Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: HBFhuCqJ+6sqw+A0gBh9+KJV01FTAtshPoDotYdYIwM=
Subject key identifier: 0D:D7:AE:F9:C6:53:F8:29:95:61:A6:AC:FE:C9:56:C4:05:31:D7:9C
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 0196C081693363D36AE103A159243D2E5581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 18:00:28 +0000
Manifest this update: Sun 11 May 2025 18:00:28 +0000
Manifest next update: Mon 12 May 2025 18:00:28 +0000
Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: 7KlOZ48E7CIAksv1b0+Snks+G48gvXz6FayPUhFSYmU=)
2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:69:33:63:d3:6a:e1:03:a1:59:24:3d:2e:55:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: May 11 18:00:28 2025 GMT
Not After : May 12 18:00:28 2025 GMT
Subject: CN=0dd7aef9c653f8299561a6acfec956c40531d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:34:67:a1:e8:f3:4d:e6:a4:23:c0:07:6e:
36:d6:ae:94:42:d5:b5:18:ce:59:d6:55:d9:3c:00:
3c:4e:16:d3:d5:f9:e0:03:1d:b0:c4:f3:b9:84:b3:
0e:ae:4d:6d:91:73:85:6a:c6:5b:4c:bb:f6:59:bd:
5f:90:a5:97:49:f0:25:c9:ff:a1:6d:2a:11:12:22:
69:6f:ef:3f:8b:09:e4:7f:3a:f3:1c:50:38:85:4d:
57:e7:f1:07:76:4f:d5:2c:c1:ae:40:0c:be:82:2f:
69:07:69:ad:d7:f0:33:a0:ab:14:6c:1f:29:5a:b1:
ae:f4:d8:6c:5e:a2:35:96:53:aa:91:1c:1b:bd:62:
22:14:1b:97:3c:f5:3a:7a:9a:55:e6:34:9e:2e:3b:
b3:1a:dc:28:6f:ef:08:bf:7b:5d:4c:80:d4:7b:0b:
fe:35:c3:80:d6:f2:35:a3:fe:bf:70:e2:1f:73:7e:
43:55:27:c0:9c:4c:5b:87:29:39:7c:e3:c5:5b:8f:
65:a9:2c:08:e8:0d:a1:36:04:1b:2e:96:85:1e:a0:
11:55:ed:a2:f5:9c:6d:db:89:32:1c:f3:18:a7:97:
23:62:0c:86:a5:ed:19:42:79:eb:a6:94:c0:b6:fd:
6e:34:c7:0c:36:63:9e:74:fc:43:98:e1:5c:b0:16:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:AE:F9:C6:53:F8:29:95:61:A6:AC:FE:C9:56:C4:05:31:D7:9C
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b8:a5:98:1c:4d:48:ff:9d:01:59:52:08:49:36:3f:52:53:
61:c5:16:bf:d6:e1:d1:28:6b:5a:79:cc:7c:8a:8d:81:68:bd:
05:53:81:c1:74:10:9f:c4:b3:1d:1e:07:c4:09:83:5f:a5:d5:
d7:48:8e:91:28:d0:61:67:2a:08:43:ed:93:8c:3e:4e:58:82:
aa:cf:2e:49:7b:8c:98:13:61:fd:68:84:16:eb:c3:c9:7d:aa:
e2:24:19:5b:66:fc:69:00:31:aa:31:ac:54:8e:ae:80:76:39:
23:fa:c6:1c:38:d7:03:cf:0b:e2:69:c6:e3:48:54:1a:8e:6c:
0d:d3:eb:1e:44:67:d1:25:0b:57:97:94:77:44:9e:a4:38:4f:
58:cb:1b:45:1a:c8:78:79:4f:ba:29:18:17:c1:2f:a1:4b:61:
5f:55:4d:74:3b:82:23:45:09:89:eb:58:1c:af:4d:35:d1:ef:
b1:f9:1f:1c:28:b3:b6:91:8c:9f:94:be:e2:5b:a5:79:c6:c7:
89:26:4c:12:99:8e:3a:ff:67:14:e5:4b:66:a1:a3:42:ad:2a:
2c:c9:4f:99:bf:7a:c2:16:1a:49:7f:33:d2:7c:f2:ae:4a:88:
8d:7f:63:c6:4e:24:ef:bf:1e:50:a3:9e:9e:ac:c5:df:7e:89:
1a:9e:ff:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAgWkzY9Nq4QOhWSQ9LlWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZGU4ZWJkZGQwODQxNjNhOTBiOWFlNTAzOTdiMmRiNDlj
YjE3YWQwHhcNMjUwNTExMTgwMDI4WhcNMjUwNTEyMTgwMDI4WjAzMTEwLwYDVQQD
EygwZGQ3YWVmOWM2NTNmODI5OTU2MWE2YWNmZWM5NTZjNDA1MzFkNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ40Z6Ho803mpCPAB2421q6UQtW1
GM5Z1lXZPAA8ThbT1fngAx2wxPO5hLMOrk1tkXOFasZbTLv2Wb1fkKWXSfAlyf+h
bSoREiJpb+8/iwnkfzrzHFA4hU1X5/EHdk/VLMGuQAy+gi9pB2mt1/AzoKsUbB8p
WrGu9NhsXqI1llOqkRwbvWIiFBuXPPU6eppV5jSeLjuzGtwob+8Iv3tdTIDUewv+
NcOA1vI1o/6/cOIfc35DVSfAnExbhyk5fOPFW49lqSwI6A2hNgQbLpaFHqARVe2i
9Zxt24kyHPMYp5cjYgyGpe0ZQnnrppTAtv1uNMcMNmOedPxDmOFcsBbedQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3XrvnGU/gplWGmrP7JVsQFMdecMB8GA1UdIwQY
MBaAFPLejr3dCEFjqQua5QOXsttJyxetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGIt
YWYxYWMwZjAwNDE3LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGItYWYxYWMwZjAwNDE3
LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrilmBxN
SP+dAVlSCEk2P1JTYcUWv9bh0ShrWnnMfIqNgWi9BVOBwXQQn8SzHR4HxAmDX6XV
10iOkSjQYWcqCEPtk4w+TliCqs8uSXuMmBNh/WiEFuvDyX2q4iQZW2b8aQAxqjGs
VI6ugHY5I/rGHDjXA88L4mnG40hUGo5sDdPrHkRn0SULV5eUd0SepDhPWMsbRRrI
eHlPuikYF8EvoUthX1VNdDuCI0UJietYHK9NNdHvsfkfHCiztpGMn5S+4lulecbH
iSZMEpmOOv9nFOVLZqGjQq0qLMlPmb96whYaSX8z0nzyrkqIjX9jxk4k778eUKOe
nqzF336JGp7/AA==
-----END CERTIFICATE-----
Generated at Mon May 12 03:44:32 2025 by rpki-client