Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: 4O6NCeiBX6FaMTcPt+xO8FEHujVhTLVSfRLi4HN0ovw=
Subject key identifier: 58:C6:DE:28:19:11:39:62:94:64:2D:6A:32:52:A7:E3:C4:90:79:BE
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 0196BDB76570FF6A552915BD56A519FDFEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 1075
Signing time: Sun 11 May 2025 05:00:34 +0000
Manifest this update: Sun 11 May 2025 05:00:34 +0000
Manifest next update: Mon 12 May 2025 05:00:34 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: zxzN1pYMG6X3wE3orNWfMaiQUQtkwksozx4LDHaI/Nw=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:65:70:ff:6a:55:29:15:bd:56:a5:19:fd:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: May 11 05:00:34 2025 GMT
Not After : May 12 05:00:34 2025 GMT
Subject: CN=58c6de281911396294642d6a3252a7e3c49079be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:a2:ef:f4:ee:a0:8e:56:21:0e:c2:87:9f:
b9:41:dd:c2:1b:26:9c:81:4f:54:e1:c6:67:73:b0:
66:74:6f:ed:76:0d:95:7d:1b:c8:b5:b2:e3:55:84:
34:43:25:37:1f:9a:52:4b:f9:8a:27:1e:ec:0f:b7:
b6:ff:2d:cc:71:ba:d3:82:bd:b4:34:48:a1:7e:71:
21:1a:92:c4:d6:1e:bb:6e:90:6f:35:f0:89:e1:5e:
8d:59:48:48:cd:ff:62:0d:86:31:69:e0:c9:3f:b4:
ae:4f:39:dd:a8:bc:f8:cc:d2:fc:8a:39:11:a3:e2:
6e:3e:42:0b:e6:35:05:d6:e5:81:c5:a5:18:68:7f:
75:43:ae:bb:0a:1f:94:5c:93:b7:b4:7a:72:40:8d:
b5:f9:2b:01:3d:f0:ce:32:32:dd:b2:01:fd:63:38:
41:83:60:6b:78:36:ca:1a:bb:5b:01:2b:e6:cb:df:
38:c5:74:a4:0c:b2:a9:d1:64:00:d8:90:81:cb:99:
1c:4b:0a:fe:c0:10:79:20:91:6a:fc:89:3c:d5:c9:
06:e7:24:6b:2e:ee:4c:3d:cf:55:5f:a0:d9:8c:2e:
ee:96:31:35:f1:2f:30:97:06:8c:1b:12:e5:18:f9:
71:1f:96:0a:f8:58:63:02:cb:f7:f0:7f:59:6d:cd:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C6:DE:28:19:11:39:62:94:64:2D:6A:32:52:A7:E3:C4:90:79:BE
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6c:d8:34:ef:a8:27:46:72:44:66:2d:4c:86:c8:2c:cf:70:
ef:d0:ca:fb:68:1a:24:93:a9:18:a3:03:62:66:bd:53:c4:9e:
4d:77:f6:58:ee:dc:01:46:22:3b:54:50:67:ad:7a:45:63:95:
a5:82:cc:3c:03:24:12:60:9f:22:1a:1b:19:aa:d8:8b:fa:4b:
38:76:2b:1e:8f:50:ac:f0:c9:da:a5:4e:c5:c5:ad:63:be:6e:
9d:13:08:5a:c9:01:c4:20:2b:db:66:3a:8a:89:14:b2:a2:77:
2f:b2:69:14:0d:4d:dd:a2:86:3c:b6:56:4b:0f:e8:32:26:51:
f5:21:5c:bd:fe:d5:19:9c:1a:cf:dc:34:c2:b6:59:b0:c7:53:
68:fe:9e:ec:a6:a5:a6:58:3a:9b:5b:5f:c7:28:61:19:f2:bf:
72:16:13:4b:4b:d4:5d:dd:ae:93:71:10:ab:00:8c:c8:38:1e:
fd:b1:f2:e7:93:08:8c:d8:9f:89:25:c5:1a:6f:21:c1:db:90:
09:42:ae:2e:36:7d:4d:92:a1:6d:a2:53:81:bf:f2:ef:03:3c:
5e:cb:ae:6a:31:59:e3:5c:10:84:8f:75:fb:ba:7c:6a:e7:f8:
b1:09:0a:0b:1b:08:a9:7e:de:22:ba:55:d5:15:fa:7f:19:5b:
aa:5b:cf:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9t2Vw/2pVKRW9VqUZ/f7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYjI4ZDZhYzZlYzQwZGZiMjJmOTZmN2I1NTYxNjljMDQ5
OTAxMzcwHhcNMjUwNTExMDUwMDM0WhcNMjUwNTEyMDUwMDM0WjAzMTEwLwYDVQQD
Eyg1OGM2ZGUyODE5MTEzOTYyOTQ2NDJkNmEzMjUyYTdlM2M0OTA3OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXGi7/TuoI5WIQ7Ch5+5Qd3CGyac
gU9U4cZnc7BmdG/tdg2VfRvItbLjVYQ0QyU3H5pSS/mKJx7sD7e2/y3McbrTgr20
NEihfnEhGpLE1h67bpBvNfCJ4V6NWUhIzf9iDYYxaeDJP7SuTzndqLz4zNL8ijkR
o+JuPkIL5jUF1uWBxaUYaH91Q667Ch+UXJO3tHpyQI21+SsBPfDOMjLdsgH9YzhB
g2BreDbKGrtbASvmy984xXSkDLKp0WQA2JCBy5kcSwr+wBB5IJFq/Ik81ckG5yRr
Lu5MPc9VX6DZjC7uljE18S8wlwaMGxLlGPlxH5YK+FhjAsv38H9Zbc0HtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjG3igZETlilGQtajJSp+PEkHm+MB8GA1UdIwQY
MBaAFPCyjWrG7EDfsi+W97VWFpwEmQE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzIt
NDc0NjU5ZWRiMzYxLzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzItNDc0NjU5ZWRiMzYx
LzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWzYNO+o
J0ZyRGYtTIbILM9w79DK+2gaJJOpGKMDYma9U8SeTXf2WO7cAUYiO1RQZ616RWOV
pYLMPAMkEmCfIhobGarYi/pLOHYrHo9QrPDJ2qVOxcWtY75unRMIWskBxCAr22Y6
iokUsqJ3L7JpFA1N3aKGPLZWSw/oMiZR9SFcvf7VGZwaz9w0wrZZsMdTaP6e7Kal
plg6m1tfxyhhGfK/chYTS0vUXd2uk3EQqwCMyDge/bHy55MIjNifiSXFGm8hwduQ
CUKuLjZ9TZKhbaJTgb/y7wM8XsuuajFZ41wQhI91+7p8auf4sQkKCxsIqX7eIrpV
1RX6fxlbqlvP7w==
-----END CERTIFICATE-----
Generated at Sun May 11 07:37:34 2025 by rpki-client