Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: 2OJb0FeJSPpS+tg0fTbWPP6irI3etnQUB5NiA2pIuEA=
Subject key identifier: 5A:C1:D9:94:0B:17:16:6A:07:E0:90:F6:95:09:14:F0:7C:2C:C1:D2
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 0196C79696344787FA96A7BBB913CF831708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 03:00:56 +0000
Manifest this update: Tue 13 May 2025 03:00:56 +0000
Manifest next update: Wed 14 May 2025 03:00:56 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: jWB0QbmMCuMoVbNf+fOb+vM28jYNjpBwF4FtXvmkUpY=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:96:34:47:87:fa:96:a7:bb:b9:13:cf:83:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: May 13 03:00:56 2025 GMT
Not After : May 14 03:00:56 2025 GMT
Subject: CN=5ac1d9940b17166a07e090f6950914f07c2cc1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:dc:7f:76:38:54:97:4e:f2:ae:6e:99:c4:
63:3e:fe:c1:c2:bf:05:2a:e3:0f:ca:b0:1f:98:b3:
c6:65:bf:9c:03:cc:40:1e:f3:fc:59:23:a8:1d:16:
63:67:ad:a7:fd:0b:67:33:19:5f:be:53:57:6d:83:
bf:b2:c5:40:a6:a2:c2:b8:9b:9f:5f:6d:52:91:33:
7d:44:bc:f0:15:3c:d1:ef:46:fd:8b:b4:35:da:e6:
2f:61:da:f6:75:ef:d5:03:b3:7d:cd:c7:59:63:49:
05:98:da:e1:18:cc:84:06:f9:08:7b:e3:c1:02:41:
a5:df:5b:c6:17:da:24:eb:5b:b3:b5:1e:e7:e9:07:
5f:41:9d:10:71:f2:a4:62:9e:79:1c:99:aa:e8:56:
13:dd:55:c5:a3:fd:06:0c:b9:7f:d7:59:2b:4b:ff:
73:04:f7:0a:c9:5f:2a:c1:09:ab:7d:73:e6:a5:9e:
8a:f4:32:92:64:ba:7c:3b:13:37:28:14:38:3a:45:
c3:cd:85:d2:8d:62:f6:9b:8f:9a:5e:43:8e:d8:46:
ba:66:1a:8a:be:b1:97:69:af:43:5e:96:97:0c:da:
83:03:aa:3e:b3:fa:40:2f:59:9b:c3:ba:df:bc:fb:
f7:76:85:dd:e5:91:e8:28:27:9c:bf:f4:ab:25:ff:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:D9:94:0B:17:16:6A:07:E0:90:F6:95:09:14:F0:7C:2C:C1:D2
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:82:ac:4a:5a:a2:3d:63:ce:7a:b5:32:8d:b7:88:cf:a0:a3:
e7:e4:5e:34:1f:c8:c8:e9:1e:a5:d2:ef:9b:fd:70:03:9e:08:
14:c2:41:b9:4c:3d:a5:d3:2f:08:c2:40:ee:27:49:ed:25:59:
bf:e3:64:be:ad:39:06:03:7a:55:3c:fe:02:d8:72:bb:0b:ce:
5f:0c:0f:fe:0a:89:a2:43:ae:22:04:c2:79:64:cb:19:00:9a:
82:39:d4:e8:bd:ce:2b:11:18:b7:07:0d:76:bb:fd:31:ba:57:
6f:99:77:24:d0:ad:4b:e3:0d:42:c0:19:a6:c1:1c:d3:a8:63:
35:63:bb:91:60:25:e3:d8:40:55:2a:af:d3:23:34:01:6e:ef:
b2:6b:02:0b:d7:b7:f3:66:d4:dd:13:62:1a:bf:e3:7b:c8:b0:
b8:fe:c3:96:5c:85:ee:6b:8a:77:90:5e:b7:7c:bc:9d:4f:0f:
3d:af:33:b3:66:55:2d:16:ec:ed:a9:0c:6c:f0:42:39:37:73:
f7:c3:7c:78:b2:1d:5a:c6:93:b5:4f:10:88:6c:94:01:a3:b3:
59:b2:2f:d2:3a:48:71:78:84:96:70:63:0e:2f:c0:f0:1b:23:
18:ac:56:3e:5a:1d:e2:44:75:f0:a4:74:ab:dd:b3:36:45:55:
f3:f1:01:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHlpY0R4f6lqe7uRPPgxcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOTZmYTc5OTY3ZTFhZWEwNDI2MDJmOTMyNDI4ODBhOTU0
MzkzOGIwHhcNMjUwNTEzMDMwMDU2WhcNMjUwNTE0MDMwMDU2WjAzMTEwLwYDVQQD
Eyg1YWMxZDk5NDBiMTcxNjZhMDdlMDkwZjY5NTA5MTRmMDdjMmNjMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApefcf3Y4VJdO8q5umcRjPv7Bwr8F
KuMPyrAfmLPGZb+cA8xAHvP8WSOoHRZjZ62n/QtnMxlfvlNXbYO/ssVApqLCuJuf
X21SkTN9RLzwFTzR70b9i7Q12uYvYdr2de/VA7N9zcdZY0kFmNrhGMyEBvkIe+PB
AkGl31vGF9ok61uztR7n6QdfQZ0QcfKkYp55HJmq6FYT3VXFo/0GDLl/11krS/9z
BPcKyV8qwQmrfXPmpZ6K9DKSZLp8OxM3KBQ4OkXDzYXSjWL2m4+aXkOO2Ea6ZhqK
vrGXaa9DXpaXDNqDA6o+s/pAL1mbw7rfvPv3doXd5ZHoKCecv/SrJf9vJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrB2ZQLFxZqB+CQ9pUJFPB8LMHSMB8GA1UdIwQY
MBaAFPKW+nmWfhrqBCYC+TJCiAqVQ5OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYt
OTQwOWQ5MTA5MGZhLzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYtOTQwOWQ5MTA5MGZh
LzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYKsSlqi
PWPOerUyjbeIz6Cj5+ReNB/IyOkepdLvm/1wA54IFMJBuUw9pdMvCMJA7idJ7SVZ
v+Nkvq05BgN6VTz+AthyuwvOXwwP/gqJokOuIgTCeWTLGQCagjnU6L3OKxEYtwcN
drv9MbpXb5l3JNCtS+MNQsAZpsEc06hjNWO7kWAl49hAVSqv0yM0AW7vsmsCC9e3
82bU3RNiGr/je8iwuP7DllyF7muKd5Bet3y8nU8PPa8zs2ZVLRbs7akMbPBCOTdz
98N8eLIdWsaTtU8QiGyUAaOzWbIv0jpIcXiElnBjDi/A8BsjGKxWPlod4kR18KR0
q92zNkVV8/EB9w==
-----END CERTIFICATE-----
Generated at Tue May 13 08:51:53 2025 by rpki-client