Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: aBW+GMLxKBj1HSZGvucxo8x8zCoYWevmgGpLLzi1kt8=
Subject key identifier: A7:88:3B:B4:73:7A:61:85:63:70:45:A0:00:38:53:70:8F:84:95:20
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 0196911607B9E0E4524D91DC7EB2B3780D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 1409
Signing time: Fri 02 May 2025 13:01:02 +0000
Manifest this update: Fri 02 May 2025 13:01:02 +0000
Manifest next update: Sat 03 May 2025 13:01:02 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: 2G3K/rfw9133OdyuLVKTsLPQkqWtHfRwZukcUTPU0vg=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:07:b9:e0:e4:52:4d:91:dc:7e:b2:b3:78:0d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: May 2 13:01:02 2025 GMT
Not After : May 3 13:01:02 2025 GMT
Subject: CN=a7883bb4737a6185637045a0003853708f849520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:03:d0:dd:4b:88:1f:22:e4:57:38:da:fc:
69:3c:5b:14:3b:24:4b:ac:db:de:4b:d7:4b:e4:e2:
8f:ae:de:55:95:a3:f4:da:f4:30:de:26:ed:c0:4e:
1f:be:69:12:9a:ab:40:a1:96:dc:22:57:a4:1c:fc:
82:99:20:e1:96:d0:3f:a2:27:54:62:aa:ce:41:6f:
9d:e6:40:c1:43:b2:ac:48:51:cf:db:63:f2:1d:48:
46:7f:54:cf:2a:8d:4f:5e:cc:da:a8:c1:ad:55:fb:
92:98:8f:3b:7a:45:8d:9d:68:3d:a1:e3:83:a7:79:
ec:14:a4:cd:fc:38:51:70:7d:1a:c4:eb:d1:f4:0d:
d8:f2:3c:b9:48:05:c5:1b:ea:4f:69:e7:26:23:55:
c3:ce:e4:09:64:df:3f:08:cd:23:45:3f:2b:1b:61:
68:7c:b7:fb:31:0e:1c:42:1c:f8:be:3c:52:57:ed:
ad:6f:50:be:fc:2c:f9:f4:45:ba:88:90:a2:85:b2:
b0:6d:35:8a:68:52:ed:1e:6e:0b:0a:f9:e7:66:75:
fa:e3:17:fd:f4:ab:a2:32:bd:0c:6a:d4:09:0e:6e:
5f:3d:6d:ad:49:50:18:34:aa:8b:c4:e3:80:96:b2:
de:07:86:40:53:ab:f7:6b:db:22:ba:6a:40:61:be:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:3B:B4:73:7A:61:85:63:70:45:A0:00:38:53:70:8F:84:95:20
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d7:01:02:16:1f:4a:9b:fe:c2:00:e4:22:9b:73:1a:81:a0:
f6:3c:60:c4:57:6f:db:33:8f:a2:e3:3f:9f:cc:61:e5:70:75:
a4:d6:c0:f0:31:e3:1f:04:12:f6:64:7f:7a:17:0b:3f:28:37:
66:28:ac:da:49:ba:dc:27:06:0b:b7:3f:98:64:df:e5:47:36:
10:02:50:6e:f9:ae:ee:5d:8f:37:29:95:0a:8b:58:db:88:17:
e0:7e:b4:45:1d:62:3b:ab:24:dc:89:02:df:14:66:2e:92:8d:
e5:99:9e:fd:0c:fd:43:d4:9b:83:0e:f4:d7:3c:6e:43:7b:fd:
79:73:fb:b0:69:47:54:52:43:4a:69:b9:c6:25:90:ad:c3:f2:
1c:8c:f0:cb:47:04:2b:33:15:df:10:d0:c6:f8:60:d4:01:6d:
6e:57:51:e2:29:22:76:ef:2a:d8:d2:3a:69:2b:19:37:79:6d:
c2:c8:95:ef:8c:ce:06:a8:18:30:1d:24:57:a3:b3:0f:c5:ef:
7d:a9:77:8f:bf:e8:ec:f0:3a:54:67:ca:05:6d:a8:1c:39:c7:
33:c2:c3:bb:df:c5:06:45:5b:dd:ab:a4:da:f9:9e:71:61:8d:
a5:55:d3:3d:b1:eb:c3:b0:4b:0f:6c:04:08:2a:cf:35:43:64:
67:20:c8:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRFge54ORSTZHcfrKzeA1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMmIxYjY4ZWExMDkzYmNlZTc4ZDA3MTkyZTZkOGMzZjcw
MzAyY2YwHhcNMjUwNTAyMTMwMTAyWhcNMjUwNTAzMTMwMTAyWjAzMTEwLwYDVQQD
EyhhNzg4M2JiNDczN2E2MTg1NjM3MDQ1YTAwMDM4NTM3MDhmODQ5NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01oD0N1LiB8i5Fc42vxpPFsUOyRL
rNveS9dL5OKPrt5VlaP02vQw3ibtwE4fvmkSmqtAoZbcIlekHPyCmSDhltA/oidU
YqrOQW+d5kDBQ7KsSFHP22PyHUhGf1TPKo1PXszaqMGtVfuSmI87ekWNnWg9oeOD
p3nsFKTN/DhRcH0axOvR9A3Y8jy5SAXFG+pPaecmI1XDzuQJZN8/CM0jRT8rG2Fo
fLf7MQ4cQhz4vjxSV+2tb1C+/Cz59EW6iJCihbKwbTWKaFLtHm4LCvnnZnX64xf9
9KuiMr0MatQJDm5fPW2tSVAYNKqLxOOAlrLeB4ZAU6v3a9siumpAYb55twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeIO7RzemGFY3BFoAA4U3CPhJUgMB8GA1UdIwQY
MBaAFPErG2jqEJO87njQcZLm2MP3AwLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNzYmFPb1FrN3p1ZU5CeGt1Yll3X2NEQXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNDg3NWMtZjE1OS00NjRmLWE4YTct
MTExOWI3ZmVkZmVjLzEvOFNzYmFPb1FrN3p1ZU5CeGt1Yll3X2NEQXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNDg3NWMtZjE1OS00NjRmLWE4YTctMTExOWI3ZmVkZmVj
LzEvOFNzYmFPb1FrN3p1ZU5CeGt1Yll3X2NEQXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9cBAhYf
Spv+wgDkIptzGoGg9jxgxFdv2zOPouM/n8xh5XB1pNbA8DHjHwQS9mR/ehcLPyg3
Ziis2km63CcGC7c/mGTf5Uc2EAJQbvmu7l2PNymVCotY24gX4H60RR1iO6sk3IkC
3xRmLpKN5Zme/Qz9Q9Sbgw701zxuQ3v9eXP7sGlHVFJDSmm5xiWQrcPyHIzwy0cE
KzMV3xDQxvhg1AFtbldR4ikidu8q2NI6aSsZN3ltwsiV74zOBqgYMB0kV6OzD8Xv
fal3j7/o7PA6VGfKBW2oHDnHM8LDu9/FBkVb3auk2vmecWGNpVXTPbHrw7BLD2wE
CCrPNUNkZyDIdg==
-----END CERTIFICATE-----
Generated at Fri May 2 15:00:48 2025 by rpki-client