Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: 9xhUwFXX1kJ1i56tP4Hiy3qGDrWVqXbCIpWzB0emhD4=
Subject key identifier: 30:68:CC:7B:B3:2B:25:CC:A3:34:E4:5E:A4:CB:B7:E1:77:C7:84:E4
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 0196816B7656DB4D495BB69288E102886DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 11AA
Signing time: Tue 29 Apr 2025 12:00:25 +0000
Manifest this update: Tue 29 Apr 2025 12:00:25 +0000
Manifest next update: Wed 30 Apr 2025 12:00:25 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: yKqdX1HfoHphtTp5V0ZrBksngjUF2eQTjjJ2OIkgBc4=)
2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:76:56:db:4d:49:5b:b6:92:88:e1:02:88:6d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Apr 29 12:00:25 2025 GMT
Not After : Apr 30 12:00:25 2025 GMT
Subject: CN=3068cc7bb32b25cca334e45ea4cbb7e177c784e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:6c:f3:20:eb:fe:57:11:8c:5f:f2:2a:73:
45:4a:ee:2a:78:4e:cc:6d:f8:2f:c7:f9:cf:f3:88:
03:b1:7f:31:09:ee:c2:3a:66:9a:86:ce:09:45:6b:
87:9b:f3:c5:83:bc:f4:08:22:04:92:d8:f3:b0:7e:
25:6e:87:62:9a:0f:23:ac:05:e2:c0:98:ee:5a:5c:
a5:03:06:3c:b4:38:31:30:d3:6d:23:5e:0d:00:e0:
40:ba:aa:c3:d1:c3:66:04:27:b2:f1:a4:54:48:10:
a3:84:4d:81:4f:9d:8e:8a:ab:78:58:a1:1e:c4:e4:
c0:d4:1c:d8:49:77:9c:2f:3e:a3:05:ac:60:e5:5b:
03:38:ae:0a:c1:eb:af:70:84:ea:b7:25:b4:ba:08:
ab:47:30:e4:3f:f3:2e:fe:e6:dc:a6:90:9a:1e:4d:
14:19:47:0b:f0:83:ac:95:b5:94:f3:28:84:bc:ab:
bc:b9:b1:84:10:30:8f:1a:f8:d3:ac:ce:de:59:cc:
9c:c1:8b:fa:2f:af:31:3e:55:f6:94:40:63:15:5b:
ea:df:66:6b:91:b8:13:9d:74:22:5e:38:cb:6b:54:
a8:8b:ce:1d:6b:57:7c:29:ee:e8:36:e2:40:c4:8f:
d7:58:c4:f7:25:74:0e:64:97:26:7c:0c:64:ab:6f:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:CC:7B:B3:2B:25:CC:A3:34:E4:5E:A4:CB:B7:E1:77:C7:84:E4
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a5:b9:a8:04:bc:ed:6f:82:d8:c4:03:1f:0f:00:62:d2:c8:
ea:b8:6b:15:62:64:12:82:78:43:a7:c0:65:65:26:b4:f9:99:
e1:ce:96:30:f2:0e:ee:32:a1:04:c8:92:31:75:fe:85:a2:d1:
72:a1:e2:a4:eb:e6:cf:c0:c3:46:72:27:55:04:6a:a7:cd:0d:
ab:17:3e:44:ea:da:83:42:54:da:b3:19:15:c0:fc:fd:d6:a2:
4c:fe:63:da:92:a6:6a:c4:69:34:88:60:95:76:04:4a:f4:a7:
46:96:c1:fd:06:46:b1:ca:f6:9b:ee:de:90:0e:3a:37:06:88:
ae:82:8a:8d:00:1f:bc:11:cb:e9:44:2a:02:7f:27:e8:1e:a8:
7f:5a:8f:d8:71:6a:f8:03:6e:18:05:45:cc:eb:5d:e6:bb:2b:
44:02:dc:cb:70:94:99:d2:d8:b2:ea:ee:bd:61:53:05:cf:e0:
fb:ae:65:9d:1a:84:64:3c:99:33:9d:5b:3a:85:d7:bf:9f:8a:
28:78:74:c7:45:63:66:d3:4c:8f:dc:2c:1a:c5:bd:49:03:5d:
d6:70:3b:40:8a:b1:be:43:7b:48:4d:f2:5e:36:d6:1c:f8:c3:
25:02:d0:3c:d7:1a:44:70:8b:90:e3:b1:f0:86:1b:7c:39:e1:
b7:b3:04:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBa3ZW201JW7aSiOECiG3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz
YjgyYTcwHhcNMjUwNDI5MTIwMDI1WhcNMjUwNDMwMTIwMDI1WjAzMTEwLwYDVQQD
EygzMDY4Y2M3YmIzMmIyNWNjYTMzNGU0NWVhNGNiYjdlMTc3Yzc4NGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywds8yDr/lcRjF/yKnNFSu4qeE7M
bfgvx/nP84gDsX8xCe7COmaahs4JRWuHm/PFg7z0CCIEktjzsH4lbodimg8jrAXi
wJjuWlylAwY8tDgxMNNtI14NAOBAuqrD0cNmBCey8aRUSBCjhE2BT52Oiqt4WKEe
xOTA1BzYSXecLz6jBaxg5VsDOK4KweuvcITqtyW0ugirRzDkP/Mu/ubcppCaHk0U
GUcL8IOslbWU8yiEvKu8ubGEEDCPGvjTrM7eWcycwYv6L68xPlX2lEBjFVvq32Zr
kbgTnXQiXjjLa1Soi84da1d8Ke7oNuJAxI/XWMT3JXQOZJcmfAxkq29CbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBozHuzKyXMozTkXqTLt+F3x4TkMB8GA1UdIwQY
MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt
YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1
LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6W5qAS8
7W+C2MQDHw8AYtLI6rhrFWJkEoJ4Q6fAZWUmtPmZ4c6WMPIO7jKhBMiSMXX+haLR
cqHipOvmz8DDRnInVQRqp80Nqxc+ROrag0JU2rMZFcD8/daiTP5j2pKmasRpNIhg
lXYESvSnRpbB/QZGscr2m+7ekA46NwaIroKKjQAfvBHL6UQqAn8n6B6of1qP2HFq
+ANuGAVFzOtd5rsrRALcy3CUmdLYsuruvWFTBc/g+65lnRqEZDyZM51bOoXXv5+K
KHh0x0VjZtNMj9wsGsW9SQNd1nA7QIqxvkN7SE3yXjbWHPjDJQLQPNcaRHCLkOOx
8IYbfDnht7MECw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:50:43 2025 by rpki-client