Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: /GNnEIa83llXXbL5LwqHN0csHUDvFDwKSjS121xAbNg=
Subject key identifier: 30:0E:7B:3A:5A:BF:F6:AF:A1:E1:9E:1C:C2:1E:65:EE:D0:3F:30:C1
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 0197B70E929078C6EA4E30DA436A70714ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: DrEERluBKI8aHnsvSJUfeSi3W3/R62fuXMhn0Kilafg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:92:90:78:c6:ea:4e:30:da:43:6a:70:71:4e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=300e7b3a5abff6afa1e19e1cc21e65eed03f30c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:92:85:36:99:2a:0d:f3:ba:6a:07:ab:c8:
ee:0e:eb:1e:50:c6:aa:a5:8d:de:88:4c:ef:83:a1:
51:80:de:4c:47:df:62:10:21:bc:9b:d5:a1:38:9d:
a1:da:9e:3f:8a:8e:df:fa:15:77:2f:cd:f3:30:c5:
96:e8:08:c5:f0:bb:47:69:71:2b:38:28:e8:d0:07:
3d:4b:5e:78:cf:c7:3e:d2:31:7a:92:6e:e2:1a:6d:
dc:b4:de:21:62:6f:ab:7e:d1:4b:83:dc:bf:cc:a9:
7b:09:c2:e1:98:08:15:7e:04:c6:87:a5:86:62:0a:
18:f0:77:6f:bc:75:07:90:34:3d:ef:9e:14:64:6c:
dd:57:42:6c:82:d6:0a:71:ac:bc:2a:2c:a0:5a:fc:
3b:27:27:c9:d0:52:1b:97:cb:78:58:f5:c7:8b:96:
c0:33:a9:d5:4c:e5:6b:c6:6a:68:09:22:c4:e9:fd:
e8:11:5a:5d:1c:06:55:13:9f:60:74:d5:e4:3f:9a:
a0:a1:fe:89:c8:66:df:7f:d6:78:78:aa:31:bc:d5:
a4:e7:53:61:75:bc:af:25:e0:86:2f:ba:37:ed:8a:
43:94:4a:1a:25:77:d6:fa:af:98:b0:c5:26:89:b4:
23:20:a9:80:5a:95:e5:2f:cc:1c:04:4e:b8:5b:3f:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:7B:3A:5A:BF:F6:AF:A1:E1:9E:1C:C2:1E:65:EE:D0:3F:30:C1
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:f5:cc:36:50:cf:bd:c8:5a:45:c7:81:65:29:bc:66:6c:
32:e8:9d:9b:6c:a1:c2:60:8a:ab:e1:93:8f:9f:8e:ba:1d:f5:
bb:1e:65:66:45:17:a6:e8:ab:cc:6b:2c:4c:10:91:50:51:9a:
0e:0c:0d:c8:b4:0a:1d:11:aa:f5:4f:9c:a7:dc:7f:44:85:d3:
81:c2:45:65:59:51:5a:a2:d0:32:94:a4:ae:27:bf:dd:37:43:
9c:47:4f:f9:47:1f:42:68:9f:c1:9e:43:12:91:f7:0b:b2:62:
75:c9:db:ca:c4:ce:7d:9e:9a:eb:ae:55:f8:99:01:a5:4a:9a:
bd:2f:d4:02:5e:69:de:77:16:7a:0d:09:d5:d6:df:dd:ed:da:
b4:a4:c1:b1:c4:1b:3a:d3:88:95:ec:62:3c:1d:27:8a:3d:90:
b2:fa:4d:2a:06:da:a9:79:21:5e:ac:9e:fa:a4:f0:53:27:ad:
2d:61:65:32:0b:96:96:31:f2:d4:e7:a9:26:e8:f0:ba:5c:c6:
ff:e4:f0:a5:a3:ec:17:4f:71:32:24:cd:62:5a:a9:5e:94:4b:
fa:08:cc:1a:59:3e:a4:2d:72:b1:4a:1c:be:28:c5:90:de:fc:
8b:c0:10:c4:33:cc:a7:ef:8c:02:96:d6:45:13:b4:c6:d8:bb:
9f:63:d5:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DpKQeMbqTjDaQ2pwcU7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNDBkMWY5Yzk3YmU0NjZlMGJkZWFjODQ5Mjg5ZTJhM2Nj
YTllY2UwHhcNMjUwNjI4MTUwMTE0WhcNMjUwNjI5MTUwMTE0WjAzMTEwLwYDVQQD
EygzMDBlN2IzYTVhYmZmNmFmYTFlMTllMWNjMjFlNjVlZWQwM2YzMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t6ShTaZKg3zumoHq8juDuseUMaq
pY3eiEzvg6FRgN5MR99iECG8m9WhOJ2h2p4/io7f+hV3L83zMMWW6AjF8LtHaXEr
OCjo0Ac9S154z8c+0jF6km7iGm3ctN4hYm+rftFLg9y/zKl7CcLhmAgVfgTGh6WG
YgoY8HdvvHUHkDQ9754UZGzdV0JsgtYKcay8KiygWvw7JyfJ0FIbl8t4WPXHi5bA
M6nVTOVrxmpoCSLE6f3oEVpdHAZVE59gdNXkP5qgof6JyGbff9Z4eKoxvNWk51Nh
dbyvJeCGL7o37YpDlEoaJXfW+q+YsMUmibQjIKmAWpXlL8wcBE64Wz945QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAOezpav/avoeGeHMIeZe7QPzDBMB8GA1UdIwQY
MBaAFPBA0fnJe+Rm4L3qyEkonio8yp7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYt
ODk1M2VjOGRkZDRhLzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYtODk1M2VjOGRkZDRh
LzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpj1zDZQ
z73IWkXHgWUpvGZsMuidm2yhwmCKq+GTj5+Ouh31ux5lZkUXpuirzGssTBCRUFGa
DgwNyLQKHRGq9U+cp9x/RIXTgcJFZVlRWqLQMpSkrie/3TdDnEdP+UcfQmifwZ5D
EpH3C7JidcnbysTOfZ6a665V+JkBpUqavS/UAl5p3ncWeg0J1dbf3e3atKTBscQb
OtOIlexiPB0nij2QsvpNKgbaqXkhXqye+qTwUyetLWFlMguWljHy1OepJujwulzG
/+TwpaPsF09xMiTNYlqpXpRL+gjMGlk+pC1ysUocvijFkN78i8AQxDPMp++MApbW
RRO0xti7n2PV5w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:33 2025 by rpki-client