Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier: sXPivghOtn1YaWKtyy+u6dSav4PHZMyj/GiGHhfAkzI=
Subject key identifier: F3:CA:93:7E:6F:A2:8D:79:44:6A:E1:30:78:53:97:6E:9F:0E:8E:12
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer: /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial: 0197B77BFBD441DEC45C2DA0E59D7415D061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number: 0596
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: jr6rEJW50M3HZvmgkmbDPQ1I+oHYHBHaAmJRF+73gj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fb:d4:41:de:c4:5c:2d:a0:e5:9d:74:15:d0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bffa2742563265037029a78f9317339053009c
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=f3ca937e6fa28d79446ae1307853976e9f0e8e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:25:06:8d:f4:fa:31:61:e0:e7:f6:3f:a9:
00:e6:2b:ce:ec:9c:a7:8d:5c:d4:e4:56:d8:7b:c0:
19:54:26:d5:9c:65:96:9f:22:58:c2:15:e8:0b:8f:
4b:89:c9:2c:c9:dc:22:64:f7:75:33:0b:ef:e2:5c:
93:20:f1:95:b9:28:5c:c7:80:19:33:5d:4c:f1:5b:
14:d4:ed:9e:13:94:97:09:8f:99:e9:f6:de:63:01:
ce:9b:93:7b:05:2d:49:ad:7d:43:13:b3:7a:89:46:
70:dd:1b:a4:40:4a:21:86:5e:e5:c1:a8:68:25:46:
22:9f:c0:19:f8:3b:0c:61:78:f6:ba:b0:a8:a6:7a:
82:f1:cc:7e:d2:92:32:e2:84:ab:65:c5:48:4e:c8:
5b:18:3a:ba:11:26:2e:92:1a:c4:8b:63:d6:52:75:
49:97:8e:5f:21:6c:31:5e:a0:93:fe:0f:8e:65:d9:
57:73:c2:99:10:be:2a:5b:40:34:8c:74:2a:a5:59:
fa:66:d1:da:a7:c1:0e:00:51:58:5e:76:65:63:73:
f4:3f:69:45:bd:50:7a:83:0a:ec:79:ab:d5:11:d3:
29:d0:a9:d5:76:33:83:65:3f:17:34:53:76:b5:b9:
80:e2:9d:83:68:80:d4:67:90:3f:dd:27:c5:5d:aa:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:93:7E:6F:A2:8D:79:44:6A:E1:30:78:53:97:6E:9F:0E:8E:12
X509v3 Authority Key Identifier:
keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b8:ee:ea:02:9a:f5:a9:56:89:d6:ce:8e:93:36:3d:62:5c:
74:cc:78:dc:d9:8a:e6:b9:5b:bf:a0:70:17:72:d6:05:bc:b4:
47:3b:86:b8:a2:61:c8:38:93:1f:03:ae:87:60:a6:86:97:ba:
3e:cb:8f:3a:05:c9:48:86:69:10:ba:cd:32:2c:31:4d:13:d4:
51:b4:23:a8:31:c8:de:07:c3:45:df:63:f5:f5:e0:11:e3:c8:
f1:87:97:6e:f5:05:50:db:fc:c0:4d:a5:92:00:27:70:42:7b:
ee:95:51:56:dc:03:db:05:cc:44:ca:44:41:31:3b:56:29:da:
e4:c3:3b:e1:12:1a:aa:c6:a6:b5:ea:8d:d4:a7:86:ba:71:7f:
09:1d:87:c9:45:02:53:2a:72:be:73:13:83:12:30:27:23:03:
6c:47:7a:29:30:ab:ab:ba:49:3a:9a:20:52:f6:1f:3a:33:61:
6c:12:6c:67:69:12:59:08:07:99:16:da:e9:5a:a5:e4:f5:16:
eb:f2:97:1b:08:f6:a1:77:68:24:48:70:91:70:17:e7:39:7b:
e6:75:ee:9b:b7:0e:c1:15:77:5e:99:eb:1e:60:11:4c:de:4e:
12:4f:e6:49:f8:7f:9c:9c:21:da:eb:9b:f1:5b:58:52:70:fa:
f1:62:e3:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/vUQd7EXC2g5Z10FdBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmZmYTI3NDI1NjMyNjUwMzcwMjlhNzhmOTMxNzMzOTA1
MzAwOWMwHhcNMjUwNjI4MTcwMDQ1WhcNMjUwNjI5MTcwMDQ1WjAzMTEwLwYDVQQD
EyhmM2NhOTM3ZTZmYTI4ZDc5NDQ2YWUxMzA3ODUzOTc2ZTlmMGU4ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs4lBo30+jFh4Of2P6kA5ivO7Jyn
jVzU5FbYe8AZVCbVnGWWnyJYwhXoC49LicksydwiZPd1Mwvv4lyTIPGVuShcx4AZ
M11M8VsU1O2eE5SXCY+Z6fbeYwHOm5N7BS1JrX1DE7N6iUZw3RukQEohhl7lwaho
JUYin8AZ+DsMYXj2urCopnqC8cx+0pIy4oSrZcVITshbGDq6ESYukhrEi2PWUnVJ
l45fIWwxXqCT/g+OZdlXc8KZEL4qW0A0jHQqpVn6ZtHap8EOAFFYXnZlY3P0P2lF
vVB6gwrseavVEdMp0KnVdjODZT8XNFN2tbmA4p2DaIDUZ5A/3SfFXarxhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPKk35voo15RGrhMHhTl26fDo4SMB8GA1UdIwQY
MBaAFPK/+idCVjJlA3App4+TFzOQUwCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NWNjZWItMTkyOC00MTY2LThjN2Yt
ZGU4NjZmYjA2NmQ3LzEvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NWNjZWItMTkyOC00MTY2LThjN2YtZGU4NjZmYjA2NmQ3
LzEvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubju6gKa
9alWidbOjpM2PWJcdMx43NmK5rlbv6BwF3LWBby0RzuGuKJhyDiTHwOuh2Cmhpe6
PsuPOgXJSIZpELrNMiwxTRPUUbQjqDHI3gfDRd9j9fXgEePI8YeXbvUFUNv8wE2l
kgAncEJ77pVRVtwD2wXMRMpEQTE7Vina5MM74RIaqsamteqN1KeGunF/CR2HyUUC
UypyvnMTgxIwJyMDbEd6KTCrq7pJOpogUvYfOjNhbBJsZ2kSWQgHmRba6Vql5PUW
6/KXGwj2oXdoJEhwkXAX5zl75nXum7cOwRV3XpnrHmARTN5OEk/mSfh/nJwh2uub
8VtYUnD68WLjIw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:18:06 2025 by rpki-client