Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: YsHhGplW/O21nO4BZO7QJgfyMKb527lp2HCphoJQ53Q=
Subject key identifier: 8A:1E:2A:7E:46:96:24:9E:55:E6:5B:BC:E2:E9:E9:55:32:6F:36:61
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0196BB245423979E7FB5092FD59BCA0734F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1538
Signing time: Sat 10 May 2025 17:00:42 +0000
Manifest this update: Sat 10 May 2025 17:00:42 +0000
Manifest next update: Sun 11 May 2025 17:00:42 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: IRy1k8BEu8henEGQGIY+O3AFuAjnN29G7mLocB2xRGY=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:54:23:97:9e:7f:b5:09:2f:d5:9b:ca:07:34:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: May 10 17:00:42 2025 GMT
Not After : May 11 17:00:42 2025 GMT
Subject: CN=8a1e2a7e4696249e55e65bbce2e9e955326f3661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:29:3b:14:73:97:a3:cf:8c:b5:99:b3:fa:
b2:e2:c7:6f:2c:e5:c6:7e:6c:77:14:20:58:cc:f2:
cb:9d:6e:74:f1:3c:c1:3e:73:93:b5:42:4d:c9:e2:
7e:02:9f:7f:0b:1d:1d:a2:4f:09:8c:51:1d:e2:b8:
f3:f5:03:e0:ad:5b:9d:ab:55:37:35:70:7d:28:95:
d9:08:ec:a1:f5:b6:00:e1:35:93:91:ab:99:8b:0d:
8f:03:3e:b1:92:79:bd:33:16:2b:4f:24:65:1e:a3:
31:15:dc:1d:35:fc:83:91:80:12:9a:98:16:0d:3a:
10:38:6b:ee:55:e2:4d:a9:a1:b4:bd:a8:be:f0:22:
14:92:dc:ca:b9:3f:5e:74:26:03:60:bd:fe:9b:9d:
0c:b1:31:9d:9a:85:f6:9f:8b:ef:88:b7:c0:36:4f:
f9:ac:e6:43:04:e3:8b:45:79:5e:6c:d5:dd:2d:f0:
8a:1c:d9:35:cb:ad:79:15:7c:e4:b5:ad:83:64:8e:
b5:59:5a:7f:8a:88:92:96:93:61:fe:2d:6a:d1:a7:
7c:1a:ec:e0:03:bd:8e:78:7f:32:c0:b5:7c:ab:71:
c7:31:14:e2:96:65:83:eb:4e:36:82:9b:17:be:fc:
6f:af:62:9b:78:cb:96:5c:f5:e3:74:b5:ee:ac:6a:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:2A:7E:46:96:24:9E:55:E6:5B:BC:E2:E9:E9:55:32:6F:36:61
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e7:e9:33:25:f1:a1:39:0e:29:5a:07:d8:d3:8f:51:fe:19:
38:4a:1f:3b:65:a2:86:1a:06:ef:2a:86:87:59:c2:4e:f0:df:
e3:a8:e9:f3:af:29:67:a0:8b:e7:68:16:ec:db:00:b5:a8:3c:
80:8d:3e:56:05:13:eb:33:89:f5:cc:6d:5b:29:e8:03:ce:6e:
48:93:1c:a9:33:50:6f:7f:66:d0:58:a5:40:55:1c:ec:67:9e:
83:88:9b:01:16:48:0f:8d:8a:05:fb:ad:5d:60:13:91:de:b1:
f4:40:5e:18:b1:0a:d6:ef:36:fc:a1:96:80:cf:f6:66:63:4d:
00:ae:11:a2:a3:af:98:3b:ea:5d:65:f5:ec:cd:69:6e:c4:3d:
cc:9b:e5:de:e9:99:fc:20:c7:13:71:99:54:94:57:71:0a:9c:
9a:b2:62:59:ee:51:16:f2:9e:4d:08:31:e8:43:96:12:50:de:
e5:3a:26:2a:41:24:ea:e1:3f:fc:12:d2:36:94:45:9f:96:42:
db:89:44:3d:ca:71:4a:f3:cf:f1:d4:c7:72:40:85:ae:3c:9c:
f8:9f:72:11:d6:20:f3:9d:55:9d:95:77:97:19:3b:08:a6:0e:
15:14:55:cf:a5:20:07:03:6f:23:49:89:bb:41:72:63:56:bb:
60:89:d1:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7JFQjl55/tQkv1ZvKBzTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh
MWQwMzQwHhcNMjUwNTEwMTcwMDQyWhcNMjUwNTExMTcwMDQyWjAzMTEwLwYDVQQD
Eyg4YTFlMmE3ZTQ2OTYyNDllNTVlNjViYmNlMmU5ZTk1NTMyNmYzNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzokpOxRzl6PPjLWZs/qy4sdvLOXG
fmx3FCBYzPLLnW508TzBPnOTtUJNyeJ+Ap9/Cx0dok8JjFEd4rjz9QPgrVudq1U3
NXB9KJXZCOyh9bYA4TWTkauZiw2PAz6xknm9MxYrTyRlHqMxFdwdNfyDkYASmpgW
DToQOGvuVeJNqaG0vai+8CIUktzKuT9edCYDYL3+m50MsTGdmoX2n4vviLfANk/5
rOZDBOOLRXlebNXdLfCKHNk1y615FXzkta2DZI61WVp/ioiSlpNh/i1q0ad8Guzg
A72OeH8ywLV8q3HHMRTilmWD6042gpsXvvxvr2KbeMuWXPXjdLXurGrHBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoeKn5GliSeVeZbvOLp6VUybzZhMB8GA1UdIwQY
MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+fpMyXx
oTkOKVoH2NOPUf4ZOEofO2WihhoG7yqGh1nCTvDf46jp868pZ6CL52gW7NsAtag8
gI0+VgUT6zOJ9cxtWynoA85uSJMcqTNQb39m0FilQFUc7Geeg4ibARZID42KBfut
XWATkd6x9EBeGLEK1u82/KGWgM/2ZmNNAK4RoqOvmDvqXWX17M1pbsQ9zJvl3umZ
/CDHE3GZVJRXcQqcmrJiWe5RFvKeTQgx6EOWElDe5TomKkEk6uE//BLSNpRFn5ZC
24lEPcpxSvPP8dTHckCFrjyc+J9yEdYg851VnZV3lxk7CKYOFRRVz6UgBwNvI0mJ
u0FyY1a7YInRvw==
-----END CERTIFICATE-----
Generated at Sun May 11 01:46:03 2025 by rpki-client