Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: /0MPy7DAEmqx/CBDos6qZDKX+O/S6flzKYSI2CF3Exs=
Subject key identifier: 58:2D:49:70:E4:95:5B:E1:FA:95:CF:6B:D5:D1:10:1B:2F:AE:CA:0D
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 0196BAED57AFCFA967607FF680EAC3DC5384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 16:00:38 +0000
Manifest this update: Sat 10 May 2025 16:00:38 +0000
Manifest next update: Sun 11 May 2025 16:00:38 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: F7BsVjaq0exVHAYdQ4EEAFWL8ceKrLRT1HNOsJfUNj4=)
2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:57:af:cf:a9:67:60:7f:f6:80:ea:c3:dc:53:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: May 10 16:00:38 2025 GMT
Not After : May 11 16:00:38 2025 GMT
Subject: CN=582d4970e4955be1fa95cf6bd5d1101b2faeca0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:62:dc:ac:6e:59:7b:00:8f:fb:0d:1b:d7:
d9:22:eb:ba:00:8a:fa:e2:af:ed:91:a4:3f:4f:e4:
60:30:b0:75:34:f9:81:8c:b5:b4:13:b6:62:79:1d:
b3:10:8f:2b:be:4e:3b:06:be:d7:39:cf:a8:b4:e5:
5e:6d:40:b4:3a:85:56:70:66:b0:69:bd:dc:75:26:
da:38:2a:c5:6d:8f:31:ea:ee:d9:9f:cb:1b:f4:21:
a4:d9:aa:e3:6a:da:d7:d3:14:42:f4:b3:df:3c:de:
ed:08:44:28:20:e0:14:4e:46:5a:e4:13:4c:cb:41:
24:a2:61:fd:90:ca:06:a6:73:15:75:6a:26:4e:2d:
93:43:20:91:db:cc:53:f6:ab:65:82:6e:12:1a:1c:
f5:c2:18:0f:90:40:48:be:7f:2c:89:1c:6a:c8:6a:
0b:41:00:b2:52:c7:5f:b3:68:b5:bc:b2:6a:21:7d:
92:18:e4:e5:23:54:fb:18:f0:12:31:ca:b8:34:a2:
1f:8c:ed:a6:35:55:fe:bb:f0:7b:4e:80:76:4d:38:
a1:84:8c:d0:b5:16:94:fd:ca:52:b4:ea:2f:a1:d6:
b9:05:e1:7b:8f:0d:34:f4:d0:6d:02:5b:e9:4f:36:
f4:75:4d:d9:c4:17:8e:49:fd:35:41:ad:84:f1:85:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2D:49:70:E4:95:5B:E1:FA:95:CF:6B:D5:D1:10:1B:2F:AE:CA:0D
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f3:ec:97:f4:dd:f6:eb:28:fb:2a:60:17:0f:8a:e3:3b:68:
64:17:21:4f:51:51:61:1f:b3:21:e4:29:26:12:a5:1a:64:03:
f8:73:a3:ea:bf:08:68:38:61:ce:b3:2f:a7:67:12:c8:55:8d:
63:12:e5:9d:fe:b0:d3:14:2c:d6:b4:05:7d:19:a8:77:ab:2a:
01:3b:cf:c2:a5:a4:38:de:44:82:0a:27:f1:cb:b9:8e:48:ae:
3b:1b:ac:61:38:a2:82:b4:12:7a:82:c7:02:1a:f0:c8:06:51:
de:b7:05:c3:c7:c2:3e:27:6d:2f:05:f7:af:13:45:6e:6b:60:
27:69:38:fc:3c:60:67:95:51:f5:6c:49:a2:3d:1f:54:d6:b3:
18:f9:58:91:23:81:de:4e:5d:b9:d9:f3:b9:f8:06:8c:5a:2a:
a3:6e:e1:51:95:ef:bb:f2:66:38:8b:3e:fb:07:68:76:12:b8:
7b:fd:b2:b6:01:d3:65:8e:99:c5:33:14:d5:93:0f:31:d2:1d:
16:35:69:22:03:84:7e:22:24:f9:49:36:31:06:ed:b0:b3:f6:
5b:19:85:14:e9:2a:d8:b9:04:47:3d:a0:87:41:b9:cc:c7:3b:
b6:e5:f2:06:64:18:39:2f:ef:07:31:d1:6d:fc:9c:53:8c:0b:
3b:99:d4:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67Vevz6lnYH/2gOrD3FOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk
NTM2MDYwHhcNMjUwNTEwMTYwMDM4WhcNMjUwNTExMTYwMDM4WjAzMTEwLwYDVQQD
Eyg1ODJkNDk3MGU0OTU1YmUxZmE5NWNmNmJkNWQxMTAxYjJmYWVjYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq71i3KxuWXsAj/sNG9fZIuu6AIr6
4q/tkaQ/T+RgMLB1NPmBjLW0E7ZieR2zEI8rvk47Br7XOc+otOVebUC0OoVWcGaw
ab3cdSbaOCrFbY8x6u7Zn8sb9CGk2arjatrX0xRC9LPfPN7tCEQoIOAUTkZa5BNM
y0EkomH9kMoGpnMVdWomTi2TQyCR28xT9qtlgm4SGhz1whgPkEBIvn8siRxqyGoL
QQCyUsdfs2i1vLJqIX2SGOTlI1T7GPASMcq4NKIfjO2mNVX+u/B7ToB2TTihhIzQ
tRaU/cpStOovoda5BeF7jw009NBtAlvpTzb0dU3ZxBeOSf01Qa2E8YUq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgtSXDklVvh+pXPa9XREBsvrsoNMB8GA1UdIwQY
MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct
NmVlZmU1YjMzNWFhLzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh
LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/Psl/Td
9uso+ypgFw+K4ztoZBchT1FRYR+zIeQpJhKlGmQD+HOj6r8IaDhhzrMvp2cSyFWN
YxLlnf6w0xQs1rQFfRmod6sqATvPwqWkON5Eggon8cu5jkiuOxusYTiigrQSeoLH
AhrwyAZR3rcFw8fCPidtLwX3rxNFbmtgJ2k4/DxgZ5VR9WxJoj0fVNazGPlYkSOB
3k5dudnzufgGjFoqo27hUZXvu/JmOIs++wdodhK4e/2ytgHTZY6ZxTMU1ZMPMdId
FjVpIgOEfiIk+Uk2MQbtsLP2WxmFFOkq2LkERz2gh0G5zMc7tuXyBmQYOS/vBzHR
bfycU4wLO5nUgQ==
-----END CERTIFICATE-----
Generated at Sat May 10 18:28:45 2025 by rpki-client