Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier: 5CCllusfapgwJDTBNRcvJWbasZawKpC91Zqm1GjL7Ek=
Subject key identifier: 59:8A:16:9B:A4:56:84:E5:E3:1E:8F:6B:A9:E2:D6:1A:0A:70:DD:6B
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 0196B9A403CC61773AE63057D99C87707846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number: 01A5
Signing time: Sat 10 May 2025 10:00:55 +0000
Manifest this update: Sat 10 May 2025 10:00:55 +0000
Manifest next update: Sun 11 May 2025 10:00:55 +0000
Files and hashes: 1: XDaCGcZealj-spshbO6gPk6HDcA.roa (hash: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=)
2: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: bsmY4Wo2hCjDckro5mWm2lHYm1IPsnukoQuREeqS5Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:03:cc:61:77:3a:e6:30:57:d9:9c:87:70:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: May 10 10:00:55 2025 GMT
Not After : May 11 10:00:55 2025 GMT
Subject: CN=598a169ba45684e5e31e8f6ba9e2d61a0a70dd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:d5:4a:02:9c:0d:05:7c:cc:24:d0:fc:77:
58:bf:82:2f:ac:20:96:2a:60:fc:93:84:94:fb:f3:
b8:01:81:4c:c5:85:8b:2b:a7:5b:31:f1:45:87:32:
46:3a:c9:75:d2:87:d1:f0:bc:68:aa:60:90:bc:11:
2a:e5:06:80:c4:76:9f:89:4b:3b:74:09:0e:0a:14:
fe:08:f1:87:0d:9b:64:5c:6a:ce:bd:4b:c0:dc:77:
a1:8b:e6:0f:13:56:c9:12:d3:8b:aa:a9:bd:2c:33:
d6:1b:2e:c8:75:ce:46:76:a5:b9:aa:78:09:67:d8:
97:d8:ae:1c:e1:fc:d0:6b:61:f6:b7:5f:91:d0:bd:
97:cd:6a:2f:33:7f:a1:6c:1c:3d:41:6d:c4:ba:f8:
2c:18:5c:f2:9c:e1:62:6b:f1:4d:5a:f0:14:d6:4b:
58:19:d5:78:a4:4a:c2:37:d8:86:c3:5c:c8:05:f5:
7b:d5:6d:30:f1:ea:87:a3:92:dd:9d:99:93:4e:11:
80:65:3a:59:56:c6:63:8b:22:f5:d0:67:b0:16:97:
33:92:cc:35:cd:02:6e:e4:82:3d:f0:03:d7:e3:f2:
a3:ce:05:ac:19:de:1b:0f:60:4c:0e:60:e0:34:a6:
a8:38:1d:bb:f0:0e:34:6c:ba:c3:2d:7f:04:f7:2f:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:16:9B:A4:56:84:E5:E3:1E:8F:6B:A9:E2:D6:1A:0A:70:DD:6B
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9e:e2:f2:2a:35:56:74:d4:ac:9f:0e:0c:17:c9:6e:c0:36:
a9:5e:10:16:5d:5f:44:74:cb:03:92:40:25:61:13:0b:13:c9:
3b:c1:b5:18:85:b2:0d:9a:bb:45:6e:7b:ee:69:ec:e2:0e:76:
0d:f1:fc:b9:8e:f7:3a:c0:f1:8e:20:4a:45:4f:1f:2d:b6:8d:
ad:6a:ea:bb:3a:39:59:10:6c:38:10:d9:ca:c6:d2:6e:da:95:
89:b0:78:80:c3:90:04:ae:f6:80:09:42:80:9f:44:39:32:15:
ba:67:26:82:3b:02:9d:00:71:0b:bd:5c:0c:58:63:0a:06:82:
db:44:b1:22:04:18:57:df:df:32:0f:62:5e:f3:e4:8d:06:11:
97:35:0e:d4:68:e1:d7:2a:77:4f:de:4f:a4:62:56:df:28:86:
85:0f:71:43:87:42:87:d4:4c:58:31:0c:a5:2e:1d:6c:83:92:
5a:fa:bc:ad:aa:b1:c4:cc:b6:3c:97:48:02:cf:bb:78:6e:95:
ff:1d:e4:7f:81:1b:aa:a0:c5:e4:28:b3:ae:fb:3d:60:e3:44:
91:ca:7b:45:28:f4:ac:77:9e:ba:a5:53:e6:42:88:db:01:33:
42:0d:08:e7:7f:b7:be:62:91:b6:be:a8:72:ee:06:c5:03:72:
21:5a:77:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5pAPMYXc65jBX2ZyHcHhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2FiM2I2ZGNmY2JkYWZkNzYzMTEwZjg2NmE4MjgxNWRl
YTQ0NjMwHhcNMjUwNTEwMTAwMDU1WhcNMjUwNTExMTAwMDU1WjAzMTEwLwYDVQQD
Eyg1OThhMTY5YmE0NTY4NGU1ZTMxZThmNmJhOWUyZDYxYTBhNzBkZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxPVSgKcDQV8zCTQ/HdYv4IvrCCW
KmD8k4SU+/O4AYFMxYWLK6dbMfFFhzJGOsl10ofR8LxoqmCQvBEq5QaAxHafiUs7
dAkOChT+CPGHDZtkXGrOvUvA3Hehi+YPE1bJEtOLqqm9LDPWGy7Idc5GdqW5qngJ
Z9iX2K4c4fzQa2H2t1+R0L2XzWovM3+hbBw9QW3EuvgsGFzynOFia/FNWvAU1ktY
GdV4pErCN9iGw1zIBfV71W0w8eqHo5LdnZmTThGAZTpZVsZjiyL10GewFpczksw1
zQJu5II98APX4/KjzgWsGd4bD2BMDmDgNKaoOB278A40bLrDLX8E9y9fdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmKFpukVoTl4x6Pa6ni1hoKcN1rMB8GA1UdIwQY
MBaAFIvKs7bc/L2v12MRD4ZqgoFd6kRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAt
ZjJjODkyYzJkYzdkLzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAtZjJjODkyYzJkYzdk
LzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmp7i8io1
VnTUrJ8ODBfJbsA2qV4QFl1fRHTLA5JAJWETCxPJO8G1GIWyDZq7RW577mns4g52
DfH8uY73OsDxjiBKRU8fLbaNrWrquzo5WRBsOBDZysbSbtqVibB4gMOQBK72gAlC
gJ9EOTIVumcmgjsCnQBxC71cDFhjCgaC20SxIgQYV9/fMg9iXvPkjQYRlzUO1Gjh
1yp3T95PpGJW3yiGhQ9xQ4dCh9RMWDEMpS4dbIOSWvq8raqxxMy2PJdIAs+7eG6V
/x3kf4EbqqDF5Cizrvs9YONEkcp7RSj0rHeeuqVT5kKI2wEzQg0I53+3vmKRtr6o
cu4GxQNyIVp3YA==
-----END CERTIFICATE-----
Generated at Sat May 10 20:04:31 2025 by rpki-client