Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: Kg35TiqR3WMu7zFIkDSKIpCGCw6+o3gDF2Q4pwDvNO4=
Subject key identifier: 51:34:70:0D:68:77:F6:EE:F9:53:E0:DA:A8:28:62:75:36:D9:49:E0
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 0196767A7B4CAC23B1B0CF6F2132B8F315D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0968
Signing time: Sun 27 Apr 2025 09:01:00 +0000
Manifest this update: Sun 27 Apr 2025 09:01:00 +0000
Manifest next update: Mon 28 Apr 2025 09:01:00 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: aXD47W6ArBeozTL1zmCBIi8vS0qtAx8BIws9UVU2NJY=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:7b:4c:ac:23:b1:b0:cf:6f:21:32:b8:f3:15:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Apr 27 09:01:00 2025 GMT
Not After : Apr 28 09:01:00 2025 GMT
Subject: CN=5134700d6877f6eef953e0daa828627536d949e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:de:5f:7a:a9:37:d5:a3:de:c4:ae:17:15:
32:f8:c6:9d:a5:1e:3c:c6:22:f3:32:7c:5b:1d:9b:
04:f3:54:2a:c9:2c:45:59:87:2f:58:1c:67:a7:b2:
e7:bf:1f:50:7d:59:0c:76:12:a4:31:03:92:10:87:
90:73:ea:be:70:b9:67:34:6d:1e:6d:c7:72:0a:25:
f8:d2:c3:b0:6a:82:a9:02:52:5e:c8:76:4f:b6:c5:
e0:b6:6e:2b:6d:05:16:b2:06:c9:d4:69:50:0e:a8:
4d:ae:eb:d4:a7:99:f0:be:a8:50:c2:15:a2:fb:4a:
be:e0:7a:53:0c:c8:21:dd:a9:16:14:84:ac:9f:76:
be:71:18:94:97:e1:bc:b2:2f:f5:4e:36:cf:53:58:
2a:8b:41:7d:0f:06:56:bc:84:f0:ce:4c:7c:c8:69:
d7:10:42:8f:d7:1c:7f:4e:4b:fc:11:f3:2f:3a:d3:
b8:fb:90:38:62:7b:e9:04:33:81:55:db:5a:f8:ea:
01:d0:56:7d:4f:53:d3:90:6a:c9:98:a0:72:c1:01:
52:35:0e:de:ef:41:70:ad:4d:d4:40:b3:40:95:c8:
aa:6b:9a:70:1e:65:90:21:c3:61:30:9a:b4:64:7a:
a6:65:a7:4c:23:a1:e3:37:ae:dc:d3:30:b5:30:0b:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:70:0D:68:77:F6:EE:F9:53:E0:DA:A8:28:62:75:36:D9:49:E0
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:82:d9:16:59:20:ec:ac:18:82:60:56:5d:15:4b:1f:ca:f1:
c4:38:dc:33:63:1e:d7:59:3c:73:80:85:ee:95:f3:e8:d4:3b:
49:05:b9:c9:4c:6c:20:35:ea:8e:3b:80:d6:59:d9:ec:0b:57:
7b:b7:32:b7:18:f5:26:05:c7:50:be:a3:f1:03:77:ac:0f:a9:
dd:a6:3c:95:51:ba:7f:5d:83:61:70:34:4f:a6:51:88:d8:7f:
0a:a0:82:9c:4f:97:74:b0:15:f1:9c:cb:35:45:f8:6f:c3:51:
62:c1:22:f4:a0:08:49:42:60:90:a3:e0:26:ec:5d:06:4c:5a:
d7:11:ae:0a:f6:b3:8e:a6:78:3e:7c:4e:49:a3:f4:0a:02:92:
14:ab:47:6d:77:83:92:8f:b3:51:96:22:eb:81:8b:4e:9d:97:
52:61:9f:cb:71:81:2c:26:5c:23:d0:c0:78:18:2f:9f:49:c8:
06:8a:84:df:a5:c9:73:55:90:0a:b3:77:c9:b5:f3:f8:f8:78:
60:11:8f:0e:4c:a4:52:f2:c8:3b:1b:fe:a2:29:da:f0:0a:83:
71:7e:2b:72:9c:7a:ce:e8:ab:d6:e5:d6:4e:fe:71:4f:e0:68:
7c:ac:61:13:06:1c:ea:0c:53:46:ee:37:72:bf:9c:18:14:bf:
e1:86:4b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2entMrCOxsM9vITK48xXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi
OTFjOGEwHhcNMjUwNDI3MDkwMTAwWhcNMjUwNDI4MDkwMTAwWjAzMTEwLwYDVQQD
Eyg1MTM0NzAwZDY4NzdmNmVlZjk1M2UwZGFhODI4NjI3NTM2ZDk0OWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncveX3qpN9Wj3sSuFxUy+MadpR48
xiLzMnxbHZsE81QqySxFWYcvWBxnp7Lnvx9QfVkMdhKkMQOSEIeQc+q+cLlnNG0e
bcdyCiX40sOwaoKpAlJeyHZPtsXgtm4rbQUWsgbJ1GlQDqhNruvUp5nwvqhQwhWi
+0q+4HpTDMgh3akWFISsn3a+cRiUl+G8si/1TjbPU1gqi0F9DwZWvITwzkx8yGnX
EEKP1xx/Tkv8EfMvOtO4+5A4YnvpBDOBVdta+OoB0FZ9T1PTkGrJmKBywQFSNQ7e
70FwrU3UQLNAlciqa5pwHmWQIcNhMJq0ZHqmZadMI6HjN67c0zC1MAuD7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFE0cA1od/bu+VPg2qgoYnU22UngMB8GA1UdIwQY
MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt
NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4
LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4LZFlkg
7KwYgmBWXRVLH8rxxDjcM2Me11k8c4CF7pXz6NQ7SQW5yUxsIDXqjjuA1lnZ7AtX
e7cytxj1JgXHUL6j8QN3rA+p3aY8lVG6f12DYXA0T6ZRiNh/CqCCnE+XdLAV8ZzL
NUX4b8NRYsEi9KAISUJgkKPgJuxdBkxa1xGuCvazjqZ4PnxOSaP0CgKSFKtHbXeD
ko+zUZYi64GLTp2XUmGfy3GBLCZcI9DAeBgvn0nIBoqE36XJc1WQCrN3ybXz+Ph4
YBGPDkykUvLIOxv+oina8AqDcX4rcpx6zuir1uXWTv5xT+BofKxhEwYc6gxTRu43
cr+cGBS/4YZL9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:28:22 2025 by rpki-client