Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: J8e7/8BUgkt2Uq8Rz9wNOX9oocCdO9t87nDbWmZ6qKc=
Subject key identifier: C5:4B:95:E7:BE:BE:55:E9:CD:3C:B4:EA:B3:96:95:95:80:35:1A:58
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 0196BFA5B243A79AFC79740D3FF43ED747CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 085F
Signing time: Sun 11 May 2025 14:00:29 +0000
Manifest this update: Sun 11 May 2025 14:00:29 +0000
Manifest next update: Mon 12 May 2025 14:00:29 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: Q94+U2R4oRhDCVDk0o5cECg6ZBaqWowOOf7NREYTuKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:b2:43:a7:9a:fc:79:74:0d:3f:f4:3e:d7:47:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: May 11 14:00:29 2025 GMT
Not After : May 12 14:00:29 2025 GMT
Subject: CN=c54b95e7bebe55e9cd3cb4eab396959580351a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:26:da:01:86:b4:b1:3a:8d:16:ef:06:48:
46:6c:e3:a7:6f:1c:b1:bf:aa:c7:d6:f0:39:62:bd:
e7:64:54:a6:98:b8:63:4a:96:e9:b2:14:f0:21:c2:
e9:9d:2e:8b:0f:ea:8d:5c:f7:74:2b:e8:0d:ee:f3:
04:4a:57:f8:a4:bf:c2:5d:6c:37:7b:7b:04:92:a9:
99:9b:1a:53:47:4e:1b:64:4a:52:9a:5e:c5:2c:26:
ee:4f:d4:1c:65:e2:8f:e1:1f:43:a3:57:3e:f0:cd:
32:25:62:1b:e5:6f:f0:a7:0c:7b:1a:27:41:ce:82:
d1:b8:4d:6a:aa:cf:e9:92:e9:57:57:31:5a:be:eb:
52:7d:02:b8:c5:9f:f2:bf:9e:7b:8f:db:5f:27:e4:
ad:46:ea:d8:42:de:1b:99:38:1c:bf:d9:40:69:76:
d8:f8:0f:04:6d:99:62:89:f0:58:c8:2e:24:ab:d7:
b5:65:1c:60:86:a9:dd:db:f6:1a:9a:fe:c4:26:d9:
e8:1b:89:8f:8d:27:2e:19:08:39:13:78:11:00:23:
ab:57:c2:d9:97:32:a7:c3:c5:20:c9:37:4b:86:52:
52:bf:bf:a7:44:89:68:5b:aa:03:c3:2c:5d:c8:d6:
a0:91:3c:45:97:d7:31:d9:d4:2c:09:06:5d:c8:66:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:95:E7:BE:BE:55:E9:CD:3C:B4:EA:B3:96:95:95:80:35:1A:58
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6b:fd:44:d1:9c:0c:df:24:a4:ec:97:ba:9e:4d:ad:a6:f7:
72:20:94:58:55:3c:01:04:9d:03:4b:6c:ec:c2:a9:ee:ed:59:
6b:3e:4c:25:5c:f4:b6:db:7a:d1:31:b1:75:b3:96:8e:fc:45:
28:c1:9f:d4:05:8a:9c:02:be:3d:ec:91:c1:5e:14:8f:61:1d:
c5:b7:68:c6:73:8c:57:cd:34:0c:ee:74:e4:eb:c8:00:2e:f7:
d5:49:47:a3:38:bf:dd:be:76:bf:17:55:40:00:d5:03:d3:04:
10:83:32:cb:3b:ce:97:5e:b9:c1:14:98:1c:84:99:44:e3:7e:
3a:db:d9:8a:05:fd:66:2f:0f:d4:f4:93:3f:74:f0:69:7c:14:
40:4b:30:00:1c:53:7e:42:8a:73:c6:cb:2a:5d:9b:1e:94:94:
15:66:26:9b:a4:63:a0:f5:a4:5f:18:b2:87:d0:40:6e:e9:97:
4e:06:d4:f8:7c:55:47:25:71:d4:c7:4a:8a:4f:21:44:8e:60:
06:75:3a:30:e4:69:3f:be:c5:2f:32:ae:af:f0:9e:ab:94:92:
98:10:59:fb:19:3e:ed:f0:35:56:58:97:99:bb:3d:8f:de:03:
42:bd:d9:55:c9:bb:09:7b:13:b4:9b:e0:a3:bb:fb:ff:47:1e:
1d:1d:9e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pbJDp5r8eXQNP/Q+10fMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjUwNTExMTQwMDI5WhcNMjUwNTEyMTQwMDI5WjAzMTEwLwYDVQQD
EyhjNTRiOTVlN2JlYmU1NWU5Y2QzY2I0ZWFiMzk2OTU5NTgwMzUxYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFUm2gGGtLE6jRbvBkhGbOOnbxyx
v6rH1vA5Yr3nZFSmmLhjSpbpshTwIcLpnS6LD+qNXPd0K+gN7vMESlf4pL/CXWw3
e3sEkqmZmxpTR04bZEpSml7FLCbuT9QcZeKP4R9Do1c+8M0yJWIb5W/wpwx7GidB
zoLRuE1qqs/pkulXVzFavutSfQK4xZ/yv557j9tfJ+StRurYQt4bmTgcv9lAaXbY
+A8EbZliifBYyC4kq9e1ZRxghqnd2/Yamv7EJtnoG4mPjScuGQg5E3gRACOrV8LZ
lzKnw8UgyTdLhlJSv7+nRIloW6oDwyxdyNagkTxFl9cx2dQsCQZdyGZhmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVLlee+vlXpzTy06rOWlZWANRpYMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2v9RNGc
DN8kpOyXup5Nrab3ciCUWFU8AQSdA0ts7MKp7u1Zaz5MJVz0ttt60TGxdbOWjvxF
KMGf1AWKnAK+PeyRwV4Uj2EdxbdoxnOMV800DO505OvIAC731UlHozi/3b52vxdV
QADVA9MEEIMyyzvOl165wRSYHISZRON+OtvZigX9Zi8P1PSTP3TwaXwUQEswABxT
fkKKc8bLKl2bHpSUFWYmm6RjoPWkXxiyh9BAbumXTgbU+HxVRyVx1MdKik8hRI5g
BnU6MORpP77FLzKur/Ceq5SSmBBZ+xk+7fA1VliXmbs9j94DQr3ZVcm7CXsTtJvg
o7v7/0ceHR2e7g==
-----END CERTIFICATE-----
Generated at Mon May 12 00:17:00 2025 by rpki-client