Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
File: 8SRlvSRvIjEc6bBe60n3t5FLKgo.mft (raw, json)
Hash identifier: tbrslVObHzGXcJIpu/ZtlPDqYQj0xl4Yd2HooUhyjZQ=
Subject key identifier: 32:49:CA:C7:B5:40:1B:A8:A8:E1:29:2C:42:73:E0:BB:D4:61:03:00
Authority key identifier: F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
Certificate issuer: /CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Certificate serial: 0196BA11CC245581620D1D2EAD75DFF90411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 12:00:50 +0000
Manifest this update: Sat 10 May 2025 12:00:50 +0000
Manifest next update: Sun 11 May 2025 12:00:50 +0000
Files and hashes: 1: 8SRlvSRvIjEc6bBe60n3t5FLKgo.crl (hash: mITZGzN3n/Jm4rmMSdhlXdc4rS0b1vax2xzsUfBssAs=)
2: kWlbajLT3oWxqxE3gffCQHqCWHM.roa (hash: DZ3f9M7b382od72T/F6H5ByHy+dVO8wT6ZXIu3gfGcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:cc:24:55:81:62:0d:1d:2e:ad:75:df:f9:04:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Validity
Not Before: May 10 12:00:50 2025 GMT
Not After : May 11 12:00:50 2025 GMT
Subject: CN=3249cac7b5401ba8a8e1292c4273e0bbd4610300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:79:5b:bf:d1:3d:14:d5:38:3b:ac:6a:c7:
6c:9a:59:29:16:d5:1d:a1:e7:4b:7c:09:58:31:85:
d6:37:15:f2:94:9d:f5:dd:8c:fb:78:3e:d6:80:ec:
a2:e3:3d:f8:0d:43:fa:7f:91:9c:f7:b3:05:5e:ef:
c2:35:1a:01:da:e1:75:99:11:be:53:b7:18:27:da:
fe:03:40:f9:38:bf:dc:cc:60:10:c1:b1:38:87:7f:
65:91:d4:25:1f:a7:70:1c:6a:de:50:01:b4:9a:a2:
ff:c8:7a:c6:71:49:0f:e0:ea:73:b0:c1:36:68:91:
72:c6:b6:a3:c3:a2:47:fa:65:07:3b:a3:24:1b:8c:
e1:de:6d:3d:28:98:d6:61:ee:95:a8:9d:da:5f:ea:
5b:16:c0:7c:e6:39:1a:34:aa:8d:7e:97:47:6d:22:
53:ee:d0:71:46:52:c8:45:fe:e7:f2:b6:1c:21:bf:
51:ec:b6:5c:74:18:0a:6c:2e:91:92:3d:57:c5:5b:
8a:b1:66:02:bb:12:2b:cf:6c:64:7e:7a:e6:c0:70:
80:d9:08:a9:46:66:80:4e:b2:43:ba:fe:4d:2e:ea:
a0:0b:80:e8:4f:2a:fc:31:e8:67:5d:52:23:29:d4:
03:86:40:3a:b0:0b:fe:6c:50:29:e1:4f:fa:b3:ba:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:49:CA:C7:B5:40:1B:A8:A8:E1:29:2C:42:73:E0:BB:D4:61:03:00
X509v3 Authority Key Identifier:
keyid:F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:86:60:dc:b8:d9:d8:ae:0e:d1:59:9e:db:2b:61:a5:9e:ad:
ec:77:9d:a2:b7:cd:8a:d1:8b:00:f7:da:07:ff:57:f8:29:de:
01:23:b7:cf:7d:9f:31:de:96:e9:66:af:ac:8e:cf:61:60:26:
