Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
File: 8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json)
Hash identifier: JDMwa376ChW1v4Q8No3n/KUb9hankymdOlTQxR67A8g=
Subject key identifier: B3:35:44:C6:F6:43:EC:E4:D1:3A:11:F2:F5:3E:99:62:E9:D5:1E:8E
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial: 0197B70EFC07E80652DA23A68E4BB593DF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
Manifest number: 014B
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: XL4gy0ZDvWXaI9szrRv2mmWxNumQOdNUziM0J5UJbYg=)
2: sW8bwiGLsI7Vh96L_GlmvLQDJKY.roa (hash: zwPk0zZ0KWeH/lkVto00u9mSsOX9BDpbaWABcwD0yq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fc:07:e8:06:52:da:23:a6:8e:4b:b5:93:df:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=b33544c6f643ece4d13a11f2f53e9962e9d51e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:0c:8a:02:3e:17:6b:3b:ab:b3:bb:20:be:
85:47:c8:0f:31:fc:6b:aa:d1:ee:cd:d8:ad:83:4e:
9a:eb:62:f4:85:ed:a2:0a:95:d1:f3:e2:6c:08:e2:
97:78:b0:86:fd:2f:b0:bb:5b:8c:7c:b1:22:42:69:
ab:36:47:eb:3c:2f:8f:a5:4f:17:d9:34:a4:37:40:
7a:ba:df:a6:29:3f:fe:9c:f7:45:8a:25:aa:4c:8e:
06:80:1d:64:d6:ac:ec:f1:ae:32:62:95:30:66:fc:
a3:f8:39:4a:9c:35:05:d0:7a:0c:9d:92:ba:23:1e:
24:b4:37:37:77:cd:fc:57:9f:60:50:4c:9e:17:60:
64:44:e9:6a:f5:8d:26:cd:71:d3:0a:34:fc:2b:c6:
b0:5d:15:ae:cc:f5:28:f0:e4:72:dd:97:2d:0f:9b:
d2:29:bc:c4:28:8b:95:ab:57:e0:85:d4:fe:d9:65:
ed:b3:05:ac:fa:4c:47:37:92:07:e2:6c:e0:a2:98:
de:25:44:ad:9a:33:c9:b0:64:96:57:e2:8a:b6:1a:
d0:f0:8a:82:c2:00:07:b2:9e:08:f1:18:c0:e2:eb:
67:fb:2c:4b:51:2b:ed:6d:08:23:16:66:1d:a0:6d:
51:70:24:31:61:b5:5d:ff:4c:b8:e2:7d:2e:65:3f:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:35:44:C6:F6:43:EC:E4:D1:3A:11:F2:F5:3E:99:62:E9:D5:1E:8E
X509v3 Authority Key Identifier:
keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4f:59:11:bc:f2:af:93:f4:e5:21:5c:ac:bd:3a:1f:0f:bf:
ea:f7:85:e6:9f:58:2d:d0:0d:88:67:3b:cd:d0:34:dd:95:36:
fd:6a:8b:d8:42:da:b9:d6:32:db:0b:d7:a2:74:1b:b2:b3:22:
00:95:f8:bf:d1:b5:ff:94:a8:08:c8:4c:92:59:98:2c:7a:34:
d3:c5:80:9c:59:27:12:34:5c:ba:3f:dd:7b:d1:4f:46:9b:04:
09:70:21:1c:c3:19:b9:ef:31:ed:50:c2:ab:ec:d6:47:63:14:
2f:20:a2:6b:9c:2d:62:99:fc:a8:5c:b6:42:be:6a:fb:8c:b0:
e3:d9:97:c7:4c:5e:fb:bd:62:9c:13:67:76:cd:ac:50:b9:60:
7c:f0:c1:60:ee:c7:2a:cc:b9:fe:32:ad:41:7c:06:51:b7:10:
43:72:a4:dd:a7:ba:d4:00:1a:47:6c:c4:b3:2e:09:6e:5a:be:
4b:d1:a6:8d:c6:d0:fc:eb:f4:e2:2f:83:42:82:68:c0:c4:45:
fc:b0:c6:28:c4:b3:c3:b9:38:42:47:08:e7:7d:7c:86:d8:b4:
28:2d:1c:b0:10:22:1d:0e:b4:0d:d9:a0:9a:47:a9:f6:fd:e0:
55:c6:3b:69:54:4a:26:25:25:16:73:d4:37:8f:4a:69:29:b4:
a7:e2:20:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvwH6AZS2iOmjku1k9+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZTU3ZTM1MGQzYTZkYjhhNTgwNTU5Mjk5ZjBiOWQzOGJj
YzU5NTIwHhcNMjUwNjI4MTUwMTQxWhcNMjUwNjI5MTUwMTQxWjAzMTEwLwYDVQQD
EyhiMzM1NDRjNmY2NDNlY2U0ZDEzYTExZjJmNTNlOTk2MmU5ZDUxZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVkMigI+F2s7q7O7IL6FR8gPMfxr
qtHuzditg06a62L0he2iCpXR8+JsCOKXeLCG/S+wu1uMfLEiQmmrNkfrPC+PpU8X
2TSkN0B6ut+mKT/+nPdFiiWqTI4GgB1k1qzs8a4yYpUwZvyj+DlKnDUF0HoMnZK6
Ix4ktDc3d838V59gUEyeF2BkROlq9Y0mzXHTCjT8K8awXRWuzPUo8ORy3ZctD5vS
KbzEKIuVq1fghdT+2WXtswWs+kxHN5IH4mzgopjeJUStmjPJsGSWV+KKthrQ8IqC
wgAHsp4I8RjA4utn+yxLUSvtbQgjFmYdoG1RcCQxYbVd/0y44n0uZT9stwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM1RMb2Q+zk0ToR8vU+mWLp1R6OMB8GA1UdIwQY
MBaAFPHlfjUNOm24pYBVkpnwudOLzFlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAt
MGNkOWZhYTU2NTNlLzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAtMGNkOWZhYTU2NTNl
LzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkk9ZEbzy
r5P05SFcrL06Hw+/6veF5p9YLdANiGc7zdA03ZU2/WqL2ELaudYy2wvXonQbsrMi
AJX4v9G1/5SoCMhMklmYLHo008WAnFknEjRcuj/de9FPRpsECXAhHMMZue8x7VDC
q+zWR2MULyCia5wtYpn8qFy2Qr5q+4yw49mXx0xe+71inBNnds2sULlgfPDBYO7H
Ksy5/jKtQXwGUbcQQ3Kk3ae61AAaR2zEsy4Jblq+S9GmjcbQ/Ov04i+DQoJowMRF
/LDGKMSzw7k4QkcI5318hti0KC0csBAiHQ60Ddmgmkep9v3gVcY7aVRKJiUlFnPU
N49KaSm0p+Igyw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:24 2025 by rpki-client