:2d:a9:42:e4:a9:88:ed:38:0e:8a:cf:3c:f0:
71:30:4b:7c:9a:06:eb:67:58:64:e2:58:1e:50:d8:40:27:d0:
89:0f:10:ee:0c:2d:38:a0:e7:71:0b:95:60:78:c0:33:b0:84:
70:ae:63:3a:74:60:3c:0e:40:2c:d7:51:e7:20:b8:d7:3e:04:
9c:cb:fc:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNYXU3YAY9iwmpahM+HRwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1
ZGQ1N2UwHhcNMjUwNTE0MDYwMDM4WhcNMjUwNTE1MDYwMDM4WjAzMTEwLwYDVQQD
EyhiZWM0YTA0YjM2ZGJmNGRkZjYyMTVmZjUyYjRmNDk0ZGQzZGYyNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3it4gBZOrIX5fDPz9k4WjSW9/AZ
hXkp8fzek7VFwLNpqdP0Y5hDuQnh4YilaEEzidlZ4Q+fZucatFTOI0pPmflJbO3Y
12AGzWgv02Z1794U6m9xIQCWwVGNtvNKbC+vTKehja32YrWQF0J4Kwv0qy2x0yWC
+BKyKdPBHC1L25z7IW+YYXNUP/BO1eSknk8H8CWA4uOp1+j1eq1IqIMUCxpTubBC
FR85pX4FGWdfRIqqBEqlFbG0oNc+LOgW/zbgY9Bkhedsdq55STPSuLu511YHXedL
feT11x0yfbj4BIBAk3/XKPd5oryjdg7uDxccmD1hRfSlbYrbSL0Ep/wxqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7EoEs22/Td9iFf9StPSU3T3yTtMB8GA1UdIwQY
MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt
NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl
LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyH339+x
bp1sYs0/F4+JVua+VUN4ySBREdumlGb1pkq0aU3AH2NuajlmFBQsRPZ1UrT+3hoq
y0AYbBYKOgpJiSh2Fc4pvC3gcFie0rBVsIupxvSc4xBwUxLMYe3qNyol4oUaJlv3
vpppjzNHxYOv1Vl1vPMtkkxU4am1Q1C3j7KJhjomTEZOgeFZ9LZkNcBkgMIhgOSG
wA+msQ0vvHlU6WMPeQSw3e08iBdiXJUNLKjOycSLrK91nZstqULkqYjtOA6Kzzzw
cTBLfJoG62dYZOJYHlDYQCfQiQ8Q7gwtOKDncQuVYHjAM7CEcK5jOnRgPA5ALNdR
5yC41z4EnMv8EQ==
-----END CERTIFICATE-----
Generated at Wed May 14 12:40:34 2025 by rpki-client