Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
File: i8Wo923xVof4NEHJprVUV48831c.mft (raw, json)
Hash identifier: X0lAvkGGpyH3SxD/kj6OM581UEetD4HalxFl1MvIyu4=
Subject key identifier: 88:71:78:EA:7A:9E:90:3D:8A:1C:4B:4F:D5:6D:87:59:41:DE:C8:7A
Authority key identifier: 8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
Certificate issuer: /CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Certificate serial: 01967643249A591E2957CB65EE27A956911D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
Manifest number: 01AD
Signing time: Sun 27 Apr 2025 08:00:33 +0000
Manifest this update: Sun 27 Apr 2025 08:00:33 +0000
Manifest next update: Mon 28 Apr 2025 08:00:33 +0000
Files and hashes: 1: i8Wo923xVof4NEHJprVUV48831c.crl (hash: Lfn/U4At7UQ3QiWGtCOUQhFu7qTMYUxXitOXW94xiZA=)
2: xqruQTCgxIM4PNAxf9wXVycyPyQ.roa (hash: hdKTf9nYGB8AkPxxLnuI6L7FG/INFNDmxrZRzLc1Xt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:24:9a:59:1e:29:57:cb:65:ee:27:a9:56:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Validity
Not Before: Apr 27 08:00:33 2025 GMT
Not After : Apr 28 08:00:33 2025 GMT
Subject: CN=887178ea7a9e903d8a1c4b4fd56d875941dec87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:ea:8c:a7:46:b8:d8:1f:0b:23:e6:ad:60:
a1:0f:11:91:95:a0:cb:1b:61:b5:71:6e:12:be:ac:
86:32:86:45:7d:3d:a4:8c:ea:67:aa:ec:db:19:ca:
74:7a:53:bf:95:43:f9:9f:61:44:4a:7b:c0:95:42:
c1:7b:cb:14:69:0c:c1:97:ea:23:f5:fb:18:42:c3:
4d:21:84:e5:54:6d:13:75:10:c1:a0:ac:d9:5b:4c:
41:17:a7:e1:76:2c:59:68:f6:ba:73:19:8c:bc:38:
59:1c:6e:75:6e:b5:77:85:2a:54:40:5c:73:87:72:
bc:f6:e3:2c:6c:b7:0b:19:c7:8c:a9:cb:d7:14:f7:
c1:ed:b3:2d:1e:a8:2a:9a:3f:26:d2:e9:e9:19:ed:
a8:bc:df:b9:3c:c5:74:70:08:5e:49:97:36:b9:84:
f9:b2:5e:ea:0e:f3:f5:a5:43:47:e7:72:60:d1:46:
fb:8f:32:8a:fb:19:b5:91:7c:bd:77:c0:58:43:8b:
4c:49:b3:7e:9e:0c:07:d3:36:cd:07:fd:bf:46:b5:
8c:9b:73:31:0d:86:ed:e6:25:b6:42:41:89:0e:cc:
b5:59:8e:30:24:00:72:e7:1b:3c:2f:20:90:55:d6:
20:16:21:87:4a:3e:bf:d1:1b:e3:b0:1c:6a:3c:bf:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:78:EA:7A:9E:90:3D:8A:1C:4B:4F:D5:6D:87:59:41:DE:C8:7A
X509v3 Authority Key Identifier:
keyid:8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:64:91:a6:d4:87:dd:9c:e7:b8:33:e4:07:94:12:b1:fb:cf:
d6:36:a0:b9:01:b1:fb:09:15:2b:c3:93:ad:f7:25:6e:f2:3e:
b1:38:1d:3f:01:4c:75:af:17:50:aa:9e:31:30:3e:56:bd:ac:
94:fc:55:9a:d5:eb:e9:02:14:e2:5d:6d:7a:22:45:39:3f:fb:
2e:b5:9d:83:4c:05:04:6e:4c:7a:e5:3d:72:d1:76:19:be:00:
16:11:19:3d:17:27:2d:d7:6b:ce:1e:89:3e:44:2f:76:84:1c:
6f:cf:d4:ca:a5:54:b7:86:c4:ac:a0:99:d7:37:a6:b6:b0:b6:
6d:6c:1f:c8:89:d9:3a:31:f6:55:b9:74:9a:72:35:68:1c:76:
79:f4:2e:c5:24:98:66:48:34:c9:fe:e5:3f:e0:a2:f9:7c:97:
42:1a:88:0b:df:54:f9:b5:38:5f:00:0d:01:cb:96:a3:17:77:
59:d9:e2:43:c6:e2:38:48:ce:3a:60:6c:8a:07:80:df:f9:d2:
10:9b:98:75:78:6d:c1:90:0b:8b:e5:6e:e3:2b:5e:d9:b3:b9:
83:de:49:67:3a:5d:e9:b5:37:8a:50:3b:90:80:9d:55:a1:fd:
32:1c:91:05:f1:2a:e6:4b:d0:05:bf:8c:2b:03:a6:bf:76:ee:
c1:0a:ba:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QySaWR4pV8tl7iepVpEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYzVhOGY3NmRmMTU2ODdmODM0NDFjOWE2YjU1NDU3OGYz
Y2RmNTcwHhcNMjUwNDI3MDgwMDMzWhcNMjUwNDI4MDgwMDMzWjAzMTEwLwYDVQQD
Eyg4ODcxNzhlYTdhOWU5MDNkOGExYzRiNGZkNTZkODc1OTQxZGVjODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxinqjKdGuNgfCyPmrWChDxGRlaDL
G2G1cW4SvqyGMoZFfT2kjOpnquzbGcp0elO/lUP5n2FESnvAlULBe8sUaQzBl+oj
9fsYQsNNIYTlVG0TdRDBoKzZW0xBF6fhdixZaPa6cxmMvDhZHG51brV3hSpUQFxz
h3K89uMsbLcLGceMqcvXFPfB7bMtHqgqmj8m0unpGe2ovN+5PMV0cAheSZc2uYT5
sl7qDvP1pUNH53Jg0Ub7jzKK+xm1kXy9d8BYQ4tMSbN+ngwH0zbNB/2/RrWMm3Mx
DYbt5iW2QkGJDsy1WY4wJABy5xs8LyCQVdYgFiGHSj6/0RvjsBxqPL8P5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhxeOp6npA9ihxLT9Vth1lB3sh6MB8GA1UdIwQY
MBaAFIvFqPdt8VaH+DRByaa1VFePPN9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNWU4M2QtMjM2NS00MTI2LTlhYTct
OTRiOWNmMmNkMmVmLzEvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yNWU4M2QtMjM2NS00MTI2LTlhYTctOTRiOWNmMmNkMmVm
LzEvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2SRptSH
3ZznuDPkB5QSsfvP1jaguQGx+wkVK8OTrfclbvI+sTgdPwFMda8XUKqeMTA+Vr2s
lPxVmtXr6QIU4l1teiJFOT/7LrWdg0wFBG5MeuU9ctF2Gb4AFhEZPRcnLddrzh6J
PkQvdoQcb8/UyqVUt4bErKCZ1zemtrC2bWwfyInZOjH2Vbl0mnI1aBx2efQuxSSY
Zkg0yf7lP+Ci+XyXQhqIC99U+bU4XwANAcuWoxd3WdniQ8biOEjOOmBsigeA3/nS
EJuYdXhtwZALi+Vu4yte2bO5g95JZzpd6bU3ilA7kICdVaH9MhyRBfEq5kvQBb+M
KwOmv3buwQq6HA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:59 2025 by rpki-client