Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
File: 8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json)
Hash identifier: NTuRrHTygJfT3LWgJ2vXLc7zGt07BpRW0ICCppeAFPc=
Subject key identifier: E1:56:0D:C4:5E:EA:33:7F:12:A3:CB:36:56:E2:B7:FE:53:1A:BA:91
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial: 0196BCA472171F7CB767248ED04CB749A5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
Manifest number: C8
Signing time: Sun 11 May 2025 00:00:15 +0000
Manifest this update: Sun 11 May 2025 00:00:15 +0000
Manifest next update: Mon 12 May 2025 00:00:15 +0000
Files and hashes: 1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: DCbUe/7fQPFEy2l0jkjIqbbqZPyqQ6tuMKMwVr2RDwM=)
2: PvgwRlUqx5l8W4N83zrKdHTwTaY.roa (hash: HJmAy6plt7EaRjG3H9OUj++QzEsZOYTODS8MTJferfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:72:17:1f:7c:b7:67:24:8e:d0:4c:b7:49:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Validity
Not Before: May 11 00:00:15 2025 GMT
Not After : May 12 00:00:15 2025 GMT
Subject: CN=e1560dc45eea337f12a3cb3656e2b7fe531aba91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:3f:87:82:b5:56:ff:00:e6:ca:4a:5c:b3:
4c:0e:ee:45:e0:32:d9:28:ef:53:c8:8b:17:ff:35:
6b:0a:dd:54:58:78:44:ab:c7:1c:18:68:a8:59:df:
ca:1a:16:5c:8a:89:37:82:24:e2:ba:fe:d0:ae:a2:
7e:2b:cc:88:59:32:aa:44:12:c0:17:c3:98:aa:98:
2f:af:ae:a6:22:58:64:72:ee:1e:96:c8:5e:12:70:
f2:9b:b6:e0:d7:dc:9e:b9:b6:53:d9:32:f5:ec:a0:
68:13:42:8c:2d:56:fa:18:9a:2b:31:62:81:02:a1:
02:5f:9a:e0:fe:18:ad:f1:b5:15:e4:10:6d:3d:a3:
6b:13:8d:04:90:f1:6c:36:17:53:84:75:1e:66:fb:
50:f0:a6:2c:0f:2c:14:3c:4d:af:db:fc:38:a5:28:
2d:da:33:b4:3b:c7:d8:2c:be:de:72:b7:23:ef:13:
26:71:b8:bf:32:7c:50:40:87:c8:c0:50:73:57:82:
7f:9e:67:61:30:ae:c4:91:0d:67:dc:92:aa:0c:fa:
87:c8:e9:88:fb:21:9b:db:80:9f:fb:98:75:ef:85:
e7:6a:99:63:19:94:03:dc:57:37:ad:38:0d:46:80:
0b:d1:24:86:5c:32:4f:ee:f6:22:ee:4b:0a:d1:30:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:0D:C4:5E:EA:33:7F:12:A3:CB:36:56:E2:B7:FE:53:1A:BA:91
X509v3 Authority Key Identifier:
keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:94:ac:3e:f5:b4:2c:68:8b:ba:3d:6d:78:c9:37:d3:3e:e6:
47:15:8d:c6:a6:36:f8:6e:42:f1:6d:25:47:0c:90:16:1f:0c:
86:46:d8:f7:7a:96:72:b0:29:d1:b2:c9:10:79:55:a0:63:29:
bd:08:f1:14:8c:24:81:f0:f4:87:9b:0c:14:47:0e:e1:4e:53:
74:2d:7c:b7:d1:84:06:e6:7b:0d:ad:b7:04:3f:a2:0d:98:9c:
0d:94:36:bd:24:b4:7d:04:95:72:c6:51:1d:c8:6b:47:64:f7:
16:e0:28:75:1c:0a:76:9d:39:53:c3:ed:f8:46:90:26:2c:1b:
cb:69:e6:fb:7d:df:a5:7b:f8:41:58:4e:80:4b:c0:0c:4c:eb:
fc:04:a1:07:2a:57:30:7a:c1:ac:ad:9d:c1:b4:3f:ac:98:21:
90:6a:35:70:ad:f5:66:12:9f:2c:75:7c:fc:87:e6:bd:0f:12:
66:d5:6d:db:ea:bf:7c:95:f7:38:2f:0b:e9:72:84:25:b7:92:
82:24:02:3c:98:60:c8:b8:dd:cf:23:c9:ee:f0:cd:fa:de:18:
19:e4:f9:49:6c:91:7e:25:3e:84:ce:8d:31:95:00:99:37:13:
5b:ed:53:af:8c:c4:64:8a:bb:97:34:7d:13:e6:a9:07:04:77:
d7:a9:3e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pHIXH3y3ZySO0Ey3SaW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZTU3ZTM1MGQzYTZkYjhhNTgwNTU5Mjk5ZjBiOWQzOGJj
YzU5NTIwHhcNMjUwNTExMDAwMDE1WhcNMjUwNTEyMDAwMDE1WjAzMTEwLwYDVQQD
EyhlMTU2MGRjNDVlZWEzMzdmMTJhM2NiMzY1NmUyYjdmZTUzMWFiYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv44/h4K1Vv8A5spKXLNMDu5F4DLZ
KO9TyIsX/zVrCt1UWHhEq8ccGGioWd/KGhZciok3giTiuv7QrqJ+K8yIWTKqRBLA
F8OYqpgvr66mIlhkcu4elsheEnDym7bg19yeubZT2TL17KBoE0KMLVb6GJorMWKB
AqECX5rg/hit8bUV5BBtPaNrE40EkPFsNhdThHUeZvtQ8KYsDywUPE2v2/w4pSgt
2jO0O8fYLL7ecrcj7xMmcbi/MnxQQIfIwFBzV4J/nmdhMK7EkQ1n3JKqDPqHyOmI
+yGb24Cf+5h174XnapljGZQD3Fc3rTgNRoAL0SSGXDJP7vYi7ksK0TBocwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFWDcRe6jN/EqPLNlbit/5TGrqRMB8GA1UdIwQY
MBaAFPHlfjUNOm24pYBVkpnwudOLzFlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAt
MGNkOWZhYTU2NTNlLzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAtMGNkOWZhYTU2NTNl
LzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5SsPvW0
LGiLuj1teMk30z7mRxWNxqY2+G5C8W0lRwyQFh8MhkbY93qWcrAp0bLJEHlVoGMp
vQjxFIwkgfD0h5sMFEcO4U5TdC18t9GEBuZ7Da23BD+iDZicDZQ2vSS0fQSVcsZR
HchrR2T3FuAodRwKdp05U8Pt+EaQJiwby2nm+33fpXv4QVhOgEvADEzr/AShBypX
MHrBrK2dwbQ/rJghkGo1cK31ZhKfLHV8/IfmvQ8SZtVt2+q/fJX3OC8L6XKEJbeS
giQCPJhgyLjdzyPJ7vDN+t4YGeT5SWyRfiU+hM6NMZUAmTcTW+1Tr4zEZIq7lzR9
E+apBwR316k+rg==
-----END CERTIFICATE-----
Generated at Sun May 11 10:35:15 2025 by rpki-client