Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: B7823jgIx32N45FF+o5hEoalWsf8VtNYE70KqNQ5yfk=
Subject key identifier: 2F:81:17:45:C3:DC:06:55:A9:A4:CA:7C:84:F5:53:1D:47:9D:39:0A
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 0196A12DA48FA3430F6626E30A2B2E52D449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 1199
Signing time: Mon 05 May 2025 16:00:45 +0000
Manifest this update: Mon 05 May 2025 16:00:45 +0000
Manifest next update: Tue 06 May 2025 16:00:45 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: WTIYOErEeNj6y4VxcVEJWU/rtQ63nXrSOr/wlZdF1o4=)
2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:a4:8f:a3:43:0f:66:26:e3:0a:2b:2e:52:d4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: May 5 16:00:45 2025 GMT
Not After : May 6 16:00:45 2025 GMT
Subject: CN=2f811745c3dc0655a9a4ca7c84f5531d479d390a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:08:b5:e3:4e:57:f3:18:21:f5:4a:d9:6d:
83:3b:39:47:05:87:5a:04:d7:16:84:5f:5e:52:af:
16:0c:ee:db:be:40:e4:26:4b:fd:0c:c8:58:28:89:
02:45:39:7f:dd:09:4a:95:ad:58:e3:51:32:0d:5d:
22:8f:03:7d:a5:fb:27:3f:9a:21:ec:6b:b6:24:c6:
9d:0d:71:46:d7:94:7e:20:a3:eb:3e:71:86:e6:0e:
a2:5a:8b:c5:ea:3b:26:08:e5:0d:6b:af:0f:7c:31:
48:8b:84:39:04:7b:19:9d:12:45:6c:5b:03:1d:8f:
c9:f5:7e:a1:fa:98:a0:95:e1:b3:15:22:6c:75:7f:
95:09:26:4a:7a:08:aa:c8:87:f8:97:81:95:0f:52:
ab:07:cf:a5:14:08:67:bd:b7:64:2a:c1:f9:71:2a:
d0:25:e4:ce:bd:8b:db:47:88:62:71:58:da:e1:9a:
7f:a5:04:ac:cb:a8:ed:d2:54:c8:92:36:64:f9:10:
f8:62:82:1d:28:3d:bc:fd:c4:00:37:a6:9c:a4:19:
39:cd:cd:d6:0e:b8:23:16:56:80:eb:30:ea:fc:f5:
bd:a4:bc:9e:b7:5c:60:fc:ff:b6:0f:98:e0:2d:34:
6e:2b:c1:7d:2d:0c:5c:16:13:1d:21:c8:55:e0:b9:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:17:45:C3:DC:06:55:A9:A4:CA:7C:84:F5:53:1D:47:9D:39:0A
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:15:78:f8:47:97:79:2f:ec:a0:00:6e:46:15:3b:30:45:70:
b4:73:c9:58:b4:96:c0:ac:2f:52:b9:c8:e1:d3:de:00:03:74:
b9:93:d5:2e:6c:7e:e1:67:83:6b:fd:f6:c5:f6:51:a8:e1:1b:
17:2b:0f:4e:79:1b:f4:c1:18:cb:13:70:d9:03:5e:08:2a:15:
60:cc:ab:69:1d:ed:cb:0c:12:e8:39:0c:71:6e:2e:d7:f0:34:
0b:b4:c7:12:75:2b:42:95:a5:a4:94:10:22:46:54:34:7e:28:
b6:0b:c9:d2:71:c6:2a:95:34:37:a8:e7:4b:d2:68:17:2a:69:
1f:70:77:05:82:83:3e:9f:df:ee:b5:f3:7c:88:a1:9c:96:f4:
9c:1e:08:c4:a8:d3:a1:23:40:c3:58:da:d5:7d:55:1b:f9:48:
f4:07:8c:34:f7:52:da:c0:ff:2c:5f:99:cf:40:84:01:04:da:
bb:fc:bc:2c:1c:d0:76:c8:a6:d2:a6:7f:51:77:c0:2d:59:25:
a3:4a:6c:58:a3:8d:d5:35:3c:76:87:ad:49:3c:5e:d4:ac:96:
8e:f3:be:00:f5:21:a0:bd:3a:05:c5:62:e9:e3:8a:84:f7:fc:
49:57:ec:1a:4a:48:63:5f:90:96:80:26:dd:eb:43:d2:34:00:
62:a1:9e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahLaSPo0MPZibjCisuUtRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw
MGJhNjgwHhcNMjUwNTA1MTYwMDQ1WhcNMjUwNTA2MTYwMDQ1WjAzMTEwLwYDVQQD
EygyZjgxMTc0NWMzZGMwNjU1YTlhNGNhN2M4NGY1NTMxZDQ3OWQzOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qsIteNOV/MYIfVK2W2DOzlHBYda
BNcWhF9eUq8WDO7bvkDkJkv9DMhYKIkCRTl/3QlKla1Y41EyDV0ijwN9pfsnP5oh
7Gu2JMadDXFG15R+IKPrPnGG5g6iWovF6jsmCOUNa68PfDFIi4Q5BHsZnRJFbFsD
HY/J9X6h+pigleGzFSJsdX+VCSZKegiqyIf4l4GVD1KrB8+lFAhnvbdkKsH5cSrQ
JeTOvYvbR4hicVja4Zp/pQSsy6jt0lTIkjZk+RD4YoIdKD28/cQAN6acpBk5zc3W
DrgjFlaA6zDq/PW9pLyet1xg/P+2D5jgLTRuK8F9LQxcFhMdIchV4Lk9vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+BF0XD3AZVqaTKfIT1Ux1HnTkKMB8GA1UdIwQY
MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt
MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy
LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxV4+EeX
eS/soABuRhU7MEVwtHPJWLSWwKwvUrnI4dPeAAN0uZPVLmx+4WeDa/32xfZRqOEb
FysPTnkb9MEYyxNw2QNeCCoVYMyraR3tywwS6DkMcW4u1/A0C7THEnUrQpWlpJQQ
IkZUNH4otgvJ0nHGKpU0N6jnS9JoFyppH3B3BYKDPp/f7rXzfIihnJb0nB4IxKjT
oSNAw1ja1X1VG/lI9AeMNPdS2sD/LF+Zz0CEAQTau/y8LBzQdsim0qZ/UXfALVkl
o0psWKON1TU8doetSTxe1KyWjvO+APUhoL06BcVi6eOKhPf8SVfsGkpIY1+QloAm
3etD0jQAYqGeZg==
-----END CERTIFICATE-----
Generated at Tue May 6 01:29:34 2025 by rpki-client