Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: r2z4eoYM084d5T1v+c9MR5KUU9v8zi1c4VkvRQveOiY=
Subject key identifier: 69:48:41:FD:EA:9B:56:4B:2E:2F:48:E5:BF:E3:3E:3F:1E:1B:A5:B8
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 0196BE5CD072D103C955F866C850B64CE9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0E25
Signing time: Sun 11 May 2025 08:01:15 +0000
Manifest this update: Sun 11 May 2025 08:01:15 +0000
Manifest next update: Mon 12 May 2025 08:01:15 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: UJ/aBCWhWOnzFG8l99j7pkA5bFXRgu4Kq8tA5bwj1vM=)
2: hQQYuiHw_ItGv9okdSC3BrwS4FY.roa (hash: S8OKUgEid94ZlJFGvJwDBd4eSV8gnkUcY4GxU2YajOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:d0:72:d1:03:c9:55:f8:66:c8:50:b6:4c:e9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: May 11 08:01:15 2025 GMT
Not After : May 12 08:01:15 2025 GMT
Subject: CN=694841fdea9b564b2e2f48e5bfe33e3f1e1ba5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:8a:c0:d5:72:45:3c:cb:9d:03:ee:9f:36:
a0:c7:f0:40:24:e2:c2:84:7b:02:b5:82:db:19:f7:
68:14:57:1b:0d:65:88:af:a5:a5:02:7f:bd:6f:ad:
57:dc:fc:29:b8:5c:53:fd:d8:2b:57:53:86:de:df:
0e:0d:08:4d:89:54:55:56:a4:c9:57:7e:d9:09:cc:
57:a2:58:55:49:0d:6d:3d:65:88:8f:73:da:11:7b:
69:9d:94:a1:ca:ad:1f:02:ba:54:fe:1c:be:e8:5f:
78:c0:01:af:36:f6:a2:3c:98:f2:bb:13:88:11:ad:
35:2d:20:1b:1c:2a:bc:2c:37:59:95:87:14:30:b6:
9c:af:35:ef:c2:90:88:7e:f2:c8:aa:a1:35:37:92:
b5:81:91:98:3a:d0:64:4c:d2:25:8f:8d:1e:1e:31:
d4:57:95:ff:ff:f0:65:db:72:ef:a0:c8:4a:d2:c5:
85:6e:db:0a:61:1e:65:d4:1f:b0:55:cb:3e:66:58:
01:52:eb:0c:99:a6:da:1c:96:03:36:33:7e:8e:0d:
d2:24:b9:c3:9b:e3:67:7f:a9:00:89:ce:fc:c2:97:
b5:12:ea:f9:04:a3:e2:a3:ef:3a:ca:2d:6a:a2:f9:
95:6d:b4:82:5c:14:a0:45:36:71:07:5b:34:af:85:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:48:41:FD:EA:9B:56:4B:2E:2F:48:E5:BF:E3:3E:3F:1E:1B:A5:B8
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:87:75:be:73:25:0e:32:db:eb:ea:5e:8a:ef:f4:04:ff:
00:a6:2d:65:b7:ca:ae:e8:c3:e6:02:7c:7a:64:e2:99:3b:7f:
c0:f8:08:b6:d6:35:e9:d3:7b:f8:ce:7e:cf:a1:3f:40:3f:db:
18:b5:a2:c2:27:01:5d:c9:b3:52:66:c8:bf:a7:aa:dd:78:40:
87:5b:03:1d:69:90:56:08:62:c2:2a:26:71:7f:f8:f1:25:b4:
2f:15:d9:aa:e2:4a:cf:fc:2c:6b:76:91:b7:c1:19:5a:bc:35:
52:41:70:c3:80:e2:a4:ab:a4:d3:74:30:9c:b9:e9:66:ed:20:
79:19:b6:22:09:c8:5e:f5:36:b4:7e:6d:5d:0b:7a:21:ad:51:
34:2d:02:8a:dc:8c:50:93:20:8f:c1:c2:c4:c4:f4:25:f3:39:
32:84:d1:4f:ea:ff:3d:ad:19:9c:9c:4d:36:4d:6e:3e:4f:55:
f4:ab:54:ac:34:e1:9b:02:1c:77:fa:c9:d1:2d:d5:35:9c:4e:
cb:c1:3d:48:9e:f9:9b:dd:38:39:a6:f2:47:f3:5e:ab:7d:38:
0a:e1:85:2e:f7:29:14:ff:be:ed:95:4d:32:d9:29:af:e1:e4:
2f:96:b9:5a:57:55:56:9f:7c:fa:b0:53:2f:ac:68:a7:17:9c:
13:93:ec:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XNBy0QPJVfhmyFC2TOnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDU5M2IxYzg3YjgxNzM5ZWM0MTkxMDI5NWJmMzg1ZjJj
OWE5OTIwHhcNMjUwNTExMDgwMTE1WhcNMjUwNTEyMDgwMTE1WjAzMTEwLwYDVQQD
Eyg2OTQ4NDFmZGVhOWI1NjRiMmUyZjQ4ZTViZmUzM2UzZjFlMWJhNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWuKwNVyRTzLnQPunzagx/BAJOLC
hHsCtYLbGfdoFFcbDWWIr6WlAn+9b61X3PwpuFxT/dgrV1OG3t8ODQhNiVRVVqTJ
V37ZCcxXolhVSQ1tPWWIj3PaEXtpnZShyq0fArpU/hy+6F94wAGvNvaiPJjyuxOI
Ea01LSAbHCq8LDdZlYcUMLacrzXvwpCIfvLIqqE1N5K1gZGYOtBkTNIlj40eHjHU
V5X///Bl23LvoMhK0sWFbtsKYR5l1B+wVcs+ZlgBUusMmabaHJYDNjN+jg3SJLnD
m+Nnf6kAic78wpe1Eur5BKPio+86yi1qovmVbbSCXBSgRTZxB1s0r4XMfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlIQf3qm1ZLLi9I5b/jPj8eG6W4MB8GA1UdIwQY
MBaAFPLVk7HIe4FznsQZEClb84XyyamSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTIt
OWI4ZDY4ZWU4N2ZjLzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTItOWI4ZDY4ZWU4N2Zj
LzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBuHdb5z
JQ4y2+vqXorv9AT/AKYtZbfKrujD5gJ8emTimTt/wPgIttY16dN7+M5+z6E/QD/b
GLWiwicBXcmzUmbIv6eq3XhAh1sDHWmQVghiwiomcX/48SW0LxXZquJKz/wsa3aR
t8EZWrw1UkFww4DipKuk03QwnLnpZu0geRm2IgnIXvU2tH5tXQt6Ia1RNC0CityM
UJMgj8HCxMT0JfM5MoTRT+r/Pa0ZnJxNNk1uPk9V9KtUrDThmwIcd/rJ0S3VNZxO
y8E9SJ75m904OabyR/Neq304CuGFLvcpFP++7ZVNMtkpr+HkL5a5WldVVp98+rBT
L6xopxecE5PsHw==
-----END CERTIFICATE-----
Generated at Sun May 11 16:04:55 2025 by rpki-client