Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: ItQQHpUt7H/MWTqUhMFj7qQTt15pVp4AWqgKg2VGvls=
Subject key identifier: E3:61:DB:61:5C:A8:37:2A:A2:A8:35:D5:7B:62:AF:BC:1D:A0:FA:FE
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 0197B70F5ACCBAE2C54016F548498FAD3030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0676
Signing time: Sat 28 Jun 2025 15:02:06 +0000
Manifest this update: Sat 28 Jun 2025 15:02:06 +0000
Manifest next update: Sun 29 Jun 2025 15:02:06 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: Tww4Dlo+IXWKJQkmO+RIeKX9eQN3+w/oz5XC4k5gqQ8=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:5a:cc:ba:e2:c5:40:16:f5:48:49:8f:ad:30:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jun 28 15:02:06 2025 GMT
Not After : Jun 29 15:02:06 2025 GMT
Subject: CN=e361db615ca8372aa2a835d57b62afbc1da0fafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:26:2e:67:79:13:c0:2f:59:fe:89:cf:b2:
f2:d5:6c:53:19:85:10:f8:7d:38:60:1c:6e:ba:d3:
2a:1c:a9:a0:2c:20:f8:6c:b0:4e:5c:c6:d8:f7:4d:
91:a9:7f:3e:47:46:cf:d8:10:22:66:08:bb:5a:70:
10:5e:ec:71:8b:e2:d6:b8:4e:86:82:77:48:3a:ca:
ef:ce:11:66:9e:44:0e:20:7a:71:a4:93:31:af:71:
e0:b8:2b:5f:fc:09:30:40:a9:9d:19:01:eb:5f:99:
27:2e:ce:02:13:30:60:4d:a7:86:ac:0e:cc:66:35:
0d:4e:cb:fb:16:48:a3:f9:8b:07:1d:68:ca:01:cc:
aa:51:23:a4:ad:10:45:ce:b0:30:dd:93:9b:d5:a0:
f8:40:de:6f:89:5d:28:5c:36:0d:cb:7d:7b:f8:24:
bc:55:de:21:e6:7f:56:e9:bc:a6:20:35:95:90:a9:
e9:2a:49:53:ae:b7:c9:15:3c:20:78:d9:f6:81:2a:
d0:79:f1:1f:3b:2c:f0:f3:68:28:1c:d7:f9:20:90:
e1:e7:4d:8f:51:ae:2a:b2:76:c0:d1:cb:0f:14:5f:
1c:43:f5:88:a7:4e:fa:a4:96:e5:c3:ba:13:e4:19:
7f:8f:ec:d3:ed:23:c0:56:49:8f:d5:b5:7f:c5:01:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:DB:61:5C:A8:37:2A:A2:A8:35:D5:7B:62:AF:BC:1D:A0:FA:FE
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:08:3e:4d:ee:cd:de:c8:00:e8:de:61:6c:f6:91:b9:1c:9f:
a6:e3:22:0e:bf:27:ba:2e:90:92:69:b9:c3:91:2e:43:fd:85:
cc:61:3d:11:18:ae:78:5f:2a:6d:d5:b7:7b:02:57:58:39:38:
fb:f7:d6:84:8e:aa:9e:51:7b:2e:c5:c7:40:2a:56:e3:a6:20:
a4:30:f5:04:26:39:eb:0c:85:e8:e5:94:c5:39:92:05:cc:20:
b9:f7:47:72:1c:bd:d7:ff:18:4b:b1:2b:d9:13:90:0a:d0:e8:
a3:6d:5d:bf:1b:4e:1f:8f:40:0d:67:a8:6a:9f:b8:e4:da:12:
fe:80:8c:c5:6c:61:50:26:68:79:c3:a0:26:cd:8b:7b:c2:f3:
b2:24:04:99:0a:97:fe:1b:e2:2a:11:09:c0:fc:c3:6b:ff:2c:
98:44:91:f6:d4:52:2f:b9:65:3c:2b:ed:fb:18:cd:cf:53:0e:
77:55:5b:58:39:27:27:d5:06:66:3f:cd:bc:ce:3c:7f:00:2e:
a5:f6:a8:60:86:b9:ac:20:d9:a3:25:e7:84:0d:b2:66:72:71:
15:96:a7:02:53:78:a2:73:20:81:8c:7e:b9:32:f3:df:22:7d:
db:61:d9:04:64:b5:19:af:77:f7:20:47:e8:69:ac:ce:ff:d9:
b5:ca:d0:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D1rMuuLFQBb1SEmPrTAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1
ZGQ1N2UwHhcNMjUwNjI4MTUwMjA2WhcNMjUwNjI5MTUwMjA2WjAzMTEwLwYDVQQD
EyhlMzYxZGI2MTVjYTgzNzJhYTJhODM1ZDU3YjYyYWZiYzFkYTBmYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH0mLmd5E8AvWf6Jz7Ly1WxTGYUQ
+H04YBxuutMqHKmgLCD4bLBOXMbY902RqX8+R0bP2BAiZgi7WnAQXuxxi+LWuE6G
gndIOsrvzhFmnkQOIHpxpJMxr3HguCtf/AkwQKmdGQHrX5knLs4CEzBgTaeGrA7M
ZjUNTsv7Fkij+YsHHWjKAcyqUSOkrRBFzrAw3ZOb1aD4QN5viV0oXDYNy317+CS8
Vd4h5n9W6bymIDWVkKnpKklTrrfJFTwgeNn2gSrQefEfOyzw82goHNf5IJDh502P
Ua4qsnbA0csPFF8cQ/WIp076pJblw7oT5Bl/j+zT7SPAVkmP1bV/xQEOCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONh22FcqDcqoqg11Xtir7wdoPr+MB8GA1UdIwQY
MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt
NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl
LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgg+Te7N
3sgA6N5hbPaRuRyfpuMiDr8nui6Qkmm5w5EuQ/2FzGE9ERiueF8qbdW3ewJXWDk4
+/fWhI6qnlF7LsXHQCpW46YgpDD1BCY56wyF6OWUxTmSBcwgufdHchy91/8YS7Er
2ROQCtDoo21dvxtOH49ADWeoap+45NoS/oCMxWxhUCZoecOgJs2Le8LzsiQEmQqX
/hviKhEJwPzDa/8smESR9tRSL7llPCvt+xjNz1MOd1VbWDknJ9UGZj/NvM48fwAu
pfaoYIa5rCDZoyXnhA2yZnJxFZanAlN4onMggYx+uTLz3yJ922HZBGS1Ga939yBH
6Gmszv/ZtcrQbg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:09 2025 by rpki-client