00:fe:c6:08:54:7d:b4:ca:f6:ab:df:e9:78:aa:fe:35:b6:ff:
08:67:ee:a5:44:5d:54:b4:85:e4:db:b0:3d:35:79:9e:35:82:
63:ed:28:fc:e2:f1:25:a6:e2:3e:85:54:34:c6:53:38:ea:12:
7e:bc:36:c6:c2:65:b0:5b:ef:c0:0c:df:bc:7f:b0:b4:bf:46:
a7:cd:2a:34:91:fb:eb:ed:e6:d0:ec:27:20:83:4c:24:aa:33:
3b:f6:0e:12:a7:1d:63:23:41:64:41:08:e5:3b:52:b5:7a:6e:
49:6c:ad:de:88:99:33:50:a3:bd:ba:d0:45:81:94:54:59:2b:
e0:ac:56:90:55:ad:a4:5d:e3:ca:59:85:c4:4f:38:64:62:48:
ba:68:7e:d4:8b:49:a5:f0:1b:11:c4:cf:ae:9b:a5:e4:60:9a:
d0:23:18:ca:00:76:db:65:08:d1:d4:06:b3:fa:67:91:bf:90:
94:0e:27:bc:d3:80:d9:86:b5:71:9f:be:8d:c8:e5:15:e7:21:
48:4a:ec:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6EcwkVYFiDR0urXXf+QQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMjQ2NWJkMjQ2ZjIyMzExY2U5YjA1ZWViNDlmN2I3OTE0
YjJhMGEwHhcNMjUwNTEwMTIwMDUwWhcNMjUwNTExMTIwMDUwWjAzMTEwLwYDVQQD
EygzMjQ5Y2FjN2I1NDAxYmE4YThlMTI5MmM0MjczZTBiYmQ0NjEwMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlp5W7/RPRTVODusasdsmlkpFtUd
oedLfAlYMYXWNxXylJ313Yz7eD7WgOyi4z34DUP6f5Gc97MFXu/CNRoB2uF1mRG+
U7cYJ9r+A0D5OL/czGAQwbE4h39lkdQlH6dwHGreUAG0mqL/yHrGcUkP4OpzsME2
aJFyxrajw6JH+mUHO6MkG4zh3m09KJjWYe6VqJ3aX+pbFsB85jkaNKqNfpdHbSJT
7tBxRlLIRf7n8rYcIb9R7LZcdBgKbC6Rkj1XxVuKsWYCuxIrz2xkfnrmwHCA2Qip
RmaATrJDuv5NLuqgC4DoTyr8MehnXVIjKdQDhkA6sAv+bFAp4U/6s7rouwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJJyse1QBuoqOEpLEJz4LvUYQMAMB8GA1UdIwQY
MBaAFPEkZb0kbyIxHOmwXutJ97eRSyoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNSbHZTUnZJakVjNmJCZTYwbjN0NUZMS2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NmZhNjgtZjJiMS00YWFmLWI1MGYt
OTFlMjdiOWNmYmE2LzEvOFNSbHZTUnZJakVjNmJCZTYwbjN0NUZMS2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NmZhNjgtZjJiMS00YWFmLWI1MGYtOTFlMjdiOWNmYmE2
LzEvOFNSbHZTUnZJakVjNmJCZTYwbjN0NUZMS2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4Zg3LjZ
2K4O0Vme2ythpZ6t7HedorfNitGLAPfaB/9X+CneASO3z32fMd6W6WavrI7PYWAm
AP7GCFR9tMr2q9/peKr+Nbb/CGfupURdVLSF5NuwPTV5njWCY+0o/OLxJabiPoVU
NMZTOOoSfrw2xsJlsFvvwAzfvH+wtL9Gp80qNJH76+3m0OwnIINMJKozO/YOEqcd
YyNBZEEI5TtStXpuSWyt3oiZM1CjvbrQRYGUVFkr4KxWkFWtpF3jylmFxE84ZGJI
umh+1ItJpfAbEcTPrpul5GCa0CMYygB222UI0dQGs/pnkb+QlA4nvNOA2Ya1cZ++
jcjlFechSErsHA==
-----END CERTIFICATE-----
Generated at Sat May 10 22:16:27 2025 by rpki-client