Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: W4knYZ1cv0EOh0gJB9r0oa9MS+sg4ATCle+GBDNWM2M=
Subject key identifier: 3D:0D:7A:29:C9:5B:B3:A2:48:57:E9:31:5A:3B:1C:62:22:96:B3:79
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 0196CD2A762BB6624E1770B070C767078EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 112E
Signing time: Wed 14 May 2025 05:00:34 +0000
Manifest this update: Wed 14 May 2025 05:00:34 +0000
Manifest next update: Thu 15 May 2025 05:00:34 +0000
Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: JM/P0hiBcSZ2wfQjj/7CrJJri9mkS3XoBMXcmov2hHQ=)
2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:76:2b:b6:62:4e:17:70:b0:70:c7:67:07:8e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: May 14 05:00:34 2025 GMT
Not After : May 15 05:00:34 2025 GMT
Subject: CN=3d0d7a29c95bb3a24857e9315a3b1c622296b379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fc:54:30:5a:f0:88:d7:08:6c:a7:e5:ab:c0:
22:39:6e:f5:d0:68:e0:94:9f:f9:98:ae:80:1c:dc:
46:8e:90:7f:7c:19:a6:5a:7a:0f:36:83:05:72:e8:
aa:c6:73:d5:0d:94:ad:f7:1a:d4:19:39:97:eb:65:
b0:7e:b0:df:d5:83:e7:8f:29:19:12:5c:54:40:3f:
43:e8:a8:ce:95:fa:9b:9c:9c:d2:94:6d:de:be:da:
e3:94:fd:74:4a:e1:a9:d2:b0:96:11:02:87:89:8f:
9c:3a:c9:94:84:b4:e2:ab:6c:27:27:54:71:22:90:
fd:bf:b9:26:62:f1:03:4d:47:ca:0b:40:6d:9c:e7:
62:b7:78:96:cd:b5:a2:83:e6:61:d4:8b:dc:ba:ce:
f0:c9:f7:6d:c8:e6:7c:e4:72:70:98:22:51:45:82:
92:cb:50:d9:40:21:23:35:81:50:ac:17:ce:1a:1d:
e3:b5:2e:43:8a:10:33:f7:f9:2b:2f:e7:a7:f0:c9:
3f:86:b9:58:d2:08:8c:12:b5:b9:8a:53:58:30:ef:
49:df:98:2b:e2:f0:74:cf:0d:f6:14:27:f4:27:e8:
61:0f:bc:4a:91:f6:91:72:2b:65:e4:e5:06:0e:0a:
62:bb:de:25:5f:4a:b5:1a:25:bc:c3:87:5a:d8:b6:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0D:7A:29:C9:5B:B3:A2:48:57:E9:31:5A:3B:1C:62:22:96:B3:79
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:73:75:ba:3f:9d:fd:27:8f:1c:09:77:f8:f6:c7:0a:52:2b:
25:ce:b9:69:ff:b6:aa:24:a5:c3:83:2a:86:34:53:c5:59:94:
b6:7e:14:93:4c:66:2b:49:15:85:9b:b1:d0:2a:b4:6f:ed:a9:
b4:e5:04:22:34:fa:0e:b7:0a:b3:d3:19:2d:73:81:90:e3:1a:
d2:49:d6:a0:82:28:50:c2:0c:06:87:cd:31:80:da:70:f2:ec:
a1:5d:30:3d:3c:c7:76:bd:0c:b5:1f:ce:05:31:52:1a:87:8b:
b3:90:01:a9:2a:49:d1:ed:98:42:42:cf:31:5c:7a:86:c3:99:
ac:f8:13:fa:d0:25:05:26:55:b5:8f:34:c6:7e:b8:19:77:3f:
10:e2:a1:94:cd:76:39:4b:c2:05:de:86:5d:9e:44:38:32:f8:
34:a6:a3:e1:19:07:3b:c3:8a:3e:8a:b4:59:b2:d0:22:20:fb:
ef:f8:cc:65:44:97:a3:3c:84:ef:d6:67:36:97:50:7a:33:c7:
ca:51:0c:cb:a4:81:86:d2:9e:1d:0b:86:45:5d:aa:59:c0:90:
09:ba:64:e6:7a:3f:6c:f9:78:b6:be:3c:ec:6d:b7:20:87:78:
9b:d1:62:35:12:c2:96:d4:d6:9b:e5:ce:2f:2f:a1:cd:81:40:
d0:5d:1a:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNKnYrtmJOF3CwcMdnB46nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjQ2MzQ2ZGRiM2U2YmE2ZTg5MDAwNWI4ODE0OGQyZDZj
ZTk5NzEwHhcNMjUwNTE0MDUwMDM0WhcNMjUwNTE1MDUwMDM0WjAzMTEwLwYDVQQD
EygzZDBkN2EyOWM5NWJiM2EyNDg1N2U5MzE1YTNiMWM2MjIyOTZiMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PxUMFrwiNcIbKflq8AiOW710Gjg
lJ/5mK6AHNxGjpB/fBmmWnoPNoMFcuiqxnPVDZSt9xrUGTmX62WwfrDf1YPnjykZ
ElxUQD9D6KjOlfqbnJzSlG3evtrjlP10SuGp0rCWEQKHiY+cOsmUhLTiq2wnJ1Rx
IpD9v7kmYvEDTUfKC0BtnOdit3iWzbWig+Zh1Ivcus7wyfdtyOZ85HJwmCJRRYKS
y1DZQCEjNYFQrBfOGh3jtS5DihAz9/krL+en8Mk/hrlY0giMErW5ilNYMO9J35gr
4vB0zw32FCf0J+hhD7xKkfaRcitl5OUGDgpiu94lX0q1GiW8w4da2LYVsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0NeinJW7OiSFfpMVo7HGIilrN5MB8GA1UdIwQY
MBaAFPIkY0bds+a6bokABbiBSNLWzplxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUt
YjViYWNkZDA3NzlkLzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUtYjViYWNkZDA3Nzlk
LzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXN1uj+d
/SePHAl3+PbHClIrJc65af+2qiSlw4MqhjRTxVmUtn4Uk0xmK0kVhZux0Cq0b+2p
tOUEIjT6DrcKs9MZLXOBkOMa0knWoIIoUMIMBofNMYDacPLsoV0wPTzHdr0MtR/O
BTFSGoeLs5ABqSpJ0e2YQkLPMVx6hsOZrPgT+tAlBSZVtY80xn64GXc/EOKhlM12
OUvCBd6GXZ5EODL4NKaj4RkHO8OKPoq0WbLQIiD77/jMZUSXozyE79ZnNpdQejPH
ylEMy6SBhtKeHQuGRV2qWcCQCbpk5no/bPl4tr487G23IId4m9FiNRLCltTWm+XO
Ly+hzYFA0F0asw==
-----END CERTIFICATE-----
Generated at Wed May 14 06:53:13 2025 by rpki-client