Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: lLxVOdOt+S91hjvq2P9UYW8ZLiakYHGDaamvTYSIVBE=
Subject key identifier: 62:C0:87:7E:F1:3D:78:7C:C3:36:73:1A:2F:11:F1:67:55:4B:4F:4E
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 01968548767ED974B9CC68D59B49ECFE85C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 14A8
Signing time: Wed 30 Apr 2025 06:00:40 +0000
Manifest this update: Wed 30 Apr 2025 06:00:40 +0000
Manifest next update: Thu 01 May 2025 06:00:40 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: c05WWboixiXTHoR1M1ot4Nmip7+IskgqPTwtd65a4+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:76:7e:d9:74:b9:cc:68:d5:9b:49:ec:fe:85:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Apr 30 06:00:40 2025 GMT
Not After : May 1 06:00:40 2025 GMT
Subject: CN=62c0877ef13d787cc336731a2f11f167554b4f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:fe:ac:3c:2a:c7:79:b7:11:58:0e:d4:b5:
f9:e3:1c:15:e3:f8:e2:35:01:cf:f7:46:1d:f5:db:
73:90:25:18:a1:21:c9:35:6c:5a:50:a2:8a:a1:53:
c2:ef:d3:98:fe:d7:18:d9:f0:50:e0:08:6d:4b:d3:
0a:b2:ff:71:8a:bd:df:02:4c:d3:d8:5b:e6:bf:48:
6b:27:03:a7:b4:a4:80:59:d8:2a:bc:84:9c:06:5f:
50:be:c3:78:d7:cc:8b:2b:b7:ee:20:7e:53:ef:0c:
5f:87:0b:0c:11:19:28:35:eb:be:9c:13:cb:71:f1:
ed:98:22:11:39:21:da:20:c9:6b:c3:35:80:11:18:
68:c5:1a:6d:e5:c2:62:df:dc:42:2a:ed:fa:0f:a8:
e4:03:e3:10:c2:af:b1:50:a0:76:99:44:6b:a4:c1:
4c:0d:6f:0e:e3:39:2a:3b:99:f1:fe:d4:57:b8:99:
e5:f3:ca:bc:e6:6d:48:fe:c7:28:6e:b9:03:58:34:
52:7a:9a:3d:99:08:5e:7f:17:fb:a5:6a:ba:e3:68:
81:84:51:57:5e:7c:10:c4:bd:ab:88:e7:e1:a1:50:
d4:08:d2:2c:2c:e3:26:39:2a:37:e6:05:b1:2e:cc:
99:33:a9:c7:fc:05:b2:f7:34:11:4e:28:fc:dd:94:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:87:7E:F1:3D:78:7C:C3:36:73:1A:2F:11:F1:67:55:4B:4F:4E
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:03:13:91:59:84:4b:c2:f8:56:00:43:18:07:37:f3:60:aa:
4c:05:33:c0:54:11:4d:78:4a:b5:2f:cb:74:1c:0d:9a:fd:9d:
78:9c:cd:08:1b:7d:13:4b:fa:fe:8a:5d:5a:33:5c:d7:af:4a:
c9:0c:4d:63:67:62:4e:b8:46:f3:92:cb:f6:e5:d8:c9:66:b2:
73:83:6e:19:76:81:a3:76:18:f4:69:c0:68:3c:6d:21:c0:6a:
09:07:66:a4:cf:c6:56:0f:33:06:20:18:fb:fe:41:19:a4:51:
73:07:39:da:cb:2b:7f:58:97:6a:f3:cc:52:23:6f:76:c2:5e:
30:5d:45:6d:f0:17:9d:b8:cb:4b:8b:81:33:cd:a4:4e:d5:a3:
6e:a0:e8:36:ea:d3:14:67:72:d4:54:09:4b:aa:10:66:20:fa:
ed:c0:2f:b4:c1:08:7f:99:aa:70:31:a4:9d:93:02:36:bd:43:
6a:66:15:06:18:00:5f:f8:0b:16:74:65:a0:de:38:d1:c5:12:
03:d6:20:79:d1:3a:ad:32:23:6a:7d:46:10:ce:2b:26:78:0b:
f3:f4:8e:60:9f:77:63:d5:6f:39:c2:96:a7:ed:9b:da:2a:c5:
f5:d6:7d:1f:c3:a2:ae:a2:33:5c:3b:43:a0:d2:ad:9f:5d:84:
ca:e4:ca:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFSHZ+2XS5zGjVm0ns/oXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMzI1OGFhNmI4M2VjOWZiN2JlOTY2YzYyNmE5MTY2Nzgx
YzdmM2IwHhcNMjUwNDMwMDYwMDQwWhcNMjUwNTAxMDYwMDQwWjAzMTEwLwYDVQQD
Eyg2MmMwODc3ZWYxM2Q3ODdjYzMzNjczMWEyZjExZjE2NzU1NGI0ZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ez+rDwqx3m3EVgO1LX54xwV4/ji
NQHP90Yd9dtzkCUYoSHJNWxaUKKKoVPC79OY/tcY2fBQ4AhtS9MKsv9xir3fAkzT
2Fvmv0hrJwOntKSAWdgqvIScBl9QvsN418yLK7fuIH5T7wxfhwsMERkoNeu+nBPL
cfHtmCIROSHaIMlrwzWAERhoxRpt5cJi39xCKu36D6jkA+MQwq+xUKB2mURrpMFM
DW8O4zkqO5nx/tRXuJnl88q85m1I/scobrkDWDRSepo9mQhefxf7pWq642iBhFFX
XnwQxL2riOfhoVDUCNIsLOMmOSo35gWxLsyZM6nH/AWy9zQRTij83ZSsiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLAh37xPXh8wzZzGi8R8WdVS09OMB8GA1UdIwQY
MBaAFPIyWKprg+yft76WbGJqkWZ4HH87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMt
NzEyZmNmYTQ0MWU0LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMtNzEyZmNmYTQ0MWU0
LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAMTkVmE
S8L4VgBDGAc382CqTAUzwFQRTXhKtS/LdBwNmv2deJzNCBt9E0v6/opdWjNc169K
yQxNY2diTrhG85LL9uXYyWayc4NuGXaBo3YY9GnAaDxtIcBqCQdmpM/GVg8zBiAY
+/5BGaRRcwc52ssrf1iXavPMUiNvdsJeMF1FbfAXnbjLS4uBM82kTtWjbqDoNurT
FGdy1FQJS6oQZiD67cAvtMEIf5mqcDGknZMCNr1DamYVBhgAX/gLFnRloN440cUS
A9YgedE6rTIjan1GEM4rJngL8/SOYJ93Y9VvOcKWp+2b2irF9dZ9H8OirqIzXDtD
oNKtn12EyuTK5w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:39:08 2025 by rpki-client