Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: X5zsISDqjQCFN89cboHr9mFSZ3cLpQ1+YESwxCfXgRY=
Subject key identifier: 52:AE:1C:D6:42:80:01:BD:03:A9:5F:64:52:A3:7D:38:EE:C5:27:CA
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 01967B69DF82883AF6AF8FBEB928EF98AE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 0F25
Signing time: Mon 28 Apr 2025 08:00:58 +0000
Manifest this update: Mon 28 Apr 2025 08:00:58 +0000
Manifest next update: Tue 29 Apr 2025 08:00:58 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: PZh8iUt6E7B3IX3lt7rFBrqZ8WyuBx2oGFqbAlXb0gg=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:df:82:88:3a:f6:af:8f:be:b9:28:ef:98:ae:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Apr 28 08:00:58 2025 GMT
Not After : Apr 29 08:00:58 2025 GMT
Subject: CN=52ae1cd6428001bd03a95f6452a37d38eec527ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:00:0d:dd:81:85:39:ef:9b:56:c7:69:3e:
ff:db:ec:e6:6e:79:0a:f2:b9:94:ab:9c:d5:bf:b9:
97:5a:3b:6d:f9:6a:7b:af:17:41:eb:91:04:87:7d:
bc:38:14:f8:73:2f:d6:5f:72:bf:06:08:b4:83:7f:
6e:84:81:0f:80:8e:79:91:2f:a9:b0:54:c3:84:cd:
ca:25:7f:a4:76:d0:03:f7:59:65:7e:a0:87:9b:a8:
cc:20:ea:6b:41:00:35:0c:46:0c:3f:66:53:da:b7:
9a:b0:b3:ea:21:a4:d1:47:29:c4:49:e8:f1:3f:e7:
c4:82:cc:ff:79:6c:62:29:34:58:b0:93:d3:77:b4:
da:c8:44:4c:3d:c0:51:7d:90:ca:e9:47:fb:79:21:
2b:85:2d:41:de:c5:ba:37:f0:54:8c:3c:6e:c2:a5:
55:86:ca:09:4c:d5:eb:20:bb:97:88:c2:a4:ed:ce:
49:43:6a:5d:da:79:74:8f:4a:d7:c2:6f:c8:21:16:
5d:ea:60:25:df:28:4f:b9:c4:28:b3:64:fa:15:20:
75:c2:f1:76:d3:c1:56:38:12:c9:d5:c7:21:e9:a9:
85:f0:dd:94:27:71:94:7c:5a:d9:62:bc:dc:e0:09:
66:78:0d:2a:1f:16:dc:f0:ac:96:8b:a3:16:32:75:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AE:1C:D6:42:80:01:BD:03:A9:5F:64:52:A3:7D:38:EE:C5:27:CA
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1c:31:ae:18:d9:ce:4d:d0:26:1d:10:4e:e2:f1:a0:80:0c:
fe:30:67:4e:b7:28:9f:72:01:d3:9a:a7:db:96:14:ad:6e:4d:
c2:a0:54:a4:38:8a:e6:01:43:e3:67:34:15:ea:6d:22:c6:80:
ef:ab:7d:cf:a9:f1:8d:a4:a5:8b:68:a9:26:56:b8:be:1c:03:
d8:d8:15:9e:73:08:41:25:22:94:d3:31:f1:63:0e:35:30:67:
9e:13:7f:39:18:f0:17:94:a4:0d:8e:5b:f1:ec:fa:6f:d5:1d:
6a:19:02:b2:d4:a2:1a:b2:f0:c2:50:e4:54:89:2a:24:6d:88:
f4:2d:59:84:85:22:9b:e0:dc:ec:cc:95:9a:6c:1c:a6:42:f0:
d4:67:69:79:c1:94:6c:b7:fe:9d:ed:88:ac:dd:38:b1:f4:1f:
53:fe:6e:70:9e:de:0a:d3:3c:49:14:78:55:70:e0:83:b1:a1:
48:9a:99:6a:d2:d0:67:db:a9:b6:d1:06:d6:28:19:c6:ea:39:
71:fc:cf:dd:fd:b2:8f:31:ff:e1:51:84:e3:92:9c:15:5e:23:
48:76:a6:59:ce:89:d5:7e:b6:2d:f3:e9:85:5b:7f:36:98:97:
1c:f5:f8:05:d9:7e:3f:24:e5:78:1e:dd:22:ad:3d:03:04:02:
d0:f5:4b:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7ad+CiDr2r4++uSjvmK5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl
NTUwNmQwHhcNMjUwNDI4MDgwMDU4WhcNMjUwNDI5MDgwMDU4WjAzMTEwLwYDVQQD
Eyg1MmFlMWNkNjQyODAwMWJkMDNhOTVmNjQ1MmEzN2QzOGVlYzUyN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qsADd2BhTnvm1bHaT7/2+zmbnkK
8rmUq5zVv7mXWjtt+Wp7rxdB65EEh328OBT4cy/WX3K/Bgi0g39uhIEPgI55kS+p
sFTDhM3KJX+kdtAD91llfqCHm6jMIOprQQA1DEYMP2ZT2reasLPqIaTRRynESejx
P+fEgsz/eWxiKTRYsJPTd7TayERMPcBRfZDK6Uf7eSErhS1B3sW6N/BUjDxuwqVV
hsoJTNXrILuXiMKk7c5JQ2pd2nl0j0rXwm/IIRZd6mAl3yhPucQos2T6FSB1wvF2
08FWOBLJ1cch6amF8N2UJ3GUfFrZYrzc4AlmeA0qHxbc8KyWi6MWMnUBvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKuHNZCgAG9A6lfZFKjfTjuxSfKMB8GA1UdIwQY
MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt
MGE1MzIxNTZiMmE2LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2
LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixwxrhjZ
zk3QJh0QTuLxoIAM/jBnTrcon3IB05qn25YUrW5NwqBUpDiK5gFD42c0FeptIsaA
76t9z6nxjaSli2ipJla4vhwD2NgVnnMIQSUilNMx8WMONTBnnhN/ORjwF5SkDY5b
8ez6b9UdahkCstSiGrLwwlDkVIkqJG2I9C1ZhIUim+Dc7MyVmmwcpkLw1GdpecGU
bLf+ne2IrN04sfQfU/5ucJ7eCtM8SRR4VXDgg7GhSJqZatLQZ9upttEG1igZxuo5
cfzP3f2yjzH/4VGE45KcFV4jSHamWc6J1X62LfPphVt/NpiXHPX4Bdl+PyTleB7d
Iq09AwQC0PVLPw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:38:32 2025 by rpki-client