Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: NWImbqo0XoLoY2i/YkPvZi8WRuSEM/QhrpMgNR5wQ+Y=
Subject key identifier: 8F:F1:6B:E5:A6:B1:47:6D:78:AD:0F:A9:03:1F:63:97:EB:33:0D:9A
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 01968C5D21D47DF79646FA513DC7473FAFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 0F80
Signing time: Thu 01 May 2025 15:00:35 +0000
Manifest this update: Thu 01 May 2025 15:00:35 +0000
Manifest next update: Fri 02 May 2025 15:00:35 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: xyAMfebsc+YTEm5u0B+EbWpn5SxlLcSgH8MsCbmPRfQ=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:5d:21:d4:7d:f7:96:46:fa:51:3d:c7:47:3f:af:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: May 1 15:00:35 2025 GMT
Not After : May 2 15:00:35 2025 GMT
Subject: CN=8ff16be5a6b1476d78ad0fa9031f6397eb330d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:88:22:3c:a2:4e:45:a2:ae:5d:1a:e0:71:
bb:20:ab:ff:63:16:a1:47:42:ca:d3:b8:8b:e8:bf:
ea:74:78:41:a4:e7:38:f0:0b:1b:cf:db:22:6b:1a:
67:6a:55:5a:f0:32:bb:71:66:26:c4:fc:81:82:08:
71:aa:b1:78:be:e6:76:ef:41:65:e6:8c:48:9c:05:
c3:76:bf:c0:ae:2a:32:6a:ed:8d:d6:a6:66:9d:05:
ef:bc:6f:d1:9e:2f:1a:da:c5:87:d0:86:c3:04:c7:
c6:d8:00:c6:59:82:20:74:24:fb:be:f4:7b:ab:7a:
11:3e:5a:a8:aa:b1:49:02:d8:ab:5f:0d:a0:11:f2:
f0:1f:cd:36:53:c0:c4:6c:c8:61:b4:e2:3a:af:22:
77:92:6a:80:11:98:d4:5a:d7:e1:68:0b:df:d8:8c:
bf:c1:37:d1:69:ac:06:b7:75:09:0d:88:1e:49:4e:
e0:a6:e4:6b:8f:0a:57:54:5b:dc:6a:01:7f:07:c6:
c5:09:d6:cd:c8:5e:35:89:71:85:d4:71:30:eb:8b:
60:9b:f8:e1:ea:2d:bb:3f:b9:84:a1:69:1d:b0:35:
26:f7:d4:5e:e7:a0:8a:4e:05:96:b6:d0:ac:d7:89:
66:0a:ed:5c:c5:8e:3d:0a:ea:4f:43:58:09:c0:fb:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:6B:E5:A6:B1:47:6D:78:AD:0F:A9:03:1F:63:97:EB:33:0D:9A
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:15:76:35:df:eb:f3:03:86:a8:7a:4b:cc:fc:ef:ea:07:f2:
3c:06:cc:39:59:01:58:24:0d:06:c6:a8:d0:bd:58:61:6e:cf:
d6:f2:8b:45:3a:e0:64:9d:b5:eb:22:aa:73:5a:b6:0c:1a:56:
48:33:f1:d7:6b:ed:63:5a:d0:eb:95:90:d2:d7:89:59:33:2c:
2b:bb:7b:3e:a5:97:16:6c:2f:3f:3f:17:a4:e8:10:c8:1a:42:
92:49:9b:fe:c2:de:ad:c2:91:76:ac:95:89:80:97:f5:40:06:
51:e0:99:17:99:b9:71:a6:bc:6f:6a:15:04:64:26:3e:c7:3c:
0a:fc:2d:03:2e:f2:f8:a6:45:b8:f9:21:18:20:99:4a:bb:bb:
c5:ca:c9:43:48:d4:62:1b:b8:3a:ad:05:c5:2a:d8:bf:27:6e:
e2:0f:6e:60:53:b4:7c:d0:10:f9:cf:0d:ec:27:1b:2f:61:34:
dc:00:b5:d7:48:96:5e:0e:4d:5f:e8:8f:31:17:f6:73:0f:c4:
49:e3:3f:6d:b8:00:02:8c:86:a9:7d:7a:07:08:e7:6e:75:5d:
48:cc:13:8d:72:cb:a1:2e:bb:83:89:eb:33:a6:a5:d1:13:24:
6c:ab:b8:96:81:5e:35:95:5f:c3:55:23:f8:23:0f:41:65:77:
67:67:76:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMXSHUffeWRvpRPcdHP6/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi
MjMxOTUwHhcNMjUwNTAxMTUwMDM1WhcNMjUwNTAyMTUwMDM1WjAzMTEwLwYDVQQD
Eyg4ZmYxNmJlNWE2YjE0NzZkNzhhZDBmYTkwMzFmNjM5N2ViMzMwZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxyIIjyiTkWirl0a4HG7IKv/Yxah
R0LK07iL6L/qdHhBpOc48Asbz9siaxpnalVa8DK7cWYmxPyBgghxqrF4vuZ270Fl
5oxInAXDdr/Arioyau2N1qZmnQXvvG/Rni8a2sWH0IbDBMfG2ADGWYIgdCT7vvR7
q3oRPlqoqrFJAtirXw2gEfLwH802U8DEbMhhtOI6ryJ3kmqAEZjUWtfhaAvf2Iy/
wTfRaawGt3UJDYgeSU7gpuRrjwpXVFvcagF/B8bFCdbNyF41iXGF1HEw64tgm/jh
6i27P7mEoWkdsDUm99Re56CKTgWWttCs14lmCu1cxY49CupPQ1gJwPtYqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/xa+WmsUdteK0PqQMfY5frMw2aMB8GA1UdIwQY
MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt
NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl
LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRV2Nd/r
8wOGqHpLzPzv6gfyPAbMOVkBWCQNBsao0L1YYW7P1vKLRTrgZJ216yKqc1q2DBpW
SDPx12vtY1rQ65WQ0teJWTMsK7t7PqWXFmwvPz8XpOgQyBpCkkmb/sLercKRdqyV
iYCX9UAGUeCZF5m5caa8b2oVBGQmPsc8CvwtAy7y+KZFuPkhGCCZSru7xcrJQ0jU
Yhu4Oq0FxSrYvydu4g9uYFO0fNAQ+c8N7CcbL2E03AC110iWXg5NX+iPMRf2cw/E
SeM/bbgAAoyGqX16BwjnbnVdSMwTjXLLoS67g4nrM6al0RMkbKu4loFeNZVfw1Uj
+CMPQWV3Z2d2Sw==
-----END CERTIFICATE-----
Generated at Thu May 1 20:59:04 2025 by rpki-client