Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: 0Ip3mtB4jVE5C5GLJZN0SeL3hMq67AE7FPeCq0wyn9A=
Subject key identifier: B1:7B:65:66:63:B4:E7:C7:F4:4F:8E:FC:20:E9:FE:7D:D0:18:A3:DA
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 0196A0887BBE5DEFFB586837C4542BE2B1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 13:00:21 +0000
Manifest this update: Mon 05 May 2025 13:00:21 +0000
Manifest next update: Tue 06 May 2025 13:00:21 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: GJGINOa2K4pLtBHfYp5cJXuA3khyHC9MJkZOw9xCwBM=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:7b:be:5d:ef:fb:58:68:37:c4:54:2b:e2:b1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: May 5 13:00:21 2025 GMT
Not After : May 6 13:00:21 2025 GMT
Subject: CN=b17b656663b4e7c7f44f8efc20e9fe7dd018a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:02:bb:a4:53:17:ca:54:bf:04:05:fb:77:
64:07:ea:12:ad:f0:d7:87:04:09:f6:3f:31:f8:08:
86:0d:82:86:f6:c6:48:a4:f5:02:9b:35:e8:9d:df:
62:71:42:64:51:b1:18:cd:b0:33:2e:31:09:5a:49:
3a:2e:fd:7c:7b:80:2b:59:43:37:73:9d:c7:9f:25:
db:2d:a4:98:c9:ef:72:2d:90:11:1c:61:23:25:6f:
0a:67:86:9c:3d:b1:bb:10:36:66:7c:fc:d4:6f:d0:
72:e4:fd:0a:f2:73:c0:11:e3:e2:e3:80:ba:b3:23:
f5:49:0b:2a:e5:a3:e6:8b:f9:ef:32:9b:4e:30:ca:
f1:18:1d:4e:10:19:d3:e0:ad:5b:de:be:f9:6b:d9:
24:e8:57:2b:0b:cc:b7:78:10:b9:92:08:2f:33:7d:
ec:a8:07:9a:62:97:0c:f5:39:c8:79:0c:e0:36:f1:
c0:67:0c:dd:f6:21:78:62:d3:03:d4:95:bf:b4:6a:
04:e7:de:a3:a4:6e:6d:65:77:c7:6f:68:de:48:42:
1f:19:17:ee:fe:a0:52:71:9b:bf:b5:76:0f:e4:74:
94:31:35:48:56:c6:68:82:94:cb:bf:41:95:ad:5d:
d0:ef:fc:a2:9b:d8:68:af:7b:16:22:50:5a:7b:f4:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:65:66:63:B4:E7:C7:F4:4F:8E:FC:20:E9:FE:7D:D0:18:A3:DA
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:33:3f:e8:53:81:5a:84:8d:63:61:ad:32:68:14:5e:05:00:
f5:a3:42:7d:d4:ff:f6:7e:b0:a8:01:8c:ef:f5:5b:b1:62:41:
21:fc:d9:53:69:4a:5f:39:d2:19:51:50:78:83:43:37:ae:cf:
dc:70:1a:6f:9b:72:03:08:35:39:9e:51:30:31:df:a3:3f:e9:
82:28:37:0c:45:10:c4:ec:fb:9d:e7:98:a1:b4:d1:bc:4d:ae:
98:49:b2:3a:d1:47:46:ee:ce:2c:88:e3:5d:70:4c:c2:58:16:
9a:0b:ca:79:57:d5:47:f2:29:da:46:e6:07:69:db:10:3c:a2:
c9:29:72:99:ff:0f:c3:24:d9:8f:db:1f:80:c4:c6:49:71:2b:
3f:f3:e1:df:6e:57:4c:4f:d3:63:99:74:1c:f7:99:f4:d3:cb:
32:ba:55:5a:52:23:02:d9:0a:82:15:8e:9e:39:de:54:32:ef:
f6:0d:72:62:40:a2:fa:af:f3:d9:07:8d:aa:36:ca:60:64:a6:
89:d3:9f:95:d2:dd:92:05:05:3b:54:17:ff:d8:db:0c:5d:36:
cf:6c:06:22:5a:f4:ac:ba:5e:3e:05:74:09:f1:f3:80:61:b2:
00:71:fa:d3:42:e1:8c:b2:c1:35:19:e7:24:41:d7:b1:71:32:
5e:d8:55:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiHu+Xe/7WGg3xFQr4rHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm
YTk5OGEwHhcNMjUwNTA1MTMwMDIxWhcNMjUwNTA2MTMwMDIxWjAzMTEwLwYDVQQD
EyhiMTdiNjU2NjYzYjRlN2M3ZjQ0ZjhlZmMyMGU5ZmU3ZGQwMThhM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFsCu6RTF8pUvwQF+3dkB+oSrfDX
hwQJ9j8x+AiGDYKG9sZIpPUCmzXond9icUJkUbEYzbAzLjEJWkk6Lv18e4ArWUM3
c53HnyXbLaSYye9yLZARHGEjJW8KZ4acPbG7EDZmfPzUb9By5P0K8nPAEePi44C6
syP1SQsq5aPmi/nvMptOMMrxGB1OEBnT4K1b3r75a9kk6FcrC8y3eBC5kggvM33s
qAeaYpcM9TnIeQzgNvHAZwzd9iF4YtMD1JW/tGoE596jpG5tZXfHb2jeSEIfGRfu
/qBScZu/tXYP5HSUMTVIVsZogpTLv0GVrV3Q7/yim9hor3sWIlBae/QsTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLF7ZWZjtOfH9E+O/CDp/n3QGKPaMB8GA1UdIwQY
MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt
YzI3YzRhNjEwYmQzLzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz
LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDM/6FOB
WoSNY2GtMmgUXgUA9aNCfdT/9n6wqAGM7/VbsWJBIfzZU2lKXznSGVFQeINDN67P
3HAab5tyAwg1OZ5RMDHfoz/pgig3DEUQxOz7neeYobTRvE2umEmyOtFHRu7OLIjj
XXBMwlgWmgvKeVfVR/Ip2kbmB2nbEDyiySlymf8PwyTZj9sfgMTGSXErP/Ph325X
TE/TY5l0HPeZ9NPLMrpVWlIjAtkKghWOnjneVDLv9g1yYkCi+q/z2QeNqjbKYGSm
idOfldLdkgUFO1QX/9jbDF02z2wGIlr0rLpePgV0CfHzgGGyAHH600LhjLLBNRnn
JEHXsXEyXthVjA==
-----END CERTIFICATE-----
Generated at Mon May 5 16:16:12 2025 by rpki-client