Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: jtTkbBEiLdDhwW5RqE8GlNR+lPcEXlHQudcgDwub7sk=
Subject key identifier: 82:24:75:D6:7C:03:38:DD:E9:0C:2D:5C:B1:D7:0C:48:DC:34:4A:99
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 01976D74B64D9B7E70941BB3014ABCE410AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0C86
Signing time: Sat 14 Jun 2025 08:00:54 +0000
Manifest this update: Sat 14 Jun 2025 08:00:54 +0000
Manifest next update: Sun 15 Jun 2025 08:00:54 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 5DfIPmatnDCiMX8N5Wx5F+431SVsjVjx3iefEcSof9Q=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:b6:4d:9b:7e:70:94:1b:b3:01:4a:bc:e4:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Jun 14 08:00:54 2025 GMT
Not After : Jun 15 08:00:54 2025 GMT
Subject: CN=822475d67c0338dde90c2d5cb1d70c48dc344a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:20:a0:b9:99:b2:c7:9f:24:c6:e8:2f:1b:
4e:0a:69:1d:a4:b3:32:3c:72:43:19:67:67:a6:1a:
83:8c:ab:cf:92:ed:15:0e:97:47:09:e9:33:db:80:
86:96:a9:46:f6:6d:ce:34:7f:45:d4:87:3e:ad:0c:
12:fe:60:cf:28:97:68:f0:9a:34:d8:42:b1:23:35:
d1:b9:03:99:42:0d:d9:be:63:93:7e:06:e7:f6:9c:
33:2a:9e:38:79:a3:ab:4e:98:9f:bc:44:61:a1:f4:
bd:25:d8:c0:ca:2f:73:51:19:ac:55:57:b1:2e:e6:
9b:68:14:f8:3a:41:f3:7d:96:86:39:ae:c9:a0:e2:
8c:e9:5b:cf:5b:02:88:a2:da:d8:cc:c7:70:c8:df:
29:ba:76:ca:5c:0d:47:a1:b3:da:f6:47:f6:6c:dc:
94:55:0c:09:c9:c1:93:d0:10:76:13:51:2d:d7:f9:
40:7e:6c:dc:6f:b3:d6:fd:fd:dd:f0:44:92:97:13:
3e:4d:e6:08:13:cd:1f:cb:30:3b:d6:d9:84:4a:42:
6e:c5:92:ed:a8:78:f8:4d:7b:16:af:e7:3d:16:a6:
aa:cf:23:76:08:5e:b4:3c:b6:1d:86:ff:60:94:29:
64:2a:d3:b7:ed:08:77:c3:2e:9d:f1:a0:99:ec:ae:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:75:D6:7C:03:38:DD:E9:0C:2D:5C:B1:D7:0C:48:DC:34:4A:99
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e3:3d:e3:40:db:0b:44:b4:6c:b9:b3:69:a7:85:45:23:1b:
24:2a:7c:f5:b0:33:66:53:24:60:a9:ce:fa:b2:43:25:73:c5:
35:32:94:cd:ff:de:04:3d:75:d5:31:1f:e3:eb:9c:19:e0:e4:
fc:84:8f:fe:77:85:2b:31:16:09:87:a3:ed:1f:54:36:5f:af:
81:95:d0:14:8d:d4:12:47:8f:9c:57:be:b9:cd:52:5a:4a:ea:
1f:cd:8c:73:70:2a:c5:4f:68:44:f5:39:1b:ab:dc:5a:02:9a:
f9:b8:ff:fe:77:42:51:a7:a0:61:55:68:bf:fc:51:52:64:62:
92:65:7a:1d:88:49:52:d1:58:d3:a0:e9:c2:80:9b:e4:e3:d5:
3b:34:9e:7e:79:34:3a:af:04:63:4c:7e:85:87:7e:46:91:3c:
9f:28:e2:92:c6:74:36:57:74:4b:8d:37:90:eb:dd:9b:10:34:
8d:a3:91:9b:df:de:d1:37:c7:2a:ee:d3:41:a1:69:35:6d:10:
d6:64:d9:22:54:ab:04:c5:6d:e5:b3:36:6b:78:b0:9e:b2:8a:
77:8b:c4:d1:81:d9:81:64:91:11:99:84:f2:dc:5b:a9:dc:ee:
f7:0f:90:30:17:00:4b:8f:08:03:28:4c:cf:96:69:6f:18:65:
88:c9:4c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdLZNm35wlBuzAUq85BCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl
ODI2ZDQwHhcNMjUwNjE0MDgwMDU0WhcNMjUwNjE1MDgwMDU0WjAzMTEwLwYDVQQD
Eyg4MjI0NzVkNjdjMDMzOGRkZTkwYzJkNWNiMWQ3MGM0OGRjMzQ0YTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHEgoLmZssefJMboLxtOCmkdpLMy
PHJDGWdnphqDjKvPku0VDpdHCekz24CGlqlG9m3ONH9F1Ic+rQwS/mDPKJdo8Jo0
2EKxIzXRuQOZQg3ZvmOTfgbn9pwzKp44eaOrTpifvERhofS9JdjAyi9zURmsVVex
LuabaBT4OkHzfZaGOa7JoOKM6VvPWwKIotrYzMdwyN8punbKXA1HobPa9kf2bNyU
VQwJycGT0BB2E1Et1/lAfmzcb7PW/f3d8ESSlxM+TeYIE80fyzA71tmESkJuxZLt
qHj4TXsWr+c9FqaqzyN2CF60PLYdhv9glClkKtO37Qh3wy6d8aCZ7K50WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIkddZ8Azjd6QwtXLHXDEjcNEqZMB8GA1UdIwQY
MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt
M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0
LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeM940Db
C0S0bLmzaaeFRSMbJCp89bAzZlMkYKnO+rJDJXPFNTKUzf/eBD111TEf4+ucGeDk
/ISP/neFKzEWCYej7R9UNl+vgZXQFI3UEkePnFe+uc1SWkrqH82Mc3AqxU9oRPU5
G6vcWgKa+bj//ndCUaegYVVov/xRUmRikmV6HYhJUtFY06DpwoCb5OPVOzSefnk0
Oq8EY0x+hYd+RpE8nyjiksZ0Nld0S403kOvdmxA0jaORm9/e0TfHKu7TQaFpNW0Q
1mTZIlSrBMVt5bM2a3iwnrKKd4vE0YHZgWSREZmE8txbqdzu9w+QMBcAS48IAyhM
z5ZpbxhliMlMXw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:52 2025 by rpki-client