Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: B+4enrzQM0NYgpS8B4Mcak4WItvpC7REPJvdaiPzuHc=
Subject key identifier: 28:0D:4D:35:F1:98:A4:82:AD:91:C4:EA:53:ED:03:A6:AA:75:38:12
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 01976C98C5227D8FC9DBBA244C0190FF2AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 04:00:40 +0000
Manifest this update: Sat 14 Jun 2025 04:00:40 +0000
Manifest next update: Sun 15 Jun 2025 04:00:40 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: weRfvXFOQZHu1YrxIcGhMcd6YKe6aGJhzHy3qJBs8VA=)
2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:c5:22:7d:8f:c9:db:ba:24:4c:01:90:ff:2a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Jun 14 04:00:40 2025 GMT
Not After : Jun 15 04:00:40 2025 GMT
Subject: CN=280d4d35f198a482ad91c4ea53ed03a6aa753812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:a5:f3:12:41:c7:1b:2c:a3:ae:ea:9f:bc:
10:1d:5e:05:98:e1:01:d0:1f:5a:01:4c:9b:97:a1:
8e:ea:73:41:56:a7:ed:6d:d9:a6:25:e7:63:ef:b0:
5e:9c:cb:eb:0d:f6:17:d9:e5:80:2b:ab:8b:3a:9b:
0d:44:b6:c8:61:ec:25:ea:f1:44:99:aa:37:ef:c4:
f6:da:65:6b:c9:13:10:7c:d2:e8:c4:56:31:9d:6c:
54:e8:08:25:e3:cc:6a:c8:0b:23:0e:6e:f2:ed:6f:
fa:9e:4d:99:7c:16:f1:41:3c:45:3b:91:5c:d0:1c:
56:d5:8d:cf:56:17:c0:65:15:dd:8c:98:0e:76:a7:
ff:37:75:a4:b1:a5:ab:86:c9:22:49:1e:88:89:5e:
11:17:86:39:8d:dd:c3:bc:da:07:eb:74:85:29:33:
9e:1a:96:ac:85:63:8b:c2:30:d4:88:c5:eb:db:d2:
ac:e9:19:b5:e3:1c:1e:84:5b:4f:56:44:7d:89:ec:
a9:fe:f9:c3:bb:37:9d:ad:83:6a:e4:3a:4c:56:5f:
02:04:08:1f:4d:39:ec:0c:f3:d3:be:fe:54:04:c4:
15:86:91:3e:dd:83:a5:d9:bd:a8:c5:18:b7:51:a7:
aa:1c:89:ba:96:23:74:12:5a:cc:20:e3:09:59:4b:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0D:4D:35:F1:98:A4:82:AD:91:C4:EA:53:ED:03:A6:AA:75:38:12
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f5:a2:96:03:55:42:a4:1b:7e:cc:52:2a:1a:4c:62:e5:07:
10:00:89:4d:c5:ef:a3:5a:f1:ed:2e:ef:46:12:77:c8:b0:ec:
08:a6:a5:9e:9b:f6:ac:65:79:18:59:78:ef:49:d1:40:e0:43:
ad:a1:a5:96:0b:bd:95:40:19:a0:59:5e:b8:6d:56:1c:e1:a9:
f0:ec:01:ef:43:ad:4b:0e:a3:64:ad:c2:86:2c:50:bb:9d:26:
24:6e:29:94:13:ff:47:65:af:bf:17:a9:a5:28:e9:e0:7a:57:
4b:93:35:48:33:aa:c7:15:46:27:52:8d:0a:c7:81:c5:6c:92:
06:74:7e:ca:3e:5b:cd:9c:ba:b8:b3:1f:31:a5:65:09:06:95:
0a:29:6f:00:6a:93:de:61:df:6e:35:2d:76:f7:c5:04:cb:d3:
4d:03:e7:3b:6b:48:29:01:04:0e:44:db:3d:e4:09:d6:63:a8:
f8:f0:88:ec:5d:c3:dc:90:de:aa:98:94:c0:a4:72:8a:7f:5a:
7d:3f:08:7e:e9:89:35:c4:12:63:81:bd:c8:86:a3:f3:9d:02:
e7:c1:af:e7:46:44:68:24:aa:bb:29:95:81:eb:73:74:c4:64:
f0:ae:5f:18:39:53:57:aa:91:54:da:af:01:51:78:ac:85:ef:
4a:aa:e6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmMUifY/J27okTAGQ/yrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTBiYWM5NmFmZjI1YjJhYTkzMWM0Mjk3NDQ2YmUzN2Zm
ZTJhZGEwHhcNMjUwNjE0MDQwMDQwWhcNMjUwNjE1MDQwMDQwWjAzMTEwLwYDVQQD
EygyODBkNGQzNWYxOThhNDgyYWQ5MWM0ZWE1M2VkMDNhNmFhNzUzODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmCl8xJBxxsso67qn7wQHV4FmOEB
0B9aAUybl6GO6nNBVqftbdmmJedj77BenMvrDfYX2eWAK6uLOpsNRLbIYewl6vFE
mao378T22mVryRMQfNLoxFYxnWxU6Agl48xqyAsjDm7y7W/6nk2ZfBbxQTxFO5Fc
0BxW1Y3PVhfAZRXdjJgOdqf/N3WksaWrhskiSR6IiV4RF4Y5jd3DvNoH63SFKTOe
GpashWOLwjDUiMXr29Ks6Rm14xwehFtPVkR9ieyp/vnDuzedrYNq5DpMVl8CBAgf
TTnsDPPTvv5UBMQVhpE+3YOl2b2oxRi3UaeqHIm6liN0ElrMIOMJWUu4PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgNTTXxmKSCrZHE6lPtA6aqdTgSMB8GA1UdIwQY
MBaAFPIQuslq/yWyqpMcQpdEa+N//iraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYt
YTMyOTM5NDY5OGQyLzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYtYTMyOTM5NDY5OGQy
LzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/WilgNV
QqQbfsxSKhpMYuUHEACJTcXvo1rx7S7vRhJ3yLDsCKalnpv2rGV5GFl470nRQOBD
raGllgu9lUAZoFleuG1WHOGp8OwB70OtSw6jZK3ChixQu50mJG4plBP/R2Wvvxep
pSjp4HpXS5M1SDOqxxVGJ1KNCseBxWySBnR+yj5bzZy6uLMfMaVlCQaVCilvAGqT
3mHfbjUtdvfFBMvTTQPnO2tIKQEEDkTbPeQJ1mOo+PCI7F3D3JDeqpiUwKRyin9a
fT8IfumJNcQSY4G9yIaj850C58Gv50ZEaCSquymVgetzdMRk8K5fGDlTV6qRVNqv
AVF4rIXvSqrmGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:33 2025 by rpki-client