Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: WLNgNhlpoXixFA0oOYk+f3hh7ot7dwnGdcRL8piG4Yk=
Subject key identifier: A8:AE:38:55:DA:64:E4:E2:EA:19:FA:38:86:F6:76:F2:CE:B6:75:51
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 0196794465F94AA8102810C007CE14656ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0DCF
Signing time: Sun 27 Apr 2025 22:00:47 +0000
Manifest this update: Sun 27 Apr 2025 22:00:47 +0000
Manifest next update: Mon 28 Apr 2025 22:00:47 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: wo6wwDrzmEax0Em/dbqsFOOUEMvANxwDjubJJBGU6HI=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:65:f9:4a:a8:10:28:10:c0:07:ce:14:65:6e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Apr 27 22:00:47 2025 GMT
Not After : Apr 28 22:00:47 2025 GMT
Subject: CN=a8ae3855da64e4e2ea19fa3886f676f2ceb67551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:b2:df:6e:ed:8d:9c:ef:c7:1f:16:a6:c6:
f7:6a:c3:9f:31:bb:a1:a3:7e:47:26:ed:3c:1c:7a:
10:72:a3:43:05:48:15:34:e5:e0:32:ee:f4:ae:ba:
5d:09:b2:6e:fd:22:96:08:77:c9:a9:3b:d6:28:24:
65:6c:f8:f5:a7:82:a7:a6:d9:fe:7d:7e:01:4d:68:
78:12:2d:73:8b:c6:5e:5e:2e:e8:ff:4d:e2:aa:8e:
fa:f5:63:4e:1b:ac:83:74:26:bf:6e:6e:a0:a2:3a:
47:98:cc:8c:71:c0:a0:a4:c8:30:0b:41:66:c5:4e:
0d:a8:ea:e2:8d:24:6f:15:b3:be:cb:26:9f:c7:20:
b9:3e:14:0b:73:87:ed:36:2e:38:11:38:d7:e3:f2:
ee:61:9a:1b:8d:15:7e:c3:18:53:07:e5:83:79:79:
59:ce:ab:b5:da:34:e6:f6:de:9f:38:b5:86:d0:59:
be:a3:24:79:55:16:8f:73:e0:3c:8b:ca:af:2c:df:
db:b5:4c:d4:eb:4f:c0:b1:e1:89:9c:09:cb:2c:34:
b2:69:bc:9c:96:5e:6e:4f:0c:93:8a:95:17:5a:93:
79:3f:87:e0:b1:a5:b0:25:7c:d6:16:dd:1b:54:51:
31:91:bd:0e:1b:74:c2:37:34:58:9b:80:46:c0:e6:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:38:55:DA:64:E4:E2:EA:19:FA:38:86:F6:76:F2:CE:B6:75:51
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f8:a9:02:d1:ae:d5:1c:39:57:9e:d4:58:54:1e:b0:aa:6f:
51:a3:bf:d4:71:74:f4:a4:86:59:e7:8a:b7:65:28:54:bb:f2:
e2:65:16:74:e3:9c:dc:8e:74:45:c1:03:12:b8:4b:c5:fa:d7:
8b:43:ef:6d:7b:ad:0f:96:45:b5:d9:a3:04:1c:79:95:12:6a:
ae:48:ac:ad:b5:89:8d:3b:c5:f6:8d:b6:28:2d:05:bf:b2:29:
59:f1:23:4f:39:11:bf:e2:b4:2b:c7:75:ff:ec:61:69:97:86:
1b:2a:9b:ec:45:66:fc:b4:ee:ee:0d:fe:a0:24:ec:63:f6:8a:
c5:c7:fe:c3:f5:74:4f:dc:b9:b1:40:12:a3:c6:cd:96:a6:3d:
46:93:54:47:86:3a:a5:c1:dd:70:ab:95:30:72:57:a2:dc:5f:
d7:ed:48:74:9a:ac:4c:39:6e:11:44:78:01:c1:68:19:a8:98:
8e:b6:66:e4:73:6c:bb:c5:ac:97:0d:b4:af:ea:e2:5c:9e:87:
2b:a8:48:de:99:af:33:4d:94:98:2e:a9:56:c0:8e:46:06:af:
4f:7c:a7:57:af:df:5a:48:ae:36:2b:68:6d:24:08:70:f2:2e:
ce:60:4b:36:eb:0c:03:13:8b:14:20:5a:fc:8f:b5:aa:56:5b:
16:5e:8c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5RGX5SqgQKBDAB84UZW7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi
ODgzYzQwHhcNMjUwNDI3MjIwMDQ3WhcNMjUwNDI4MjIwMDQ3WjAzMTEwLwYDVQQD
EyhhOGFlMzg1NWRhNjRlNGUyZWExOWZhMzg4NmY2NzZmMmNlYjY3NTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokey327tjZzvxx8Wpsb3asOfMbuh
o35HJu08HHoQcqNDBUgVNOXgMu70rrpdCbJu/SKWCHfJqTvWKCRlbPj1p4Knptn+
fX4BTWh4Ei1zi8ZeXi7o/03iqo769WNOG6yDdCa/bm6gojpHmMyMccCgpMgwC0Fm
xU4NqOrijSRvFbO+yyafxyC5PhQLc4ftNi44ETjX4/LuYZobjRV+wxhTB+WDeXlZ
zqu12jTm9t6fOLWG0Fm+oyR5VRaPc+A8i8qvLN/btUzU60/AseGJnAnLLDSyabyc
ll5uTwyTipUXWpN5P4fgsaWwJXzWFt0bVFExkb0OG3TCNzRYm4BGwOZFDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiuOFXaZOTi6hn6OIb2dvLOtnVRMB8GA1UdIwQY
MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt
OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz
LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/ipAtGu
1Rw5V57UWFQesKpvUaO/1HF09KSGWeeKt2UoVLvy4mUWdOOc3I50RcEDErhLxfrX
i0PvbXutD5ZFtdmjBBx5lRJqrkisrbWJjTvF9o22KC0Fv7IpWfEjTzkRv+K0K8d1
/+xhaZeGGyqb7EVm/LTu7g3+oCTsY/aKxcf+w/V0T9y5sUASo8bNlqY9RpNUR4Y6
pcHdcKuVMHJXotxf1+1IdJqsTDluEUR4AcFoGaiYjrZm5HNsu8Wslw20r+riXJ6H
K6hI3pmvM02UmC6pVsCORgavT3ynV6/fWkiuNitobSQIcPIuzmBLNusMAxOLFCBa
/I+1qlZbFl6MyA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:14:36 2025 by rpki-client