Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: JLutrcrdpniESKIIxIsRizEiPsb86/9/CVzg+RtdZCE=
Subject key identifier: A7:AE:D6:96:7D:16:ED:B9:50:59:D1:BE:D8:F7:05:2C:3F:72:E5:48
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 019671C21722E9554A980BCD9D6931D8AC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1512
Signing time: Sat 26 Apr 2025 11:01:07 +0000
Manifest this update: Sat 26 Apr 2025 11:01:07 +0000
Manifest next update: Sun 27 Apr 2025 11:01:07 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: rvw2sYCfaN9Nb8kAyi8vWh5J7A+8SHXAYDMUuf28wjc=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:17:22:e9:55:4a:98:0b:cd:9d:69:31:d8:ac:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Apr 26 11:01:07 2025 GMT
Not After : Apr 27 11:01:07 2025 GMT
Subject: CN=a7aed6967d16edb95059d1bed8f7052c3f72e548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c8:86:57:d0:a4:49:fa:a5:b8:50:f0:00:86:
27:2d:4d:60:9d:92:a8:67:bf:48:89:d4:9b:9f:45:
d4:6d:5d:ac:6d:94:bf:e2:4c:cd:09:cb:2b:0e:58:
6c:4b:8a:2b:c6:dd:6a:e7:9f:15:ee:9c:bf:08:91:
00:93:7e:eb:f8:eb:ed:76:97:4c:c4:60:ac:5c:fe:
04:9a:b9:3b:2e:fa:91:ae:be:6e:76:44:32:64:c3:
98:6e:e8:30:e8:2f:85:93:08:a4:3f:38:5a:31:44:
35:c6:16:2c:d0:d2:15:a0:71:91:f5:0c:21:cc:e0:
52:82:cb:4c:c6:e4:35:7a:31:71:b6:57:64:ae:4b:
96:31:38:b8:6f:6b:1d:ba:1f:1e:61:19:b2:f0:07:
cf:48:92:73:08:90:0a:22:2f:85:7f:0f:a0:a4:90:
b8:cb:22:f6:74:6a:c5:fb:92:6b:6f:f6:fd:50:b0:
45:3d:91:98:8d:bb:8e:bd:2d:e7:b9:b7:0f:e1:13:
51:27:94:c5:c4:3e:02:88:11:1f:83:20:48:f7:2f:
5e:71:f6:f8:e4:71:67:dd:33:49:62:aa:e0:4f:ff:
fc:ca:99:d5:c6:33:d1:e9:60:01:ca:98:2d:ab:34:
fa:3b:68:85:97:b8:81:e6:bf:3f:8d:6d:30:10:b5:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AE:D6:96:7D:16:ED:B9:50:59:D1:BE:D8:F7:05:2C:3F:72:E5:48
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4f:b2:aa:3c:ba:44:ac:1d:4e:8d:16:ef:b0:f7:ac:5b:7c:
a9:3c:ca:0f:33:5b:ec:0a:51:05:4c:ad:70:bf:14:4d:08:3e:
0a:1e:a1:79:3c:83:f1:7c:5f:a1:52:64:f8:b8:e8:67:e1:3a:
60:d7:d6:41:5a:d0:20:05:d4:76:53:74:32:7b:76:c0:f4:62:
73:8b:76:f8:c3:d2:8d:86:6b:ad:ac:96:1b:05:d5:33:9a:fa:
aa:8d:f2:83:b7:d9:38:7d:b6:b8:8b:0f:40:b2:f0:fe:56:4e:
4a:13:c5:89:fc:63:d3:9c:35:76:cf:76:2b:8b:57:a4:b1:b6:
d5:dc:da:7d:a3:4d:75:2a:db:74:e4:33:4d:b1:82:5b:e3:8c:
4b:59:8f:f1:2f:75:96:a2:74:35:1e:68:c7:0e:07:b1:33:f5:
b5:f3:33:b8:76:81:2f:ae:05:9b:dd:04:59:6e:2f:18:a0:e0:
da:a7:c5:ea:25:27:1a:46:f2:c9:da:63:20:cb:b1:62:47:1d:
0d:8e:64:a9:29:b5:58:f0:b6:2f:49:13:7f:79:45:2a:d8:46:
e8:31:40:5b:61:7d:10:0d:b4:3e:bd:57:54:14:58:d5:91:d9:
15:3a:11:e8:3b:b0:74:e8:85:a6:14:04:5d:11:aa:1a:05:50:
e3:3d:04:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwhci6VVKmAvNnWkx2KwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh
MWQwMzQwHhcNMjUwNDI2MTEwMTA3WhcNMjUwNDI3MTEwMTA3WjAzMTEwLwYDVQQD
EyhhN2FlZDY5NjdkMTZlZGI5NTA1OWQxYmVkOGY3MDUyYzNmNzJlNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMiGV9CkSfqluFDwAIYnLU1gnZKo
Z79IidSbn0XUbV2sbZS/4kzNCcsrDlhsS4orxt1q558V7py/CJEAk37r+OvtdpdM
xGCsXP4Emrk7LvqRrr5udkQyZMOYbugw6C+FkwikPzhaMUQ1xhYs0NIVoHGR9Qwh
zOBSgstMxuQ1ejFxtldkrkuWMTi4b2sduh8eYRmy8AfPSJJzCJAKIi+Ffw+gpJC4
yyL2dGrF+5Jrb/b9ULBFPZGYjbuOvS3nubcP4RNRJ5TFxD4CiBEfgyBI9y9ecfb4
5HFn3TNJYqrgT//8ypnVxjPR6WABypgtqzT6O2iFl7iB5r8/jW0wELWmmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeu1pZ9Fu25UFnRvtj3BSw/cuVIMB8GA1UdIwQY
MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOk+yqjy6
RKwdTo0W77D3rFt8qTzKDzNb7ApRBUytcL8UTQg+Ch6heTyD8XxfoVJk+LjoZ+E6
YNfWQVrQIAXUdlN0Mnt2wPRic4t2+MPSjYZrrayWGwXVM5r6qo3yg7fZOH22uIsP
QLLw/lZOShPFifxj05w1ds92K4tXpLG21dzafaNNdSrbdOQzTbGCW+OMS1mP8S91
lqJ0NR5oxw4HsTP1tfMzuHaBL64Fm90EWW4vGKDg2qfF6iUnGkbyydpjIMuxYkcd
DY5kqSm1WPC2L0kTf3lFKthG6DFAW2F9EA20Pr1XVBRY1ZHZFToR6DuwdOiFphQE
XRGqGgVQ4z0EPA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:22 2025 by rpki-client