Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier: mPzAo4Akq1GlVsK6DWWhZk2Npg/mtwQP/JZg0MvJ/Kg=
Subject key identifier: A0:DA:35:60:BE:BF:5C:C6:C6:1E:AA:15:DA:8E:E1:05:6A:66:35:AF
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 019685118BE75EAA118439017A69F30C1C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 05:00:41 +0000
Manifest this update: Wed 30 Apr 2025 05:00:41 +0000
Manifest next update: Thu 01 May 2025 05:00:41 +0000
Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: FiDI5bLS0L6nZ4papB8fk6t8As7cAnzQ3dcfVESvabI=)
2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:8b:e7:5e:aa:11:84:39:01:7a:69:f3:0c:1c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Apr 30 05:00:41 2025 GMT
Not After : May 1 05:00:41 2025 GMT
Subject: CN=a0da3560bebf5cc6c61eaa15da8ee1056a6635af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:63:ed:c9:91:c1:e5:07:8a:8a:cb:f8:a8:
40:86:cd:95:f9:79:f7:ce:52:09:67:37:78:2e:99:
76:3e:06:8a:32:f7:ba:8f:05:38:35:f5:8a:63:ba:
61:50:fd:3d:d1:3e:32:f6:00:05:b5:b6:3a:e4:11:
c2:11:f0:87:58:79:2f:ef:ac:3e:64:dc:56:50:18:
c0:fd:74:c0:5a:1d:5f:57:07:fe:50:a3:32:4e:7a:
bd:43:e6:11:f6:71:00:93:eb:29:16:25:bf:71:30:
56:57:e1:0b:bf:bf:84:d9:79:74:ed:3f:96:89:a9:
c1:65:c3:af:92:cd:44:de:d8:ae:8f:51:0d:7e:d6:
75:5e:c0:d0:d9:09:0d:61:5a:4d:f7:0c:66:47:fb:
b6:5c:96:c5:31:a8:a6:95:cf:c7:6d:78:f5:14:25:
28:ce:6c:f9:81:c6:c8:5e:6f:4b:c3:68:0e:e0:f8:
73:02:f9:1e:e2:ec:c6:2d:7e:70:a0:24:d7:a4:cd:
8d:f3:b9:bc:0f:c8:0b:cb:21:a6:07:23:60:f5:4a:
4c:56:bc:0a:55:2f:14:ae:d3:86:06:25:75:bd:8e:
ca:5a:e4:d6:7a:e1:72:70:ad:dd:ab:39:f6:9b:9c:
ff:ee:bb:70:ba:20:c9:67:b6:3e:8c:3a:59:8b:87:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DA:35:60:BE:BF:5C:C6:C6:1E:AA:15:DA:8E:E1:05:6A:66:35:AF
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:df:29:7e:dd:d4:51:8e:c3:ea:27:02:ed:9c:06:fb:ac:f1:
b7:c5:10:06:12:df:7a:b5:d9:b3:6e:2d:03:7d:cc:48:29:fa:
17:ef:3c:79:e5:cf:99:98:7b:78:2c:9c:06:9f:14:43:8a:e0:
6d:25:16:4e:04:ef:bb:46:30:6a:25:87:4f:b9:a4:65:78:84:
90:65:9f:1e:66:3d:17:98:d6:55:50:e3:49:26:71:8b:1a:ba:
35:24:28:53:79:f3:ba:4f:4e:50:ba:ec:83:a5:e7:7b:05:f8:
74:71:4b:54:7f:77:3c:a0:4e:87:9c:d4:8c:99:0c:ff:1d:53:
8e:6b:93:be:64:19:f8:e4:f5:0b:74:78:77:d0:76:ee:f9:80:
a4:fb:40:7a:f2:66:4b:fc:85:0d:bc:21:c5:a1:0c:f9:26:3b:
7c:df:98:af:ca:c4:75:6f:86:98:b3:56:fe:f7:ea:cb:bf:19:
8a:5c:9b:2d:d2:60:dd:95:78:75:47:24:47:60:25:c2:12:d2:
ed:6c:08:3b:60:77:7a:02:64:84:3a:0f:9e:3e:65:d6:36:d3:
8c:12:fb:18:6c:7c:1c:09:d7:10:48:d7:ca:7d:0f:47:42:89:
85:a6:5c:9b:8a:4e:c1:76:b7:ad:d8:2b:f3:83:09:50:19:63:
c3:df:74:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFEYvnXqoRhDkBemnzDBwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzg5MzM3NWFkMTU1YjVmZmNlZDNjYmVlMjUzNWI4NjU5
ZmUzODkwHhcNMjUwNDMwMDUwMDQxWhcNMjUwNTAxMDUwMDQxWjAzMTEwLwYDVQQD
EyhhMGRhMzU2MGJlYmY1Y2M2YzYxZWFhMTVkYThlZTEwNTZhNjYzNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvblj7cmRweUHiorL+KhAhs2V+Xn3
zlIJZzd4Lpl2PgaKMve6jwU4NfWKY7phUP090T4y9gAFtbY65BHCEfCHWHkv76w+
ZNxWUBjA/XTAWh1fVwf+UKMyTnq9Q+YR9nEAk+spFiW/cTBWV+ELv7+E2Xl07T+W
ianBZcOvks1E3tiuj1ENftZ1XsDQ2QkNYVpN9wxmR/u2XJbFMaimlc/HbXj1FCUo
zmz5gcbIXm9Lw2gO4PhzAvke4uzGLX5woCTXpM2N87m8D8gLyyGmByNg9UpMVrwK
VS8UrtOGBiV1vY7KWuTWeuFycK3dqzn2m5z/7rtwuiDJZ7Y+jDpZi4dtvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDaNWC+v1zGxh6qFdqO4QVqZjWvMB8GA1UdIwQY
MBaAFAvIkzda0VW1/87Ty+4lNbhln+OJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUt
MGVkMDc4ZjRiY2FmLzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUtMGVkMDc4ZjRiY2Fm
LzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWt8pft3U
UY7D6icC7ZwG+6zxt8UQBhLferXZs24tA33MSCn6F+88eeXPmZh7eCycBp8UQ4rg
bSUWTgTvu0YwaiWHT7mkZXiEkGWfHmY9F5jWVVDjSSZxixq6NSQoU3nzuk9OULrs
g6XnewX4dHFLVH93PKBOh5zUjJkM/x1TjmuTvmQZ+OT1C3R4d9B27vmApPtAevJm
S/yFDbwhxaEM+SY7fN+Yr8rEdW+GmLNW/vfqy78ZilybLdJg3ZV4dUckR2AlwhLS
7WwIO2B3egJkhDoPnj5l1jbTjBL7GGx8HAnXEEjXyn0PR0KJhaZcm4pOwXa3rdgr
84MJUBljw990UA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:14:56 2025 by rpki-client