Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: JgMCgS6Ip7Bmqx2qFosvXmFRCUJ3Ni9GQ0DQvtRA/dw=
Subject key identifier: FF:04:04:AB:56:21:73:19:A3:95:E7:46:E2:8E:A3:F7:5D:0C:D9:0C
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 01969FAD2998D399B684D291F8C97E32C0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 09:00:47 +0000
Manifest this update: Mon 05 May 2025 09:00:47 +0000
Manifest next update: Tue 06 May 2025 09:00:47 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: 7/YPuFQIYOjICKSmXjdDB1bnQz2VAHU4B9HBJv4UL9g=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:29:98:d3:99:b6:84:d2:91:f8:c9:7e:32:c0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: May 5 09:00:47 2025 GMT
Not After : May 6 09:00:47 2025 GMT
Subject: CN=ff0404ab56217319a395e746e28ea3f75d0cd90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:2d:19:1c:b5:aa:9b:6f:b6:79:6d:fa:69:
de:86:5f:20:03:23:0d:4d:05:a8:46:68:f8:ce:93:
21:90:6e:d3:68:fa:2a:27:a8:b6:af:6b:fb:26:70:
74:bf:79:97:8c:44:0a:31:5f:02:62:91:9b:ae:97:
a8:d4:90:75:76:ea:41:a6:f0:23:15:a9:ed:c8:c9:
9e:d6:00:85:38:e8:e5:f3:30:00:53:b4:3b:d4:59:
0b:fd:b2:2d:5a:65:7e:35:ca:66:39:96:03:54:e1:
fa:14:45:51:48:37:74:00:d7:34:76:bd:48:f0:8d:
14:9d:39:4c:19:18:52:4a:0e:a4:45:7e:4e:1e:e7:
7f:52:bb:d4:89:ff:8b:1a:d4:18:2a:50:de:cc:ac:
70:a7:5b:52:f0:b6:78:d6:00:8b:27:7c:08:1a:1d:
3b:b0:ac:b0:22:32:7b:11:aa:ab:16:4b:5a:3b:f9:
65:68:de:81:fb:5f:b1:47:9d:82:54:c7:9d:ca:0e:
76:7e:12:df:63:6e:97:e5:db:a2:1b:0b:82:52:8d:
f4:1d:3c:7a:a0:aa:cc:b5:2d:4b:6a:fe:36:1b:62:
de:08:4e:47:5f:f2:ff:7e:a0:31:6b:01:f1:9f:78:
ca:3e:7b:f0:80:b4:6e:d7:b0:e4:a1:ba:fc:a9:1e:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:04:04:AB:56:21:73:19:A3:95:E7:46:E2:8E:A3:F7:5D:0C:D9:0C
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:28:60:bc:c4:e7:aa:6f:b5:5b:24:91:8e:88:a5:88:bb:3d:
d9:40:67:00:d6:bc:44:c2:54:b8:28:1f:ba:1c:6c:b0:3f:ad:
1f:a2:97:a4:39:ec:7f:05:b9:08:14:ea:a9:f6:38:90:0c:76:
76:6f:69:2d:63:68:6b:e2:e2:4b:a1:a4:5f:8b:ed:4b:93:26:
3d:cb:f6:24:07:b1:02:ba:ff:19:3e:41:ff:b8:23:28:f0:bf:
70:a5:1a:4a:59:48:c6:ee:55:c9:10:d0:56:17:89:b8:81:5c:
57:f1:a7:b4:9f:bb:ac:ac:d7:6b:9f:47:45:48:c2:c9:a1:89:
be:90:4c:18:bc:39:5b:dc:0e:a2:8e:45:fb:97:ac:b1:8e:c1:
bf:9d:53:e7:10:63:a4:22:2a:5b:3d:0b:67:c1:fa:0e:44:0d:
d5:bd:64:56:94:0f:19:2c:72:e7:25:75:a2:59:80:84:00:ab:
e5:f9:a8:0a:88:06:93:12:14:6b:31:d7:db:32:54:21:e3:64:
f2:39:3d:b9:4d:71:ba:d8:31:0e:ec:21:d5:06:10:f9:55:6e:
71:85:06:b7:69:d6:19:19:03:1d:ed:e7:f4:4a:12:5e:70:0a:
38:5f:d9:3d:d6:85:24:b3:7b:29:2c:b8:6e:75:06:d3:0c:a2:
68:a7:f0:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafrSmY05m2hNKR+Ml+MsDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUzMjI0ZTNlMzI5MjgxOTI2MjhkMjY0ODdkNTAwZjI3
MDc3NjUwHhcNMjUwNTA1MDkwMDQ3WhcNMjUwNTA2MDkwMDQ3WjAzMTEwLwYDVQQD
EyhmZjA0MDRhYjU2MjE3MzE5YTM5NWU3NDZlMjhlYTNmNzVkMGNkOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HUtGRy1qptvtnlt+mnehl8gAyMN
TQWoRmj4zpMhkG7TaPoqJ6i2r2v7JnB0v3mXjEQKMV8CYpGbrpeo1JB1dupBpvAj
FantyMme1gCFOOjl8zAAU7Q71FkL/bItWmV+NcpmOZYDVOH6FEVRSDd0ANc0dr1I
8I0UnTlMGRhSSg6kRX5OHud/UrvUif+LGtQYKlDezKxwp1tS8LZ41gCLJ3wIGh07
sKywIjJ7EaqrFktaO/llaN6B+1+xR52CVMedyg52fhLfY26X5duiGwuCUo30HTx6
oKrMtS1Lav42G2LeCE5HX/L/fqAxawHxn3jKPnvwgLRu17Dkobr8qR4GYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8EBKtWIXMZo5XnRuKOo/ddDNkMMB8GA1UdIwQY
MBaAFPAuMiTj4ykoGSYo0mSH1QDycHdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUt
ZmI5OTUzYzA3ZjE1LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUtZmI5OTUzYzA3ZjE1
LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPChgvMTn
qm+1WySRjoiliLs92UBnANa8RMJUuCgfuhxssD+tH6KXpDnsfwW5CBTqqfY4kAx2
dm9pLWNoa+LiS6GkX4vtS5MmPcv2JAexArr/GT5B/7gjKPC/cKUaSllIxu5VyRDQ
VheJuIFcV/GntJ+7rKzXa59HRUjCyaGJvpBMGLw5W9wOoo5F+5essY7Bv51T5xBj
pCIqWz0LZ8H6DkQN1b1kVpQPGSxy5yV1olmAhACr5fmoCogGkxIUazHX2zJUIeNk
8jk9uU1xutgxDuwh1QYQ+VVucYUGt2nWGRkDHe3n9EoSXnAKOF/ZPdaFJLN7KSy4
bnUG0wyiaKfwsg==
-----END CERTIFICATE-----
Generated at Mon May 5 12:04:02 2025 by rpki-client