Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: sZtUuOaQoVwftxgehvv29HNBK7VzcZE18PjySqHhbMM=
Subject key identifier: D8:8D:01:37:05:CB:66:0B:33:07:C1:0E:36:27:83:17:62:9A:68:5E
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 0196B8C82067B16F62608793F9FAF0085C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0B75
Signing time: Sat 10 May 2025 06:00:45 +0000
Manifest this update: Sat 10 May 2025 06:00:45 +0000
Manifest next update: Sun 11 May 2025 06:00:45 +0000
Files and hashes: 1: EryZGhKHOKFejsNYtsHoCrBOwlI.roa (hash: XPrcWsidSTpQokDPJh6WTZK3lvnDmP0xxlT9T9iBNGQ=)
2: Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa (hash: N2JyPxT8+m5HQDRPSXJdJM2oBFZFnSgrTMkI9DghAaA=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: QqjncoH/ofxLthT3EKChgg/zH95g3/E1G/BTbb1o77M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c8:20:67:b1:6f:62:60:87:93:f9:fa:f0:08:5c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: May 10 06:00:45 2025 GMT
Not After : May 11 06:00:45 2025 GMT
Subject: CN=d88d013705cb660b3307c10e36278317629a685e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:54:42:54:c5:fe:1b:48:78:59:78:67:bd:
77:21:1d:82:cb:1a:ab:24:be:8f:ba:1b:b3:c9:58:
61:f4:94:53:6f:68:e5:a5:9c:d3:7a:45:46:66:db:
5d:5b:75:3f:e9:84:31:15:7b:50:2b:a9:c0:bb:ad:
c6:69:d0:d2:d2:a4:19:93:a5:17:b8:11:cf:91:2a:
ad:bc:33:74:0e:f8:e3:de:2d:7f:89:68:8b:c3:ac:
da:2c:22:78:ab:5e:9f:39:c0:16:be:34:7a:a8:3d:
f3:7c:88:30:bc:01:f5:cc:11:51:e6:87:90:b5:51:
c9:e2:5b:a8:e2:c6:48:31:6c:1c:76:6e:3e:33:57:
cb:9d:8f:35:ef:19:fa:16:2f:34:12:3f:96:46:04:
04:20:c2:d1:36:4b:3f:1d:64:3f:2b:29:d3:f8:ef:
36:d4:fd:dc:08:4b:fe:86:17:f9:cf:92:9e:b6:04:
cf:a0:9f:1d:3e:0c:e5:74:88:b6:6a:2a:ac:1f:59:
95:be:b3:fa:6f:82:20:53:a9:1f:ab:33:79:6c:f3:
8b:74:7b:3f:86:5b:eb:5d:8e:79:0c:03:22:29:cf:
ae:4f:f3:48:63:41:3a:ee:b0:66:a5:8d:53:69:f7:
62:20:09:91:cd:23:cb:ac:7a:1e:f2:c9:bb:77:1b:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8D:01:37:05:CB:66:0B:33:07:C1:0E:36:27:83:17:62:9A:68:5E
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5b:11:09:d7:86:74:f4:b2:f5:6a:24:9a:c8:ad:ed:e5:09:
92:53:9d:9d:28:4f:8a:66:cb:a1:1a:49:19:77:4f:90:22:d7:
bf:f4:0b:9e:b7:47:58:03:57:3f:cc:c8:e6:b7:ff:cd:27:de:
d3:27:93:ed:73:77:c1:fb:c8:cd:c4:19:8b:e0:c9:38:9d:8f:
49:2b:45:db:1f:5c:56:6a:ee:05:af:2f:da:a6:bb:8b:2d:16:
b0:33:d0:dc:bf:70:d2:ca:8e:10:46:ef:8d:d1:1e:a0:c6:be:
c5:98:d4:57:79:f3:50:6d:1e:93:91:ee:4f:18:54:41:0d:19:
1c:ff:cd:b8:28:dd:5c:24:f3:cb:8e:81:49:3d:99:91:91:c9:
e6:c5:cc:bc:73:87:76:56:d7:d1:5f:71:b5:ec:a6:e8:ba:83:
3e:70:3f:cb:10:d1:45:09:92:e7:01:13:f4:56:e4:78:92:34:
b3:d4:26:03:c1:1e:d3:a0:40:35:5c:6b:af:32:a1:6d:e8:61:
8b:a2:fe:16:01:0a:ad:b0:90:ab:d3:ad:cd:75:a8:7f:12:45:
cc:1c:9a:ae:e1:8a:d5:61:9f:17:67:3f:b0:14:dc:e9:93:6f:
b0:20:60:a4:18:f9:16:9a:dd:4e:d8:f5:6f:b8:53:77:7a:ae:
c6:9a:fc:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4yCBnsW9iYIeT+frwCFxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkN2QxY2IxMTQ5NGViMzg5OGYxMGQzZDYzNWJlNzVmMTZi
MmRjNTEwHhcNMjUwNTEwMDYwMDQ1WhcNMjUwNTExMDYwMDQ1WjAzMTEwLwYDVQQD
EyhkODhkMDEzNzA1Y2I2NjBiMzMwN2MxMGUzNjI3ODMxNzYyOWE2ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuONUQlTF/htIeFl4Z713IR2Cyxqr
JL6PuhuzyVhh9JRTb2jlpZzTekVGZttdW3U/6YQxFXtQK6nAu63GadDS0qQZk6UX
uBHPkSqtvDN0Dvjj3i1/iWiLw6zaLCJ4q16fOcAWvjR6qD3zfIgwvAH1zBFR5oeQ
tVHJ4luo4sZIMWwcdm4+M1fLnY817xn6Fi80Ej+WRgQEIMLRNks/HWQ/KynT+O82
1P3cCEv+hhf5z5KetgTPoJ8dPgzldIi2aiqsH1mVvrP6b4IgU6kfqzN5bPOLdHs/
hlvrXY55DAMiKc+uT/NIY0E67rBmpY1TafdiIAmRzSPLrHoe8sm7dxvKQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiNATcFy2YLMwfBDjYngxdimmheMB8GA1UdIwQY
MBaAFP19HLEUlOs4mPENPWNb518WstxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUt
NzY1OWJmODZhYzRjLzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUtNzY1OWJmODZhYzRj
LzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVsRCdeG
dPSy9Wokmsit7eUJklOdnShPimbLoRpJGXdPkCLXv/QLnrdHWANXP8zI5rf/zSfe
0yeT7XN3wfvIzcQZi+DJOJ2PSStF2x9cVmruBa8v2qa7iy0WsDPQ3L9w0sqOEEbv
jdEeoMa+xZjUV3nzUG0ek5HuTxhUQQ0ZHP/NuCjdXCTzy46BST2ZkZHJ5sXMvHOH
dlbX0V9xteym6LqDPnA/yxDRRQmS5wET9FbkeJI0s9QmA8Ee06BANVxrrzKhbehh
i6L+FgEKrbCQq9OtzXWofxJFzByaruGK1WGfF2c/sBTc6ZNvsCBgpBj5FprdTtj1
b7hTd3quxpr8Fg==
-----END CERTIFICATE-----
Generated at Sat May 10 12:20:20 2025 by rpki-client