Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: V9C8MmRXUG8aQ+RhbEmJgleYyfxNmhBRJH6DVaV61qo=
Subject key identifier: 1E:B0:B4:20:34:8B:2C:F5:D2:7B:B8:67:B0:E5:15:3E:CC:AD:8B:8C
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 01967D214949F74D27671AE6C180DCC2FCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 16:00:55 +0000
Manifest this update: Mon 28 Apr 2025 16:00:55 +0000
Manifest next update: Tue 29 Apr 2025 16:00:55 +0000
Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: 9559Bl7rvYYPqFAfsnFW/zxpmExweW4o6GIZrLArg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:49:49:f7:4d:27:67:1a:e6:c1:80:dc:c2:fc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Apr 28 16:00:55 2025 GMT
Not After : Apr 29 16:00:55 2025 GMT
Subject: CN=1eb0b420348b2cf5d27bb867b0e5153eccad8b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:87:d3:0c:e4:de:ea:be:61:22:ef:20:81:
89:30:4c:5c:49:f5:53:c0:fe:fa:5a:ff:24:2e:a7:
51:00:ad:25:ba:32:69:9d:e9:2b:58:53:86:66:57:
ff:a4:58:79:ef:8c:02:b2:48:13:c7:35:6d:87:06:
a3:c5:f5:b9:ab:9a:d6:4a:94:ae:f7:da:6b:c0:76:
a5:40:2b:b6:7e:e7:11:42:ae:7a:fd:be:44:4e:80:
e0:74:c7:07:b7:f6:d1:ee:6e:dc:d3:5c:89:7f:7a:
73:fd:a0:6f:41:0e:fd:24:c0:9d:0b:0d:23:f6:0b:
2e:31:ac:21:7f:0e:05:2d:11:4c:b2:b0:a9:65:c9:
d6:bf:22:3e:4c:b4:db:09:2d:72:9a:d0:45:ad:e9:
e9:10:21:ba:ab:8b:bc:c6:cd:cd:25:8b:0d:3f:71:
4c:99:ea:88:b0:b2:60:bb:cf:de:d7:57:9b:b6:2c:
8e:f1:94:7d:04:3c:b4:e8:c1:e1:fb:a8:a7:5a:b0:
49:3f:60:c1:86:81:5b:40:8a:06:41:4f:d0:16:2c:
ac:0e:d0:58:0c:43:f9:1a:d3:35:2a:e0:8c:44:0d:
fd:af:ec:c1:1d:9a:61:1a:9d:ca:6a:e4:7c:d6:0e:
c7:07:78:9d:59:d5:d7:1e:3f:3c:4f:94:53:59:89:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B0:B4:20:34:8B:2C:F5:D2:7B:B8:67:B0:E5:15:3E:CC:AD:8B:8C
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:df:34:87:5a:20:12:16:7e:d1:74:ed:22:95:7a:d2:4b:70:
35:f5:58:a1:4b:55:58:33:ae:87:ba:31:35:7d:27:59:0f:f2:
09:5c:22:b8:1a:bb:ce:ad:fd:0e:06:fc:91:2e:51:96:b5:8f:
df:22:0f:a5:1a:f1:07:47:b9:d6:cd:5d:4a:bd:f4:6b:b1:a8:
67:a0:a2:82:4a:fd:7f:95:42:22:b2:9b:47:22:e6:b4:5f:2c:
ae:81:a1:99:3a:12:bb:37:18:76:c2:96:ee:b8:0f:91:a5:e6:
3e:6d:c5:b9:62:50:c7:39:eb:be:c1:e9:3f:a8:77:9c:4b:8c:
ca:09:62:df:11:83:c1:5e:d3:43:76:65:f5:1e:a4:5b:83:fc:
16:46:31:70:0b:6a:40:72:0e:3c:23:c3:be:b1:04:1e:e5:25:
de:ae:fd:92:fc:82:5c:a7:0a:5a:ec:80:a0:1e:82:95:ea:b3:
0e:6c:25:70:23:8d:9c:8d:d5:7b:4e:91:d0:e3:26:a6:fc:63:
28:b6:fc:7b:1e:b3:6d:a1:aa:01:1d:f9:b0:ae:f4:21:84:3d:
ea:ce:3e:7e:5d:e1:f3:23:fc:71:ca:6b:74:df:eb:ec:6a:a9:
f9:2f:73:22:2e:a5:3b:86:5d:d3:20:5b:a9:a6:40:43:e1:d4:
50:10:d0:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IUlJ900nZxrmwYDcwvysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjUwNDI4MTYwMDU1WhcNMjUwNDI5MTYwMDU1WjAzMTEwLwYDVQQD
EygxZWIwYjQyMDM0OGIyY2Y1ZDI3YmI4NjdiMGU1MTUzZWNjYWQ4YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/mH0wzk3uq+YSLvIIGJMExcSfVT
wP76Wv8kLqdRAK0lujJpnekrWFOGZlf/pFh574wCskgTxzVthwajxfW5q5rWSpSu
99prwHalQCu2fucRQq56/b5EToDgdMcHt/bR7m7c01yJf3pz/aBvQQ79JMCdCw0j
9gsuMawhfw4FLRFMsrCpZcnWvyI+TLTbCS1ymtBFrenpECG6q4u8xs3NJYsNP3FM
meqIsLJgu8/e11ebtiyO8ZR9BDy06MHh+6inWrBJP2DBhoFbQIoGQU/QFiysDtBY
DEP5GtM1KuCMRA39r+zBHZphGp3KauR81g7HB3idWdXXHj88T5RTWYlWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6wtCA0iyz10nu4Z7DlFT7MrYuMMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKN80h1og
EhZ+0XTtIpV60ktwNfVYoUtVWDOuh7oxNX0nWQ/yCVwiuBq7zq39Dgb8kS5RlrWP
3yIPpRrxB0e51s1dSr30a7GoZ6Cigkr9f5VCIrKbRyLmtF8sroGhmToSuzcYdsKW
7rgPkaXmPm3FuWJQxznrvsHpP6h3nEuMygli3xGDwV7TQ3Zl9R6kW4P8FkYxcAtq
QHIOPCPDvrEEHuUl3q79kvyCXKcKWuyAoB6CleqzDmwlcCONnI3Ve06R0OMmpvxj
KLb8ex6zbaGqAR35sK70IYQ96s4+fl3h8yP8ccprdN/r7Gqp+S9zIi6lO4Zd0yBb
qaZAQ+HUUBDQ/w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:57 2025 by rpki-client