Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json)
Hash identifier: kEX1HhBtN/51rTDoJtmcYRsH8EgrdA1DpElZ0IP+oFc=
Subject key identifier: 01:D5:69:5C:DA:30:70:33:4B:F3:2A:E7:56:BA:4D:41:86:7B:DB:F0
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial: 0196790D494A9948D9F25496D35E681F7F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
Manifest number: CE
Signing time: Sun 27 Apr 2025 21:00:35 +0000
Manifest this update: Sun 27 Apr 2025 21:00:35 +0000
Manifest next update: Mon 28 Apr 2025 21:00:35 +0000
Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: zyEWtEREUgqOg5oBqWkPg4ZOScN1s3XK0ANlxjLyVsA=)
2: vAn1hXUKdqSNmKMN5EpP_udaSvg.roa (hash: KSkyWrBwmDHasLhukMvu07oX0o0MiqrtLLWwQJGc7Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:49:4a:99:48:d9:f2:54:96:d3:5e:68:1f:7f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Validity
Not Before: Apr 27 21:00:35 2025 GMT
Not After : Apr 28 21:00:35 2025 GMT
Subject: CN=01d5695cda3070334bf32ae756ba4d41867bdbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:47:ce:97:1b:b8:a8:ae:52:4a:75:dd:c1:
92:1a:30:fa:09:5f:ab:d1:22:ae:28:a1:4f:38:62:
f0:6d:54:73:35:fd:a3:c9:0d:1b:0a:58:1d:ea:1b:
51:a3:8b:52:f5:06:86:fe:20:ee:4c:69:b2:84:98:
84:4b:b0:ab:54:4c:2b:ca:91:1b:04:c2:aa:92:62:
ce:e2:35:6e:55:20:6a:3c:40:fa:4f:9f:66:98:39:
93:91:84:fc:1d:85:e6:f2:38:13:f2:28:d6:c9:f5:
e3:80:4c:54:56:44:12:ad:19:aa:40:94:f6:be:03:
85:3a:a0:8c:60:04:07:69:a1:0f:fe:44:8f:7d:23:
d3:30:3b:61:54:07:b3:94:46:2b:52:0f:dd:f1:ca:
23:b8:0e:04:9e:01:c0:3b:f8:5f:0d:95:d7:11:5f:
0e:a4:af:23:15:80:c6:01:fa:2e:d8:49:aa:2d:cd:
43:a6:ee:85:69:5a:f3:fb:fc:f6:61:29:e2:d0:0b:
8d:a6:e5:0e:32:0f:b7:2e:28:3e:8c:10:0d:5a:a7:
3f:13:a9:fb:27:f4:cc:49:80:3f:12:94:ea:c2:e9:
ff:11:18:88:6d:0c:b9:9d:01:50:9d:7f:c0:d7:1b:
99:ab:60:c3:1c:40:1f:e3:23:36:8e:b9:a3:c3:45:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:69:5C:DA:30:70:33:4B:F3:2A:E7:56:BA:4D:41:86:7B:DB:F0
X509v3 Authority Key Identifier:
keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d4:bd:88:ec:56:79:7a:22:2b:47:3a:a1:92:92:fd:66:a0:
25:7c:ee:e8:2a:00:0e:67:e7:4e:f6:00:4b:f3:08:3a:d6:cc:
00:df:0c:a9:3e:39:f6:e0:c7:78:16:04:bd:8d:79:2e:94:96:
9f:24:24:d9:38:4e:f3:f3:36:db:a7:da:63:e9:3e:c6:a5:0c:
98:c4:c9:1d:88:bd:3e:9a:93:0e:17:c9:2d:eb:d3:4b:47:f8:
39:98:73:86:c7:3f:18:cf:eb:72:07:af:b2:eb:ee:23:c2:6e:
64:28:4c:81:cd:63:56:a5:51:3b:da:5b:79:95:21:ce:92:cf:
81:14:df:eb:c7:f0:cd:53:77:bc:78:81:0b:80:cf:8b:0c:9b:
91:bc:3c:d1:56:3b:d4:b2:17:13:fb:b1:e2:bc:de:b9:ad:95:
94:27:0a:ed:5a:d2:5a:b8:45:78:02:22:6b:0e:3c:f8:3a:11:
dc:e7:c7:7a:6a:43:c2:6e:68:43:98:1c:28:32:49:2e:2d:34:
df:d6:26:88:99:17:28:a4:9e:30:b0:2d:cc:30:e5:bd:20:05:
6d:03:71:cf:9e:1b:6b:1f:56:3e:9a:cb:fa:cb:03:ba:d8:2f:
df:34:43:be:1b:a8:07:cb:dd:b7:23:65:8f:56:49:cc:0d:1f:
d9:ca:eb:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5DUlKmUjZ8lSW015oH39pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDMyM2FkNDhmNWE0NWJiY2E5ZTg3OTg4M2ZhZTkzMTRi
NThlOWQwHhcNMjUwNDI3MjEwMDM1WhcNMjUwNDI4MjEwMDM1WjAzMTEwLwYDVQQD
EygwMWQ1Njk1Y2RhMzA3MDMzNGJmMzJhZTc1NmJhNGQ0MTg2N2JkYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo5HzpcbuKiuUkp13cGSGjD6CV+r
0SKuKKFPOGLwbVRzNf2jyQ0bClgd6htRo4tS9QaG/iDuTGmyhJiES7CrVEwrypEb
BMKqkmLO4jVuVSBqPED6T59mmDmTkYT8HYXm8jgT8ijWyfXjgExUVkQSrRmqQJT2
vgOFOqCMYAQHaaEP/kSPfSPTMDthVAezlEYrUg/d8cojuA4EngHAO/hfDZXXEV8O
pK8jFYDGAfou2EmqLc1Dpu6FaVrz+/z2YSni0AuNpuUOMg+3Lig+jBANWqc/E6n7
J/TMSYA/EpTqwun/ERiIbQy5nQFQnX/A1xuZq2DDHEAf4yM2jrmjw0XvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHVaVzaMHAzS/Mq51a6TUGGe9vwMB8GA1UdIwQY
MBaAFPDTI61I9aRbvKnoeYg/rpMUtY6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTIt
NWZhYmQ2ZGM1ZjkzLzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTItNWZhYmQ2ZGM1Zjkz
LzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9S9iOxW
eXoiK0c6oZKS/WagJXzu6CoADmfnTvYAS/MIOtbMAN8MqT459uDHeBYEvY15LpSW
nyQk2ThO8/M226faY+k+xqUMmMTJHYi9PpqTDhfJLevTS0f4OZhzhsc/GM/rcgev
suvuI8JuZChMgc1jVqVRO9pbeZUhzpLPgRTf68fwzVN3vHiBC4DPiwybkbw80VY7
1LIXE/ux4rzeua2VlCcK7VrSWrhFeAIiaw48+DoR3OfHempDwm5oQ5gcKDJJLi00
39YmiJkXKKSeMLAtzDDlvSAFbQNxz54bax9WPprL+ssDutgv3zRDvhuoB8vdtyNl
j1ZJzA0f2crrsw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:28:54 2025 by rpki-client