Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: hrbIxBsZpI6WW72HNiL84pb5IXLfqR8sOAc0RIY8SnU=
Subject key identifier: 7E:94:C2:77:A0:C2:01:58:B6:99:52:B9:6B:BE:56:17:F5:3C:38:56
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 0196C26FD998BFEB2536DB5E800A60ED0BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0CC4
Signing time: Mon 12 May 2025 03:00:32 +0000
Manifest this update: Mon 12 May 2025 03:00:32 +0000
Manifest next update: Tue 13 May 2025 03:00:32 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: 3CMm3M8oF7yYKUydMVaEV+4djopr30sDlvNCH9M/+jY=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:d9:98:bf:eb:25:36:db:5e:80:0a:60:ed:0b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: May 12 03:00:32 2025 GMT
Not After : May 13 03:00:32 2025 GMT
Subject: CN=7e94c277a0c20158b69952b96bbe5617f53c3856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:1a:a6:73:61:e8:c5:29:d0:64:61:65:96:
ec:93:a4:61:ff:67:f0:6b:2f:22:f7:b0:0e:16:39:
23:ab:f5:45:4e:14:38:e8:e5:3a:04:28:33:c4:c8:
9c:ed:33:d3:de:b7:63:71:46:99:b3:a0:df:79:a7:
a3:9d:21:1f:91:e8:95:f6:cf:00:e2:18:94:1a:d5:
c1:45:8b:35:cc:84:3a:2f:33:41:f2:c8:82:9c:73:
94:c7:88:17:28:ea:b3:b7:f8:c4:72:92:c3:e9:3f:
d7:43:fa:0a:4d:95:d6:42:7d:6b:42:3a:8f:db:8a:
c0:56:54:e2:58:87:bf:8a:3c:ca:65:05:5d:ca:43:
9e:0c:b8:00:a6:d8:f3:e4:c4:f9:b6:e3:e1:24:99:
07:ac:af:d9:24:4e:c3:63:09:12:6d:0d:2c:85:b5:
a7:b4:23:a8:8a:11:7c:d0:b9:99:80:69:ca:ee:b2:
6a:ff:4b:88:33:52:45:04:2a:18:aa:84:61:b5:dd:
b2:bc:e2:f0:36:17:28:2e:bb:ca:4e:e1:9f:c1:54:
9d:cf:e1:0a:84:cc:2a:31:3a:63:d8:ae:0d:b8:9c:
4a:7e:32:43:5e:46:bc:9e:c0:98:a3:a5:2c:c5:e3:
99:86:ee:80:fd:74:79:51:f6:5f:1e:7b:4a:6a:58:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:C2:77:A0:C2:01:58:B6:99:52:B9:6B:BE:56:17:F5:3C:38:56
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0d:07:6d:fa:a0:32:0e:da:cb:9f:f1:c3:fa:18:b1:92:18:
be:aa:03:91:b3:3a:5d:e1:8e:06:36:50:b0:73:83:e9:f5:02:
7f:e6:0d:ea:f8:85:d9:fd:af:90:d0:d0:8b:fa:c7:5f:ef:67:
84:3c:3a:e4:2d:3a:15:e8:06:34:86:2f:7e:5d:5b:ff:1f:01:
bd:6c:d5:01:c2:d7:e5:d5:b4:01:4f:73:f8:59:12:4d:2c:04:
d5:2c:36:31:cf:8a:fe:21:3b:89:96:1f:a5:5a:e5:39:1f:a8:
57:39:6b:9f:09:42:f9:29:df:51:aa:1b:f9:26:14:a3:bf:20:
5e:36:04:94:5a:b6:bf:1b:35:6f:ab:2b:c8:0b:39:84:2f:54:
16:97:e0:d5:be:b3:51:0b:92:37:22:38:95:84:03:09:5a:f0:
a5:d5:16:d7:00:1f:98:b6:e4:65:f0:23:20:2d:73:d2:b1:bb:
ec:3a:ae:90:1d:6d:d1:4d:dd:ee:35:ec:c8:90:6f:79:b2:06:
c2:bc:0c:68:31:45:fb:af:9a:b8:73:4f:4e:11:db:dc:a8:09:
e7:d9:74:3e:a6:05:35:a7:56:82:7e:97:67:68:37:ec:43:ea:
8e:47:80:a5:55:5f:a6:af:db:d4:e5:94:c5:5c:00:e6:16:0c:
04:2c:0b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb9mYv+slNttegApg7QvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1
Y2MxMDMwHhcNMjUwNTEyMDMwMDMyWhcNMjUwNTEzMDMwMDMyWjAzMTEwLwYDVQQD
Eyg3ZTk0YzI3N2EwYzIwMTU4YjY5OTUyYjk2YmJlNTYxN2Y1M2MzODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+gapnNh6MUp0GRhZZbsk6Rh/2fw
ay8i97AOFjkjq/VFThQ46OU6BCgzxMic7TPT3rdjcUaZs6DfeaejnSEfkeiV9s8A
4hiUGtXBRYs1zIQ6LzNB8siCnHOUx4gXKOqzt/jEcpLD6T/XQ/oKTZXWQn1rQjqP
24rAVlTiWIe/ijzKZQVdykOeDLgAptjz5MT5tuPhJJkHrK/ZJE7DYwkSbQ0shbWn
tCOoihF80LmZgGnK7rJq/0uIM1JFBCoYqoRhtd2yvOLwNhcoLrvKTuGfwVSdz+EK
hMwqMTpj2K4NuJxKfjJDXka8nsCYo6UsxeOZhu6A/XR5UfZfHntKalg1eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6UwnegwgFYtplSuWu+Vhf1PDhWMB8GA1UdIwQY
MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct
ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj
LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA0Hbfqg
Mg7ay5/xw/oYsZIYvqoDkbM6XeGOBjZQsHOD6fUCf+YN6viF2f2vkNDQi/rHX+9n
hDw65C06FegGNIYvfl1b/x8BvWzVAcLX5dW0AU9z+FkSTSwE1Sw2Mc+K/iE7iZYf
pVrlOR+oVzlrnwlC+SnfUaob+SYUo78gXjYElFq2vxs1b6sryAs5hC9UFpfg1b6z
UQuSNyI4lYQDCVrwpdUW1wAfmLbkZfAjIC1z0rG77DqukB1t0U3d7jXsyJBvebIG
wrwMaDFF+6+auHNPThHb3KgJ59l0PqYFNadWgn6XZ2g37EPqjkeApVVfpq/b1OWU
xVwA5hYMBCwLsQ==
-----END CERTIFICATE-----
Generated at Mon May 12 07:42:34 2025 by rpki-client